Implementation notes: amd64, r24000, crypto_kem/ledakemcpa34

Computer: r24000
Microarchitecture: amd64; Coffee Lake (906ea)
Architecture: amd64
CPU ID: GenuineIntel-000906ea-bfebfbff
SUPERCOP version: 20230530
Operation: crypto_kem
Primitive: ledakemcpa34

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
3234030	69312 367360 0	90645 368180 1800	`T:portableopt`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221015	20221005
3242946	69312 367360 0	90645 368180 1800	`T:portableopt`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221015	20221005
3252593	80155 367360 0	100813 368180 1800	`T:portableopt`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221015	20221005
3262163	57799 367360 0	78591 368188 1848	`T:portableopt`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221015	20221005
6266019	43837 367360 0	62823 368172 1800	`T:portableopt`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221015	20221005
8017700	46977 56 0	76533 876 1800	`T:portableopt`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221015	20221005
9624660	51169 367360 0	69743 368188 1848	`T:portableopt`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221015	20221005
10569506	51892 367360 0	70935 368188 1848	`T:portableopt`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221015	20221005

Test failure

Implementation: T:portableopt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

error 111

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt

Compiler output

Implementation: T:portableopt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE

gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c: In function 'gf2x_mod_fmac':
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:803:39: warning: iteration 1 invokes undefined behavior [-Waggressive-loop-optimizations]
gf2x_arith_mod_xPplusOne.c: 803 | result[j] ^= (shifted_temp[j] << low_shift_amt) | ( zeroshift_mask &
gf2x_arith_mod_xPplusOne.c: | ~~~~~~~~~~~~^~~
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:802:9: note: within this loop
gf2x_arith_mod_xPplusOne.c: 802 | for (; j < NUM_DIGITS_GF2X_ELEMENT-1 ; j++) {
gf2x_arith_mod_xPplusOne.c: | ^~~

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt

Namespace violations

Implementation: T:portableopt
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

H_Q_matrices_generation.o generateHPosOnes T
H_Q_matrices_generation.o transposeHPosOnes T
aes256.o rijndaelEncrypt T
aes256.o rijndaelKeySetupEnc T
bf_decoding.o bf_decoding_CT T
bf_decoding.o lift_mul_dense_to_sparse_CT T
djbsort.o int32_sort T
gf2x_arith.o gf2x_mul_Kar T
gf2x_arith.o gf2x_mul_TC3 T
gf2x_arith.o gf2x_mul_avx T
gf2x_arith_mod_xPplusOne.o gf2x_mod_fmac T
gf2x_arith_mod_xPplusOne.o gf2x_mod_inverse_KTT T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_dense_to_sparse T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_monom T
gf2x_arith_mod_xPplusOne.o gf2x_transpose_in_place T
gf2x_arith_mod_xPplusOne.o rand_circulant_sparse_block T
gf2x_arith_mod_xPplusOne.o rand_error_pos T
gf2x_arith_mod_xPplusOne.o rand_error_pos_shake T
inverse_exp.o gf2x_mod_inverse_exp T
inverse_exp.o inverse_index_permutation_table D
inverse_exp.o pow_2_A T
inverse_exp.o raise_2_i_clmul T
inverse_exp.o raise_2_i_hybrid T
inverse_exp.o raise_2_i_inverse_perm_table_linsweep T
niederreiter_decrypt.o decrypt_niederreiter_indcpa T
niederreiter_encrypt.o encrypt_niederreiter_indcpa T
niederreiter_keygen.o key_gen_niederreiter T
niederreiter_keygen.o privateKey_deletion_niederreiter T
niederreiter_keygen.o publicKey_deletion_niederreiter T
rng.o AES256_CTR_DRBG_Update T
rng.o AES256_ECB T
rng.o DRBG_ctx C
rng.o deterministic_random_byte_generator T
rng.o rand_range T
rng.o rand_range_shake T
rng.o seedexpander T
rng.o seedexpander_from_trng T
rng.o seedexpander_init T
rng.o shake_seedexpander_extract T
rng.o shake_seedexpander_init T

Number of similar (compiler,implementation) pairs: 7, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt

Namespace violations

Implementation: T:portableopt
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

H_Q_matrices_generation.o generateHPosOnes T
H_Q_matrices_generation.o transposeHPosOnes T
aes256.o rijndaelEncrypt T
aes256.o rijndaelKeySetupEnc T
bf_decoding.o bf_decoding_CT T
bf_decoding.o lift_mul_dense_to_sparse_CT T
djbsort.o int32_sort T
gf2x_arith.o gf2x_mul_Kar T
gf2x_arith.o gf2x_mul_TC3 T
gf2x_arith.o gf2x_mul_comb T
gf2x_arith_mod_xPplusOne.o gf2x_digit_times_poly_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_fmac T
gf2x_arith_mod_xPplusOne.o gf2x_mod_inverse_KTT T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_dense_to_sparse T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_monom T
gf2x_arith_mod_xPplusOne.o gf2x_transpose_in_place T
gf2x_arith_mod_xPplusOne.o rand_circulant_sparse_block T
gf2x_arith_mod_xPplusOne.o rand_error_pos T
gf2x_arith_mod_xPplusOne.o rand_error_pos_shake T
inverse_exp.o gf2x_mod_inverse_exp T
inverse_exp.o inverse_factors_table D
inverse_exp.o pow_2_A T
inverse_exp.o raise_2_i_clmul T
inverse_exp.o raise_2_i_factor_inverse_permute T
inverse_exp.o raise_2_i_hybrid T
niederreiter_decrypt.o decrypt_niederreiter_indcpa T
niederreiter_encrypt.o encrypt_niederreiter_indcpa T
niederreiter_keygen.o key_gen_niederreiter T
niederreiter_keygen.o privateKey_deletion_niederreiter T
niederreiter_keygen.o publicKey_deletion_niederreiter T
rng.o AES256_CTR_DRBG_Update T
rng.o AES256_ECB T
rng.o DRBG_ctx C
rng.o deterministic_random_byte_generator T
rng.o rand_range T
rng.o rand_range_shake T
rng.o seedexpander T
rng.o seedexpander_from_trng T
rng.o seedexpander_init T
rng.o shake_seedexpander_extract T
rng.o shake_seedexpander_init T

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt