Implementation notes: amd64, panther, crypto_stream/chacha8

Test failure

error 111

Compiler output

chacha.c: In file included from chacha.c:94:
chacha.c: ./u16.h:211:13: warning: unused variable 'gvv' [-Wunused-variable]
chacha.c:     __m512i gvv = _mm512_set_epi64(776,768,520,512,264,256,8,0);
chacha.c:             ^
chacha.c: ./u16.h:144:11: warning: unused variable 't_0' [-Wunused-variable]
chacha.c:   __m512i t_0;
chacha.c:           ^
chacha.c: ./u16.h:145:11: warning: unused variable 't_1' [-Wunused-variable]
chacha.c:   __m512i t_1;
chacha.c:           ^
chacha.c: ./u16.h:146:11: warning: unused variable 't_2' [-Wunused-variable]
chacha.c:   __m512i t_2;
chacha.c:           ^
chacha.c: ./u16.h:147:11: warning: unused variable 't_3' [-Wunused-variable]
chacha.c:   __m512i t_3;
chacha.c:           ^
chacha.c: ./u16.h:158:11: warning: unused variable 't_14' [-Wunused-variable]
chacha.c:   __m512i t_14;
chacha.c:           ^
chacha.c: ./u16.h:148:11: warning: unused variable 't_4' [-Wunused-variable]
chacha.c:   __m512i t_4;
chacha.c:           ^
chacha.c: ./u16.h:149:11: warning: unused variable 't_5' [-Wunused-variable]
chacha.c:   __m512i t_5;
chacha.c:           ^
chacha.c: ...

Compiler output

chacha.c: In file included from chacha.c:94:
chacha.c: ./u16.h:211:13: warning: unused variable 'gvv' [-Wunused-variable]
chacha.c:     __m512i gvv = _mm512_set_epi64(776,768,520,512,264,256,8,0);
chacha.c:             ^
chacha.c: ./u16.h:153:11: warning: unused variable 't_9' [-Wunused-variable]
chacha.c:   __m512i t_9;
chacha.c:           ^
chacha.c: ./u16.h:152:11: warning: unused variable 't_8' [-Wunused-variable]
chacha.c:   __m512i t_8;
chacha.c:           ^
chacha.c: ./u16.h:151:11: warning: unused variable 't_7' [-Wunused-variable]
chacha.c:   __m512i t_7;
chacha.c:           ^
chacha.c: ./u16.h:148:11: warning: unused variable 't_4' [-Wunused-variable]
chacha.c:   __m512i t_4;
chacha.c:           ^
chacha.c: ./u16.h:150:11: warning: unused variable 't_6' [-Wunused-variable]
chacha.c:   __m512i t_6;
chacha.c:           ^
chacha.c: ./u16.h:149:11: warning: unused variable 't_5' [-Wunused-variable]
chacha.c:   __m512i t_5;
chacha.c:           ^
chacha.c: ./u16.h:146:11: warning: unused variable 't_2' [-Wunused-variable]
chacha.c:   __m512i t_2;
chacha.c:           ^
chacha.c: ...

Compiler output

chacha.c: In file included from chacha.c:94:
chacha.c: ./u16.h:211:13: warning: unused variable 'gvv' [-Wunused-variable]
chacha.c:     __m512i gvv = _mm512_set_epi64(776,768,520,512,264,256,8,0);
chacha.c:             ^
chacha.c: ./u16.h:144:11: warning: unused variable 't_0' [-Wunused-variable]
chacha.c:   __m512i t_0;
chacha.c:           ^
chacha.c: ./u16.h:159:11: warning: unused variable 't_15' [-Wunused-variable]
chacha.c:   __m512i t_15;
chacha.c:           ^
chacha.c: ./u16.h:151:11: warning: unused variable 't_7' [-Wunused-variable]
chacha.c:   __m512i t_7;
chacha.c:           ^
chacha.c: ./u16.h:150:11: warning: unused variable 't_6' [-Wunused-variable]
chacha.c:   __m512i t_6;
chacha.c:           ^
chacha.c: ./u16.h:156:11: warning: unused variable 't_12' [-Wunused-variable]
chacha.c:   __m512i t_12;
chacha.c:           ^
chacha.c: ./u16.h:149:11: warning: unused variable 't_5' [-Wunused-variable]
chacha.c:   __m512i t_5;
chacha.c:           ^
chacha.c: ./u16.h:157:11: warning: unused variable 't_13' [-Wunused-variable]
chacha.c:   __m512i t_13;
chacha.c:           ^
chacha.c: ...

Compiler output

chacha.c: In file included from chacha.c:94:
chacha.c: ./u16.h:211:13: warning: unused variable 'gvv' [-Wunused-variable]
chacha.c:     __m512i gvv = _mm512_set_epi64(776,768,520,512,264,256,8,0);
chacha.c:             ^
chacha.c: ./u16.h:155:11: warning: unused variable 't_11' [-Wunused-variable]
chacha.c:   __m512i t_11;
chacha.c:           ^
chacha.c: ./u16.h:156:11: warning: unused variable 't_12' [-Wunused-variable]
chacha.c:   __m512i t_12;
chacha.c:           ^
chacha.c: ./u16.h:157:11: warning: unused variable 't_13' [-Wunused-variable]
chacha.c:   __m512i t_13;
chacha.c:           ^
chacha.c: ./u16.h:158:11: warning: unused variable 't_14' [-Wunused-variable]
chacha.c:   __m512i t_14;
chacha.c:           ^
chacha.c: ./u16.h:144:11: warning: unused variable 't_0' [-Wunused-variable]
chacha.c:   __m512i t_0;
chacha.c:           ^
chacha.c: ./u16.h:152:11: warning: unused variable 't_8' [-Wunused-variable]
chacha.c:   __m512i t_8;
chacha.c:           ^
chacha.c: ./u16.h:153:11: warning: unused variable 't_9' [-Wunused-variable]
chacha.c:   __m512i t_9;
chacha.c:           ^
chacha.c: ...

Compiler output

chacha.c: In file included from chacha.c:103:
chacha.c: ./u4.h:122:7: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes' that is compiled without support for 'ssse3'
chacha.c:       VEC4_QUARTERROUND( 0, 4, 8,12);
chacha.c:       ^
chacha.c: ./u4.h:17:36: note: expanded from macro 'VEC4_QUARTERROUND'
chacha.c: #define VEC4_QUARTERROUND(a,b,c,d) VEC4_QUARTERROUND_SHUFFLE(a,b,c,d)
chacha.c:                                    ^
chacha.c: ./u4.h:12:86: note: expanded from macro 'VEC4_QUARTERROUND_SHUFFLE'
chacha.c:    x_##a = _mm_add_epi32(x_##a, x_##b); t_##a = _mm_xor_si128(x_##d, x_##a); x_##d = _mm_shuffle_epi8(t_##a, rot16); \
chacha.c:                                                                                      ^
chacha.c: ./u4.h:122:7: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes' that is compiled without support for 'ssse3'
chacha.c: ./u4.h:17:36: note: expanded from macro 'VEC4_QUARTERROUND'
chacha.c: #define VEC4_QUARTERROUND(a,b,c,d) VEC4_QUARTERROUND_SHUFFLE(a,b,c,d)
chacha.c:                                    ^
chacha.c: ./u4.h:14:86: note: expanded from macro 'VEC4_QUARTERROUND_SHUFFLE'
chacha.c:    x_##a = _mm_add_epi32(x_##a, x_##b); t_##a = _mm_xor_si128(x_##d, x_##a); x_##d = _mm_shuffle_epi8(t_##a, rot8); \
chacha.c:                                                                                      ^
chacha.c: ./u4.h:123:7: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes' that is compiled without support for 'ssse3'
chacha.c:       VEC4_QUARTERROUND( 1, 5, 9,13);
chacha.c:       ^
chacha.c: ./u4.h:17:36: note: expanded from macro 'VEC4_QUARTERROUND'
chacha.c: #define VEC4_QUARTERROUND(a,b,c,d) VEC4_QUARTERROUND_SHUFFLE(a,b,c,d)
chacha.c:                                    ^
chacha.c: ./u4.h:12:86: note: expanded from macro 'VEC4_QUARTERROUND_SHUFFLE'
chacha.c:    x_##a = _mm_add_epi32(x_##a, x_##b); t_##a = _mm_xor_si128(x_##d, x_##a); x_##d = _mm_shuffle_epi8(t_##a, rot16); \
chacha.c: ...

Compiler output

chacha.c: In file included from chacha.c:94:
chacha.c: u16.h: In function 'crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes':
chacha.c: u16.h:211:13: warning: unused variable 'gvv' [-Wunused-variable]
chacha.c:   211 |     __m512i gvv = _mm512_set_epi64(776,768,520,512,264,256,8,0);
chacha.c:       |             ^~~
chacha.c: u16.h:159:11: warning: unused variable 't_15' [-Wunused-variable]
chacha.c:   159 |   __m512i t_15;
chacha.c:       |           ^~~~
chacha.c: u16.h:158:11: warning: unused variable 't_14' [-Wunused-variable]
chacha.c:   158 |   __m512i t_14;
chacha.c:       |           ^~~~
chacha.c: u16.h:157:11: warning: unused variable 't_13' [-Wunused-variable]
chacha.c:   157 |   __m512i t_13;
chacha.c:       |           ^~~~
chacha.c: u16.h:156:11: warning: unused variable 't_12' [-Wunused-variable]
chacha.c:   156 |   __m512i t_12;
chacha.c:       |           ^~~~
chacha.c: u16.h:155:11: warning: unused variable 't_11' [-Wunused-variable]
chacha.c:   155 |   __m512i t_11;
chacha.c:       |           ^~~~
chacha.c: u16.h:154:11: warning: unused variable 't_10' [-Wunused-variable]
chacha.c:   154 |   __m512i t_10;
chacha.c:       |           ^~~~
chacha.c: u16.h:153:11: warning: unused variable 't_9' [-Wunused-variable]
chacha.c:   153 |   __m512i t_9;
chacha.c: ...

Compiler output

chacha.c: In file included from chacha.c:11:
chacha.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/arm_neon.h:28:2: error: "NEON intrinsics not available with the soft-float ABI. Please use -mfloat-abi=softfp or -mfloat-abi=hard"
chacha.c: #error "NEON intrinsics not available with the soft-float ABI. Please use -mfloat-abi=softfp or -mfloat-abi=hard"
chacha.c:  ^
chacha.c: 1 error generated.

Compiler output

chacha.c: chacha.c:11:10: fatal error: arm_neon.h: No such file or directory
chacha.c:    11 | #include <arm_neon.h>
chacha.c:       |          ^~~~~~~~~~~~
chacha.c: compilation terminated.

Compiler output

chacha.c: In file included from chacha.c:1:
chacha.c: e/chacha.c: In function 'crypto_stream_chacha8_e_merged_constbranchindex_ECRYPT_encrypt_bytes':
chacha.c: e/chacha.c:179:46: warning: 'ctarget' may be used uninitialized in this function [-Wmaybe-uninitialized]
chacha.c:   179 |         for (i = 0;i < bytes;++i) ctarget[i] = c[i];
chacha.c:       |                                   ~~~~~~~~~~~^~~~~~

Compiler output

stream.c: stream.c:126:2: error: -- Implementation supports only microarchitectures with support for Advanced Vector Extensions (AVX2 or AVX512).
stream.c: #error -- Implementation supports only microarchitectures with support for Advanced Vector Extensions (AVX2 or AVX512).
stream.c:  ^
stream.c: 1 error generated.

Compiler output

stream.c: stream.c:56:43: error: passing '__m128i *' to parameter of incompatible type '__m128i' (vector of 2 'long long' values); dereference with *
stream.c:     __m256i s0 = _mm_broadcastsi128_si256((__m128i *)sigma);
stream.c:                                           ^~~~~~~~~~~~~~~~
stream.c:                                           *
stream.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/avx2intrin.h:743:65: note: expanded from macro '_mm_broadcastsi128_si256'
stream.c: #define _mm_broadcastsi128_si256(X) _mm256_broadcastsi128_si256(X)
stream.c:                                                                 ^
stream.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/avx2intrin.h:738:37: note: passing argument to parameter '__X' here
stream.c: _mm256_broadcastsi128_si256(__m128i __X)
stream.c:                                     ^
stream.c: 1 error generated.

Compiler output

stream.c: stream.c:133:45: warning: unused variable 'key' [-Wunused-variable]
stream.c:     __attribute__ ((aligned (16))) unsigned key[8], nonce[2];
stream.c:                                             ^
stream.c: stream.c:133:53: warning: unused variable 'nonce' [-Wunused-variable]
stream.c:     __attribute__ ((aligned (16))) unsigned key[8], nonce[2];
stream.c:                                                     ^
stream.c: 2 warnings generated.

Compiler output

stream.c: stream.c: In function 'crypto_stream_chacha8_krovetz_vec128_constbranchindex_xor':
stream.c: stream.c:133:53: warning: unused variable 'nonce' [-Wunused-variable]
stream.c:   133 |     __attribute__ ((aligned (16))) unsigned key[8], nonce[2];
stream.c:       |                                                     ^~~~~
stream.c: stream.c:133:45: warning: unused variable 'key' [-Wunused-variable]
stream.c:   133 |     __attribute__ ((aligned (16))) unsigned key[8], nonce[2];
stream.c:       |                                             ^~~

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4027A0
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:114)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4021D6
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:114)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A459
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:118)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A33A
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:114)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x402790
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:114)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4033E7
   at 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16.h:112)
   by 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: test (try.c:123)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x402A8D
   at 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16.h:112)
   by 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_keystream_bytes (chacha.c:138)
   by 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: test (try.c:123)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4021C6
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:114)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A449
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:118)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A32A
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:114)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10AB5A
   at 0x...: _mm512_set1_epi32 (avx512fintrin.h:4075)
   by 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16.h:112)
   by 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_keystream_bytes (chacha.c:138)
   by 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex (estream-convert-api.h:83)
   by 0x...: test (try.c:123)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A7AA
   at 0x...: _mm512_set1_epi32 (avx512fintrin.h:4075)
   by 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16.h:112)
   by 0x...: crypto_stream_chacha8_dolbeau_amd64_avx2_constbranchindex (estream-convert-api.h:83)
   by 0x...: test (try.c:123)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4037BC
   at 0x...: crypto_stream_chacha8_e_merged_constbranchindex_ECRYPT_encrypt_bytes (chacha.c:111)
   by 0x...: crypto_stream_chacha8_e_merged_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: test (try.c:123)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x40344F
   at 0x...: salsa20_wordtobyte (chacha.c:29)
   by 0x...: crypto_stream_chacha8_e_ref_constbranchindex_ECRYPT_encrypt_bytes (chacha.c:87)
   by 0x...: crypto_stream_chacha8_e_ref_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: test (try.c:123)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A895
   at 0x...: _mm256_broadcastsi128_si256 (avx2intrin.h:950)
   by 0x...: crypto_stream_chacha8_krovetz_avx2_constbranchindex_xor (stream.c:58)
   by 0x...: crypto_stream_chacha8_krovetz_avx2_constbranchindex (stream.c:176)
   by 0x...: test (try.c:123)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A570
   at 0x...: _mm256_shuffle_epi8 (avx2intrin.h:590)
   by 0x...: crypto_stream_chacha8_krovetz_avx2_constbranchindex_xor (stream.c:71)
   by 0x...: test (try.c:123)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A479
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:118)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A35A
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:114)
   by 0x...: main (try-anything.c:345)

Passed TIMECOP

TIMECOP iterations: 10