Implementation notes: amd64, samba, crypto_aead/deoxysii128v141

Computer: samba
Microarchitecture: amd64; Skylake (506e3)
Architecture: amd64
CPU ID: GenuineIntel-000506e3-bfebfbff
SUPERCOP version: 20240625
Operation: crypto_aead
Primitive: deoxysii128v141

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
9623	40338 0 0	57780 812 1088	`T:aesni`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
9731	31699 0 0	45319 788 1056	`T:aesni`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
9904	38042 0 0	53356 812 1088	`T:aesni`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
9905	38617 0 0	55755 844 1088	`T:aesni`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
10005	37643 0 0	52539 804 1088	`T:aesni`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
10260	38585 0 0	55427 844 1056	`T:aesni`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
10289	38409 0 0	52685 836 1088	`T:aesni`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
10368	38530 0 0	51987 844 1024	`T:aesni`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
99056	144647 0 624	162020 812 1728	`T:bitslice`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
111083	115777 0 624	131004 812 1728	`T:bitslice`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
115671	193588 0 624	208484 812 1728	`T:bitslice`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
120452	110465 0 624	124007 788 1696	`T:bitslice`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
185620	36249 0 624	51564 812 1728	`T:table`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
185625	37660 0 592	55667 844 1696	`T:table`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
186784	35583 0 592	52003 844 1632	`T:table`	`clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
186918	37660 0 592	55371 844 1632	`T:table`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
188424	38497 0 624	55956 812 1728	`T:table`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
189979	33437 0 592	48093 836 1696	`T:table`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
197179	34422 0 624	48063 788 1696	`T:table`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
203268	34562 0 592	48475 844 1632	`T:table`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
205213	35931 0 624	50956 812 1728	`T:table`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
733233	27162 0 0	44883 844 1056	`T:ref`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
785003	28465 0 0	45900 812 1088	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
899021	28826 0 0	46859 844 1088	`T:ref`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
935016	26931 0 0	43371 844 1024	`T:ref`	`clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
1528971	24143 0 0	38083 844 1024	`T:ref`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
1753159	25937 0 0	41236 812 1088	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
2403351	23502 0 0	38157 836 1088	`T:ref`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
2728381	25436 0 0	40412 812 1088	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
3159711	23998 0 0	37631 788 1056	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625

Compiler output

deoxys.c: deoxys.c:99:11: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys.c:     tmp = permute( tmp, H_PERMUTATION );
deoxys.c:           ^
deoxys.c: ./tweakable-cipher.macros:7:22: note: expanded from macro 'permute'
deoxys.c: #define permute(a,b) _mm_shuffle_epi8(a,b)
deoxys.c:                      ^
deoxys.c: deoxys.c:107:3: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys.c:   TWEAKEY_SCHEDULE2( tsubkeys,subkeys, key);
deoxys.c:   ^
deoxys.c: ./tweakable-cipher.macros:31:3: note: expanded from macro 'TWEAKEY_SCHEDULE2'
deoxys.c:   ONE_KEY_ROUND( subkeys[ 0], subkeys[ 1] );    ts[ 1] = xor( subkeys[ 1], RCONS[ 1] ); \
deoxys.c:   ^
deoxys.c: ./tweakable-cipher.macros:27:13: note: expanded from macro 'ONE_KEY_ROUND'
deoxys.c:   new_key = permute( new_key, H_PERMUTATION);
deoxys.c:             ^
deoxys.c: ./tweakable-cipher.macros:7:22: note: expanded from macro 'permute'
deoxys.c: #define permute(a,b) _mm_shuffle_epi8(a,b)
deoxys.c:                      ^
deoxys.c: deoxys.c:107:3: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys.c: ./tweakable-cipher.macros:32:3: note: expanded from macro 'TWEAKEY_SCHEDULE2'
deoxys.c:   ONE_KEY_ROUND( subkeys[ 1], subkeys[ 2] );    ts[ 2] = xor( subkeys[ 2], RCONS[ 2] ); \
deoxys.c:   ^
deoxys.c: ./tweakable-cipher.macros:27:13: note: expanded from macro 'ONE_KEY_ROUND'
deoxys.c:   new_key = permute( new_key, H_PERMUTATION);
deoxys.c:             ^
deoxys.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`T:aesni`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`

Compiler output

deoxys.c: deoxys.c:89:16: warning: variable 'Auth' is uninitialized when used here [-Wuninitialized]
deoxys.c:     Auth = xor(Auth, Auth);
deoxys.c:                ^~~~
deoxys.c: ./tweakable-cipher.macros:5:32: note: expanded from macro 'xor'
deoxys.c: #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:                                ^
deoxys.c: deoxys.c:72:5: note: variable 'Auth' is declared here
deoxys.c:     __m128i Auth;
deoxys.c:     ^
deoxys.c: deoxys.c:90:18: warning: variable 'Tweak' is uninitialized when used here [-Wuninitialized]
deoxys.c:     Tweak = xor( Tweak, Tweak );
deoxys.c:                  ^~~~~
deoxys.c: ./tweakable-cipher.macros:5:32: note: expanded from macro 'xor'
deoxys.c: #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:                                ^
deoxys.c: deoxys.c:70:5: note: variable 'Tweak' is declared here
deoxys.c:     __m128i Tweak;
deoxys.c:     ^
deoxys.c: deoxys.c:1004:16: warning: variable 'Auth' is uninitialized when used here [-Wuninitialized]
deoxys.c:     Auth = xor(Auth, Auth);
deoxys.c:                ^~~~
deoxys.c: ./tweakable-cipher.macros:5:32: note: expanded from macro 'xor'
deoxys.c: #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:                                ^
deoxys.c: deoxys.c:985:5: note: variable 'Auth' is declared here
deoxys.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`T:aesnis`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:aesnis`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:aesnis`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:aesnis`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`

Compiler output

deoxys.c: deoxys.c:89:16: warning: variable 'Auth' is uninitialized when used here [-Wuninitialized]
deoxys.c:     Auth = xor(Auth, Auth);
deoxys.c:                ^~~~
deoxys.c: ./tweakable-cipher.macros:5:32: note: expanded from macro 'xor'
deoxys.c: #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:                                ^
deoxys.c: deoxys.c:72:5: note: variable 'Auth' is declared here
deoxys.c:     __m128i Auth;
deoxys.c:     ^
deoxys.c: deoxys.c:90:18: warning: variable 'Tweak' is uninitialized when used here [-Wuninitialized]
deoxys.c:     Tweak = xor( Tweak, Tweak );
deoxys.c:                  ^~~~~
deoxys.c: ./tweakable-cipher.macros:5:32: note: expanded from macro 'xor'
deoxys.c: #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:                                ^
deoxys.c: deoxys.c:70:5: note: variable 'Tweak' is declared here
deoxys.c:     __m128i Tweak;
deoxys.c:     ^
deoxys.c: deoxys.c:79:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys.c:     TWEAKEY_SCHEDULE2( subkeys, key, tmp, tmp1 );
deoxys.c:     ^
deoxys.c: ./tweakable-cipher.macros:32:3: note: expanded from macro 'TWEAKEY_SCHEDULE2'
deoxys.c:   ONE_KEY_ROUND( tmp1, tmp2 );  subkeys[ 1] = xor( tmp2, RCONST( 1) ); \
deoxys.c:   ^
deoxys.c: ./tweakable-cipher.macros:26:13: note: expanded from macro 'ONE_KEY_ROUND'
deoxys.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`T:aesnis`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`

Compiler output

deoxys.c: In file included from deoxys.c:30:
deoxys.c: deoxys.c: In function 'deoxys_aead_encrypt':
deoxys.c: tweakable-cipher.macros:5:18: warning: 'Auth' is used uninitialized [-Wuninitialized]
deoxys.c:     5 | #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:       |                  ^~~~~~~~~~~~~
deoxys.c: deoxys.c:72:13: note: 'Auth' was declared here
deoxys.c:    72 |     __m128i Auth;
deoxys.c:       |             ^~~~
deoxys.c: In file included from deoxys.c:30:
deoxys.c: tweakable-cipher.macros:5:18: warning: 'Tweak' is used uninitialized [-Wuninitialized]
deoxys.c:     5 | #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:       |                  ^~~~~~~~~~~~~
deoxys.c: deoxys.c:70:13: note: 'Tweak' was declared here
deoxys.c:    70 |     __m128i Tweak;
deoxys.c:       |             ^~~~~
deoxys.c: In file included from deoxys.c:30:
deoxys.c: deoxys.c: In function 'deoxys_aead_decrypt':
deoxys.c: tweakable-cipher.macros:5:18: warning: 'Auth' is used uninitialized [-Wuninitialized]
deoxys.c:     5 | #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:       |                  ^~~~~~~~~~~~~
deoxys.c: deoxys.c:985:13: note: 'Auth' was declared here
deoxys.c:   985 |     __m128i Auth;
deoxys.c:       |             ^~~~
deoxys.c: In file included from deoxys.c:30:
deoxys.c: tweakable-cipher.macros:5:18: warning: 'Tweak' is used uninitialized [-Wuninitialized]
deoxys.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`T:aesnis`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:aesnis`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:aesnis`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:aesnis`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`

Compiler output

deoxysii128.c: deoxysii128.c:311:14: warning: variable 'TEMP' is uninitialized when used here [-Wuninitialized]
deoxysii128.c:     TEMP=XOR(TEMP,TEMP);
deoxysii128.c:              ^~~~
deoxysii128.c: ./deoxysii128.macros:38:39: note: expanded from macro 'XOR'
deoxysii128.c: #define XOR(a,b)        _mm_xor_si128(a,b)
deoxysii128.c:                                       ^
deoxysii128.c: deoxysii128.c:131:5: note: variable 'TEMP' is declared here
deoxysii128.c:     __m128i Tweak, Tweak1, TEMP;
deoxysii128.c:     ^
deoxysii128.c: deoxysii128.c:148:14: warning: variable 'AUTH' is uninitialized when used here [-Wuninitialized]
deoxysii128.c:     AUTH=XOR(AUTH,AUTH);
deoxysii128.c:              ^~~~
deoxysii128.c: ./deoxysii128.macros:38:39: note: expanded from macro 'XOR'
deoxysii128.c: #define XOR(a,b)        _mm_xor_si128(a,b)
deoxysii128.c:                                       ^
deoxysii128.c: deoxysii128.c:133:5: note: variable 'AUTH' is declared here
deoxysii128.c:     __m128i AUTH;
deoxysii128.c:     ^
deoxysii128.c: deoxysii128.c:515:14: warning: variable 'TEMP' is uninitialized when used here [-Wuninitialized]
deoxysii128.c:     TEMP=XOR(TEMP,TEMP);
deoxysii128.c:              ^~~~
deoxysii128.c: ./deoxysii128.macros:38:39: note: expanded from macro 'XOR'
deoxysii128.c: #define XOR(a,b)        _mm_xor_si128(a,b)
deoxysii128.c:                                       ^
deoxysii128.c: deoxysii128.c:407:5: note: variable 'TEMP' is declared here
deoxysii128.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`T:bitslice`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:bitslice`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:bitslice`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:bitslice`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`

Compiler output

deoxysBCii128.c: deoxysBCii128.c:237:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'DeoxysEncrypt_Auth' that is compiled without support for 'ssse3'
deoxysBCii128.c:     packing(a);
deoxysBCii128.c:     ^
deoxysBCii128.c: ./deoxysii128.macros:417:14: note: expanded from macro 'packing'
deoxysBCii128.c:     (x)[0] = shuffle_pack((x)[0]);\
deoxysBCii128.c:              ^
deoxysBCii128.c: ./deoxysii128.macros:32:25: note: expanded from macro 'shuffle_pack'
deoxysBCii128.c: #define shuffle_pack(a) permute(a, SET8(15,11,7,3,14,10,6,2,13,9,5,1,12,8,4,0) )
deoxysBCii128.c:                         ^
deoxysBCii128.c: ./deoxysii128.macros:31:25: note: expanded from macro 'permute'
deoxysBCii128.c: #define permute(a,b)    _mm_shuffle_epi8(a,b)
deoxysBCii128.c:                         ^
deoxysBCii128.c: deoxysBCii128.c:237:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'DeoxysEncrypt_Auth' that is compiled without support for 'ssse3'
deoxysBCii128.c: ./deoxysii128.macros:418:14: note: expanded from macro 'packing'
deoxysBCii128.c:     (x)[1] = shuffle_pack((x)[1]);\
deoxysBCii128.c:              ^
deoxysBCii128.c: ./deoxysii128.macros:32:25: note: expanded from macro 'shuffle_pack'
deoxysBCii128.c: #define shuffle_pack(a) permute(a, SET8(15,11,7,3,14,10,6,2,13,9,5,1,12,8,4,0) )
deoxysBCii128.c:                         ^
deoxysBCii128.c: ./deoxysii128.macros:31:25: note: expanded from macro 'permute'
deoxysBCii128.c: #define permute(a,b)    _mm_shuffle_epi8(a,b)
deoxysBCii128.c:                         ^
deoxysBCii128.c: deoxysBCii128.c:237:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'DeoxysEncrypt_Auth' that is compiled without support for 'ssse3'
deoxysBCii128.c: ./deoxysii128.macros:419:14: note: expanded from macro 'packing'
deoxysBCii128.c:     (x)[2] = shuffle_pack((x)[2]);\
deoxysBCii128.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`T:bitslice`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`

Compiler output

deoxysii128.c: In file included from deoxysii128.c:30:
deoxysii128.c: deoxysii128.c: In function 'deoxys_aead_encrypt_8':
deoxysii128.c: deoxysii128.macros:38:25: warning: 'TEMP' is used uninitialized [-Wuninitialized]
deoxysii128.c:    38 | #define XOR(a,b)        _mm_xor_si128(a,b)
deoxysii128.c:       |                         ^~~~~~~~~~~~~
deoxysii128.c: deoxysii128.c:131:28: note: 'TEMP' was declared here
deoxysii128.c:   131 |     __m128i Tweak, Tweak1, TEMP;
deoxysii128.c:       |                            ^~~~
deoxysii128.c: In file included from deoxysii128.c:30:
deoxysii128.c: deoxysii128.c: In function 'deoxys_aead_decrypt_8':
deoxysii128.c: deoxysii128.macros:38:25: warning: 'TEMP' is used uninitialized [-Wuninitialized]
deoxysii128.c:    38 | #define XOR(a,b)        _mm_xor_si128(a,b)
deoxysii128.c:       |                         ^~~~~~~~~~~~~
deoxysii128.c: deoxysii128.c:407:28: note: 'TEMP' was declared here
deoxysii128.c:   407 |     __m128i Tweak, Tweak1, TEMP;
deoxysii128.c:       |                            ^~~~

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`T:bitslice`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:bitslice`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:bitslice`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:bitslice`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`