Implementation notes: amd64, samba, crypto_aead/norx6461v1

Computer: samba
Microarchitecture: amd64; Skylake (506e3)
Architecture: amd64
CPU ID: GenuineIntel-000506e3-bfebfbff
SUPERCOP version: 20230530
Operation: crypto_aead
Primitive: norx6461v1

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
26372	6919 0 0	28573 804 1088	`T:ymm`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
26469	6919 0 0	30701 804 1088	`T:ymm`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
27010	6084 0 0	25528 780 1056	`T:ymm`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
27605	7102 0 0	30155 844 1088	`T:ymm`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
27616	7147 0 0	26683 844 1024	`T:ymm`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
27622	7102 0 0	29859 844 1056	`T:ymm`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
27914	6414 0 0	26845 836 1088	`T:ymm`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
29494	7772 0 0	28836 796 1088	`T:ymm`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
32717	10049 0 0	33837 804 1088	`T:xmm`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
32729	10049 0 0	31693 804 1088	`T:xmm`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
32751	9819 0 0	29256 780 1056	`T:xmm`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
34454	11430 0 0	34227 844 1056	`T:xmm`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
34486	11459 0 0	31035 844 1024	`T:xmm`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
34499	10534 0 0	31037 836 1088	`T:xmm`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
34534	12432 0 0	33492 796 1088	`T:xmm`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
34615	11446 0 0	34539 844 1088	`T:xmm`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
37422	5455 8 0	28427 852 1056	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
37435	3371 8 0	23989 844 1088	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
37947	5375 8 0	28643 852 1088	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
42661	5241 8 0	25043 852 1024	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
42809	4032 8 0	23577 788 1056	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
43113	5808 8 0	27715 852 1024	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
43328	15019 0 0	36827 844 1024	`T:xmm`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
45666	10462 8 0	34388 820 1088	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
46454	5242 8 0	27044 820 1088	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
47188	4365 8 0	25580 812 1088	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE

norx.c: In function 'norx_decrypt_lastblock',
norx.c: inlined from 'norx_decrypt_msg' at norx.c:502:9,
norx.c: inlined from 'norx_decrypt_msg' at norx.c:490:6:
norx.c: norx.c:313:16: warning: writing 1 byte into a region of size 0 [-Wstringop-overflow=]
norx.c: 313 | b[j] = c;
norx.c: | ~~~~~~~^~~
norx.c: norx.c: In function 'norx_decrypt_msg':
norx.c: norx.c:287:13: note: at offset 8 into destination object 'b' of size 8
norx.c: 287 | uint8_t b[BYTES(NORX_W)];
norx.c: | ^
norx.c: In function 'norx_decrypt_lastblock',
norx.c: inlined from 'norx_decrypt_msg' at norx.c:502:9,
norx.c: inlined from 'norx_decrypt_msg' at norx.c:490:6,
norx.c: inlined from 'norx_aead_decrypt' at norx.c:688:5:
norx.c: norx.c:313:16: warning: writing 1 byte into a region of size 0 [-Wstringop-overflow=]
norx.c: 313 | b[j] = c;
norx.c: | ~~~~~~~^~~
norx.c: norx.c: In function 'norx_aead_decrypt':
norx.c: norx.c:287:13: note: at offset 8 into destination object 'b' of size 8
norx.c: 287 | uint8_t b[BYTES(NORX_W)];
norx.c: | ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ymm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

norx.c: norx.c:350:24: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_aead_norx6461v1_ymm_timingleaks_encrypt' that is compiled without support for 'avx'
norx.c: const __m256i K = LOADU(k + 0);
norx.c: ^
norx.c: norx.c:47:19: note: expanded from macro 'LOADU'
norx.c: #define LOADU(in) _mm256_loadu_si256((__m256i*)(in))
norx.c: ^
norx.c: norx.c:350:24: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
norx.c: norx.c:47:19: note: expanded from macro 'LOADU'
norx.c: #define LOADU(in) _mm256_loadu_si256((__m256i*)(in))
norx.c: ^
norx.c: norx.c:355:5: error: always_inline function '_mm256_castsi128_si256' requires target feature 'avx', but would be inlined into function 'crypto_aead_norx6461v1_ymm_timingleaks_encrypt' that is compiled without support for 'avx'
norx.c: INITIALIZE(A, B, C, D, N, K);
norx.c: ^
norx.c: norx.c:270:9: note: expanded from macro 'INITIALIZE'
norx.c: A = _mm256_castsi128_si256(N); \
norx.c: ^
norx.c: norx.c:355:5: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
norx.c: norx.c:270:9: note: expanded from macro 'INITIALIZE'
norx.c: A = _mm256_castsi128_si256(N); \
norx.c: ^
norx.c: norx.c:355:5: error: '__builtin_ia32_insert128i256' needs target feature avx2
norx.c: norx.c:271:9: note: expanded from macro 'INITIALIZE'
norx.c: A = _mm256_inserti128_si256(A, _mm_set_epi64x(U1, U0), 1); \
norx.c: ^
norx.c: /usr/lib/llvm-14/lib/clang/14.0.0/include/avx2intrin.h:827:13: note: expanded from macro '_mm256_inserti128_si256'
norx.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ymm