Implementation notes: amd64, saber214, crypto_hash/shake256

Compiler output

keccak.s: keccak.s:1:1: error: unexpected token at start of statement
keccak.s: @
keccak.s: ^
keccak.s: keccak.s:2:1: error: unexpected token at start of statement
keccak.s: @ Implementation by the Keccak, Keyak and Ketje Teams, namely, Guido Bertoni,
keccak.s: ^
keccak.s: keccak.s:3:1: error: unexpected token at start of statement
keccak.s: @ Joan Daemen, Michaël Peeters, Gilles Van Assche and Ronny Van Keer, hereby
keccak.s: keccak.s:4:1: error: unexpected token at start of statement
keccak.s: @ denoted as "the implementer".
keccak.s: ^
keccak.s: keccak.s:5:1: error: unexpected token at start of statement
keccak.s: @
keccak.s: ^
keccak.s: keccak.s:6:1: error: unexpected token at start of statement
keccak.s: @ For more information, feedback or questions, please refer to our websites:
keccak.s: ^
keccak.s: keccak.s:7:1: error: unexpected token at start of statement
keccak.s: @ http://keccak.noekeon.org/
keccak.s: ^
keccak.s: keccak.s:8:1: error: unexpected token at start of statement
keccak.s: @ http://keyak.noekeon.org/
keccak.s: ^
keccak.s: keccak.s:9:1: error: unexpected token at start of statement
keccak.s: @ http://ketje.noekeon.org/
keccak.s: ...

Compiler output

keccak.s: keccak.s: Assembler messages:
keccak.s: keccak.s:1: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:2: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:3: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:4: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:5: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:6: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:7: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:8: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:9: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:10: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:11: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:12: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:13: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:14: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:16: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:17: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:18: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:21: Error: unknown pseudo-op: `.syntax'
keccak.s: keccak.s:22: Error: unknown pseudo-op: `.fpu'
keccak.s: keccak.s:23: Error: unknown pseudo-op: `.arm'
keccak.s: keccak.s:26: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:27: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:29: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:56: Error: junk at end of line, first unrecognized character is `@'
keccak.s: ...

Compiler output

keccak.s: keccak.s:258:20: error: unknown token in expression
keccak.s:     movi    v0.2d, #0
keccak.s:                    ^
keccak.s: keccak.s:259:20: error: unknown token in expression
keccak.s:     movi    v1.2d, #0
keccak.s:                    ^
keccak.s: keccak.s:260:20: error: unknown token in expression
keccak.s:     movi    v2.2d, #0
keccak.s:                    ^
keccak.s: keccak.s:261:20: error: unknown token in expression
keccak.s:     movi    v3.2d, #0
keccak.s:                    ^
keccak.s: keccak.s:262:15: error: unknown token in expression
keccak.s:     st4     { v0.2d, v1.2d, v2.2d, v3.2d }, [x0], #64  // Clear 8lanes=64 bytes at a time
keccak.s:               ^
keccak.s: keccak.s:263:15: error: unknown token in expression
keccak.s:     st4     { v0.2d, v1.2d, v2.2d, v3.2d }, [x0], #64
keccak.s:               ^
keccak.s: keccak.s:264:15: error: unknown token in expression
keccak.s:     st4     { v0.2d, v1.2d, v2.2d, v3.2d }, [x0], #64
keccak.s:               ^
keccak.s: keccak.s:265:15: error: unknown token in expression
keccak.s:     st1     { v0.d }[0], [x0], #8
keccak.s:               ^
keccak.s: keccak.s:276:20: error: expected ']' in brackets expression
keccak.s: ...

Compiler output

keccak.s: keccak.s: Assembler messages:
keccak.s: keccak.s:258: Error: no such instruction: `movi v0.2d,'
keccak.s: keccak.s:259: Error: no such instruction: `movi v1.2d,'
keccak.s: keccak.s:260: Error: no such instruction: `movi v2.2d,'
keccak.s: keccak.s:261: Error: no such instruction: `movi v3.2d,'
keccak.s: keccak.s:262: Error: no such instruction: `st4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0],'
keccak.s: keccak.s:263: Error: no such instruction: `st4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0],'
keccak.s: keccak.s:264: Error: no such instruction: `st4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0],'
keccak.s: keccak.s:265: Error: no such instruction: `st1 { v0.d }[0],[x0],'
keccak.s: keccak.s:276: Error: no such instruction: `ldrb w3,[x0,x2]'
keccak.s: keccak.s:277: Error: no such instruction: `eor w3,w3,w1'
keccak.s: keccak.s:278: Error: too many memory references for `str'
keccak.s: keccak.s:289: Error: too many memory references for `add'
keccak.s: keccak.s:290: Error: too many memory references for `sub'
keccak.s: keccak.s:291: Error: no such instruction: `b.cc KeccakP1600_AddBytes_Exit//length 0,move along'
keccak.s: keccak.s:293: Error: too many memory references for `sub'
keccak.s: keccak.s:294: Error: no such instruction: `b.cc KeccakP1600_AddBytes_Lanes//Jump if length is negative'
keccak.s: keccak.s:295: Error: no such instruction: `ld4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0]'
keccak.s: keccak.s:296: Error: no such instruction: `ld4 { v4.2d,v5.2d,v6.2d,v7.2d },[x1],'
keccak.s: keccak.s:297: Error: no such instruction: `eor v0.16b,v0.16b,v4.16b'
keccak.s: keccak.s:298: Error: no such instruction: `eor v1.16b,v1.16b,v5.16b'
keccak.s: keccak.s:299: Error: no such instruction: `eor v2.16b,v2.16b,v6.16b'
keccak.s: keccak.s:300: Error: no such instruction: `eor v3.16b,v3.16b,v7.16b'
keccak.s: keccak.s:301: Error: no such instruction: `st4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0],'
keccak.s: keccak.s:302: Error: no such instruction: `b KeccakP1600_AddBytes_8LanesLoop'
keccak.s: ...

Compiler output

KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:28:17: warning: unknown pragma ignored [-Wunknown-pragmas]
KeccakP-1600-AVX2.c:     #pragma GCC optimize("2")
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: warning: unused variable 'SLLV_A1' [-Wunused-variable]
KeccakP-1600-AVX2.c:     KECCAK_CONSTANTS
KeccakP-1600-AVX2.c:     ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:95:34: note: expanded from macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c: _ROLV_CONST(_A0,  0,  1, 62, 28) \
KeccakP-1600-AVX2.c:                                  ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:85:17: note: expanded from macro '\
KeccakP-1600-AVX2.c: _ROLV_CONST'
KeccakP-1600-AVX2.c:     _ROLV_TYPE  SLLV##name = SET(i0, i1, i2, i3); \
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: <scratch space>:199:1: note: expanded from here
KeccakP-1600-AVX2.c: SLLV_A1
KeccakP-1600-AVX2.c: ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: warning: unused variable 'SRLV_A4' [-Wunused-variable]
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:98:34: note: expanded from macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c: _ROLV_CONST(_A3, 41, 45, 15, 21) \
KeccakP-1600-AVX2.c:                                  ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: note: expanded from macro '\
KeccakP-1600-AVX2.c: _ROLV_CONST'
KeccakP-1600-AVX2.c:     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: <scratch space>:206:1: note: expanded from here
KeccakP-1600-AVX2.c: ...

Compiler output

KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:28:17: warning: unknown pragma ignored [-Wunknown-pragmas]
KeccakP-1600-AVX2.c:     #pragma GCC optimize("2")
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: warning: unused variable 'SRLV_A3' [-Wunused-variable]
KeccakP-1600-AVX2.c:     KECCAK_CONSTANTS
KeccakP-1600-AVX2.c:     ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:97:34: note: expanded from macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c: _ROLV_CONST(_A2,  3, 10, 43, 25) \
KeccakP-1600-AVX2.c:                                  ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: note: expanded from macro '\
KeccakP-1600-AVX2.c: _ROLV_CONST'
KeccakP-1600-AVX2.c:     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: <scratch space>:204:1: note: expanded from here
KeccakP-1600-AVX2.c: SRLV_A3
KeccakP-1600-AVX2.c: ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: warning: unused variable 'SLLV_A0' [-Wunused-variable]
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:94:32: note: expanded from macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c: ROLV_CONST(C4, 27, 20, 39,  8) \
KeccakP-1600-AVX2.c:                                ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:85:17: note: expanded from macro '\
KeccakP-1600-AVX2.c: _ROLV_CONST'
KeccakP-1600-AVX2.c:     _ROLV_TYPE  SLLV##name = SET(i0, i1, i2, i3); \
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: <scratch space>:197:1: note: expanded from here
KeccakP-1600-AVX2.c: ...

Compiler output

KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:28:17: warning: unknown pragma ignored [-Wunknown-pragmas]
KeccakP-1600-AVX2.c:     #pragma GCC optimize("2")
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: warning: unused variable 'SRLV_A2' [-Wunused-variable]
KeccakP-1600-AVX2.c:     KECCAK_CONSTANTS
KeccakP-1600-AVX2.c:     ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:96:34: note: expanded from macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c: _ROLV_CONST(_A1, 36, 44,  6, 55) \
KeccakP-1600-AVX2.c:                                  ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: note: expanded from macro '\
KeccakP-1600-AVX2.c: _ROLV_CONST'
KeccakP-1600-AVX2.c:     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: <scratch space>:202:1: note: expanded from here
KeccakP-1600-AVX2.c: SRLV_A2
KeccakP-1600-AVX2.c: ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: warning: unused variable 'SRLV_A4' [-Wunused-variable]
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:98:34: note: expanded from macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c: _ROLV_CONST(_A3, 41, 45, 15, 21) \
KeccakP-1600-AVX2.c:                                  ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: note: expanded from macro '\
KeccakP-1600-AVX2.c: _ROLV_CONST'
KeccakP-1600-AVX2.c:     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: <scratch space>:206:1: note: expanded from here
KeccakP-1600-AVX2.c: ...

Compiler output

KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:28:17: warning: unknown pragma ignored [-Wunknown-pragmas]
KeccakP-1600-AVX2.c:     #pragma GCC optimize("2")
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: warning: unused variable 'SRLV_C4' [-Wunused-variable]
KeccakP-1600-AVX2.c:     KECCAK_CONSTANTS
KeccakP-1600-AVX2.c:     ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:99:34: note: expanded from macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c: _ROLV_CONST(_A4, 18,  2, 61, 56) \
KeccakP-1600-AVX2.c:                                  ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: note: expanded from macro '\
KeccakP-1600-AVX2.c: _ROLV_CONST'
KeccakP-1600-AVX2.c:     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: <scratch space>:208:1: note: expanded from here
KeccakP-1600-AVX2.c: SRLV_C4
KeccakP-1600-AVX2.c: ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: warning: unused variable 'SRLV_A0' [-Wunused-variable]
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:94:32: note: expanded from macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c: ROLV_CONST(C4, 27, 20, 39,  8) \
KeccakP-1600-AVX2.c:                                ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: note: expanded from macro '\
KeccakP-1600-AVX2.c: _ROLV_CONST'
KeccakP-1600-AVX2.c:     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: <scratch space>:198:1: note: expanded from here
KeccakP-1600-AVX2.c: ...

Compiler output

KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:28:17: warning: unknown pragma ignored [-Wunknown-pragmas]
KeccakP-1600-AVX2.c:     #pragma GCC optimize("2")
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:506:13: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_hash_shake256_kcp_optimized1600AVX2_constbranchindex_KeccakP1600_AddBytes' that is compiled without support for 'avx'
KeccakP-1600-AVX2.c:     s->a0 = LOAD(t + 0*5);
KeccakP-1600-AVX2.c:             ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:62:41: note: expanded from macro 'LOAD'
KeccakP-1600-AVX2.c: #define LOAD(p)                         _mm256_loadu_si256((const __m256i *)(p))
KeccakP-1600-AVX2.c:                                         ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:506:13: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:62:41: note: expanded from macro 'LOAD'
KeccakP-1600-AVX2.c: #define LOAD(p)                         _mm256_loadu_si256((const __m256i *)(p))
KeccakP-1600-AVX2.c:                                         ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:507:13: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_hash_shake256_kcp_optimized1600AVX2_constbranchindex_KeccakP1600_AddBytes' that is compiled without support for 'avx'
KeccakP-1600-AVX2.c:     s->a1 = LOAD(t + 1*5);
KeccakP-1600-AVX2.c:             ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:62:41: note: expanded from macro 'LOAD'
KeccakP-1600-AVX2.c: #define LOAD(p)                         _mm256_loadu_si256((const __m256i *)(p))
KeccakP-1600-AVX2.c:                                         ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:507:13: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:62:41: note: expanded from macro 'LOAD'
KeccakP-1600-AVX2.c: #define LOAD(p)                         _mm256_loadu_si256((const __m256i *)(p))
KeccakP-1600-AVX2.c:                                         ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:508:13: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_hash_shake256_kcp_optimized1600AVX2_constbranchindex_KeccakP1600_AddBytes' that is compiled without support for 'avx'
KeccakP-1600-AVX2.c:     s->a2 = LOAD(t + 2*5);
KeccakP-1600-AVX2.c: ...

Compiler output

KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c: In function 'crypto_hash_shake256_kcp_optimized1600AVX2_constbranchindex_KeccakP1600_Permute_Nrounds':
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: warning: unused variable 'SRLV_C4' [-Wunused-variable]
KeccakP-1600-AVX2.c:    86 |     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:       |                 ^~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:100:1: note: in expansion of macro '_ROLV_CONST'
KeccakP-1600-AVX2.c:   100 | _ROLV_CONST(_C4, 27, 20, 39,  8)
KeccakP-1600-AVX2.c:       | ^~~~~~~~~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: note: in expansion of macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c:   637 |     KECCAK_CONSTANTS
KeccakP-1600-AVX2.c:       |     ^~~~~~~~~~~~~~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:85:17: warning: unused variable 'SLLV_C4' [-Wunused-variable]
KeccakP-1600-AVX2.c:    85 |     _ROLV_TYPE  SLLV##name = SET(i0, i1, i2, i3); \
KeccakP-1600-AVX2.c:       |                 ^~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:100:1: note: in expansion of macro '_ROLV_CONST'
KeccakP-1600-AVX2.c:   100 | _ROLV_CONST(_C4, 27, 20, 39,  8)
KeccakP-1600-AVX2.c:       | ^~~~~~~~~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: note: in expansion of macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c:   637 |     KECCAK_CONSTANTS
KeccakP-1600-AVX2.c:       |     ^~~~~~~~~~~~~~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: warning: unused variable 'SRLV_A4' [-Wunused-variable]
KeccakP-1600-AVX2.c:    86 |     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:       |                 ^~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:99:1: note: in expansion of macro '_ROLV_CONST'
KeccakP-1600-AVX2.c:    99 | _ROLV_CONST(_A4, 18,  2, 61, 56) \
KeccakP-1600-AVX2.c:       | ^~~~~~~~~~~
KeccakP-1600-AVX2.c: ...

Compiler output

KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:238:41: error: always_inline function '_mm512_maskz_loadu_epi64' requires target feature 'avx512f', but would be inlined into function 'KeccakP1600_AddBytes' that is compiled without support for 'avx512f'
KeccakP-1600-AVX512.c:         STORE_8Lanes( stateAsLanes, XOR(LOAD_8Lanes(stateAsLanes), LOAD_8Lanes((const UINT64*)data)));
KeccakP-1600-AVX512.c:                                         ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:215:37: note: expanded from macro 'LOAD_8Lanes'
KeccakP-1600-AVX512.c: #define LOAD_8Lanes(a)              LOAD_Lanes(0xFF,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:212:37: note: expanded from macro 'LOAD_Lanes'
KeccakP-1600-AVX512.c: #define LOAD_Lanes(m,a)             _mm512_maskz_loadu_epi64(m,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:238:41: error: AVX vector return of type '__m512i' (vector of 8 'long long' values) without 'avx512f' enabled changes the ABI
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:215:37: note: expanded from macro 'LOAD_8Lanes'
KeccakP-1600-AVX512.c: #define LOAD_8Lanes(a)              LOAD_Lanes(0xFF,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:212:37: note: expanded from macro 'LOAD_Lanes'
KeccakP-1600-AVX512.c: #define LOAD_Lanes(m,a)             _mm512_maskz_loadu_epi64(m,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:238:68: error: always_inline function '_mm512_maskz_loadu_epi64' requires target feature 'avx512f', but would be inlined into function 'KeccakP1600_AddBytes' that is compiled without support for 'avx512f'
KeccakP-1600-AVX512.c:         STORE_8Lanes( stateAsLanes, XOR(LOAD_8Lanes(stateAsLanes), LOAD_8Lanes((const UINT64*)data)));
KeccakP-1600-AVX512.c:                                                                    ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:215:37: note: expanded from macro 'LOAD_8Lanes'
KeccakP-1600-AVX512.c: #define LOAD_8Lanes(a)              LOAD_Lanes(0xFF,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:212:37: note: expanded from macro 'LOAD_Lanes'
KeccakP-1600-AVX512.c: #define LOAD_Lanes(m,a)             _mm512_maskz_loadu_epi64(m,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: ...

Compiler output

KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c: In function 'KeccakP1600_Permute_12rounds':
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:523:18: warning: unused variable 'i' [-Wunused-variable]
KeccakP-1600-AVX512.c:   523 |     unsigned int i;
KeccakP-1600-AVX512.c:       |                  ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c: In function 'KeccakP1600_AddBytes':
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:216:37: warning: AVX512F vector return without AVX512F enabled changes the ABI [-Wpsabi]
KeccakP-1600-AVX512.c:   216 | #define STORE_Lanes(a,m,v)          _mm512_mask_storeu_epi64(a,m,v)
KeccakP-1600-AVX512.c:       |                                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:219:37: note: in expansion of macro 'STORE_Lanes'
KeccakP-1600-AVX512.c:   219 | #define STORE_8Lanes(a,v)           STORE_Lanes(a,0xFF,v)
KeccakP-1600-AVX512.c:       |                                     ^~~~~~~~~~~
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:238:9: note: in expansion of macro 'STORE_8Lanes'
KeccakP-1600-AVX512.c:   238 |         STORE_8Lanes( stateAsLanes, XOR(LOAD_8Lanes(stateAsLanes), LOAD_8Lanes((const UINT64*)data)));
KeccakP-1600-AVX512.c:       |         ^~~~~~~~~~~~
KeccakP-1600-AVX512.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/11/include/immintrin.h:49,
KeccakP-1600-AVX512.c:                  from KeccakP-1600-AVX512.c:26:
KeccakP-1600-AVX512.c: /usr/lib/gcc/x86_64-linux-gnu/11/include/avx512fintrin.h:6440:1: error: inlining failed in call to 'always_inline' '_mm512_mask_storeu_epi64': target specific option mismatch
KeccakP-1600-AVX512.c:  6440 | _mm512_mask_storeu_epi64 (void *__P, __mmask8 __U, __m512i __A)
KeccakP-1600-AVX512.c:       | ^~~~~~~~~~~~~~~~~~~~~~~~
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:216:37: note: called from here
KeccakP-1600-AVX512.c:   216 | #define STORE_Lanes(a,m,v)          _mm512_mask_storeu_epi64(a,m,v)
KeccakP-1600-AVX512.c:       |                                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:219:37: note: in expansion of macro 'STORE_Lanes'
KeccakP-1600-AVX512.c:   219 | #define STORE_8Lanes(a,v)           STORE_Lanes(a,0xFF,v)
KeccakP-1600-AVX512.c:       |                                     ^~~~~~~~~~~
KeccakP-1600-AVX512.c: ...

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x260DE4
   at 0x...: CryptoPP::DetectX86Features() (cpu.cpp:605)
   by 0x...: call_init (libc-start.c:145)
   by 0x...: __libc_start_main@@GLIBC_2.34 (libc-start.c:379)
   by 0x...: (below main) (in /home/djb/supercop-data/saber214/amd64/try/cpp/g++_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/cryptopp/work/try-timecop)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x261264
   at 0x...: CryptoPP::DetectX86Features() (cpu.cpp:605)
   by 0x...: call_init (libc-start.c:145)
   by 0x...: __libc_start_main@@GLIBC_2.34 (libc-start.c:379)
   by 0x...: (below main) (in /home/djb/supercop-data/saber214/amd64/try/cpp/g++_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/cryptopp/work/try-timecop)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x260B44
   at 0x...: CryptoPP::DetectX86Features() (cpu.cpp:605)
   by 0x...: call_init (libc-start.c:145)
   by 0x...: __libc_start_main@@GLIBC_2.34 (libc-start.c:379)
   by 0x...: (below main) (in /home/djb/supercop-data/saber214/amd64/try/cpp/g++_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/cryptopp/work/try-timecop)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x260544
   at 0x...: CryptoPP::DetectX86Features() (cpu.cpp:605)
   by 0x...: call_init (libc-start.c:145)
   by 0x...: __libc_start_main@@GLIBC_2.34 (libc-start.c:379)
   by 0x...: (below main) (in /home/djb/supercop-data/saber214/amd64/try/cpp/g++_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/cryptopp/work/try-timecop)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109DCD
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109A4A
   at 0x...: core (try-anything.c:53)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A870
   at 0x...: KeccakP1600_ExtractLanes (KeccakOnCore32bits.inc:209)
   by 0x...: KeccakP1600_ExtractBytes (KeccakOnCore32bits.inc:235)
   by 0x...: KeccakWidth1600_Sponge (KeccakOnCore32bits.inc:293)
   by 0x...: crypto_hash_shake256_oncore32bits_constbranchindex (SHAKE256onCore32bits.c:23)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A8F0
   at 0x...: KeccakP1600_ExtractLanes (KeccakOnCore32bits.inc:209)
   by 0x...: KeccakP1600_ExtractBytes (KeccakOnCore32bits.inc:235)
   by 0x...: KeccakWidth1600_Sponge (KeccakOnCore32bits.inc:293)
   by 0x...: crypto_hash_shake256_oncore32bits_constbranchindex (SHAKE256onCore32bits.c:23)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109E0D
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109A8A
   at 0x...: core (try-anything.c:53)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109C6D
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1098EA
   at 0x...: core (try-anything.c:53)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A4CE
   at 0x...: memcpy (string_fortified.h:29)
   by 0x...: KeccakWidth1600_Sponge (KeccakOnCore64bits.inc:150)
   by 0x...: crypto_hash_shake256_oncore64bits_constbranchindex (SHAKE256onCore64bits.c:23)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109E8D
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109B0A
   at 0x...: core (try-anything.c:53)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B0CD
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: crypto_hash_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B16D
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: crypto_hash_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10AC6D
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: crypto_hash_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A9FD
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: crypto_hash_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B29D
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: crypto_hash_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109DED
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109A6A
   at 0x...: core (try-anything.c:53)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:85)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10AECD
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: crypto_hash_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10AC1D
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usekcp/work/try-timecop)
   by 0x...: crypto_hash_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B0ED
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: crypto_xof_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: crypto_hash_shake256_usexof_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B18D
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: crypto_xof_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: crypto_hash_shake256_usexof_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10AC8D
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: crypto_xof_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: crypto_hash_shake256_usexof_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10AA1D
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: crypto_xof_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: crypto_hash_shake256_usexof_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B2BD
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: crypto_xof_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: crypto_hash_shake256_usexof_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10AEFD
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: crypto_xof_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: crypto_hash_shake256_usexof_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10AC2D
   at 0x...: KeccakP1600_Initialize (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: KeccakWidth1600_Sponge (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_hash/shake256/usexof/work/try-timecop)
   by 0x...: crypto_xof_shake256_usekcp_constbranchindex (hash.c:6)
   by 0x...: crypto_hash_shake256_usexof_constbranchindex (hash.c:6)
   by 0x...: test (try.c:90)
   by 0x...: main (try-anything.c:345)

Passed TIMECOP

TIMECOP iterations: 10