Implementation notes: amd64, speed2supercop, crypto_aead/hs1sivhiv2

Computer: speed2supercop
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-1fc9cbf5
SUPERCOP version: 20240625
Operation: crypto_aead
Primitive: hs1sivhiv2
TimeObject sizeTest sizeImplementationCompilerBenchmark dateSUPERCOP version
1045612787 0 031981 808 856T:dolbeau/amd64-avx2clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1159212213 0 035845 808 872T:fasterclang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1167212093 0 034069 768 928T:fastergcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1200811741 0 035149 808 872T:fasterclang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1210012698 0 035813 808 872T:dolbeau/amd64-avx2clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1211613923 0 033380 760 928T:dolbeau/amd64-avx2gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1214012730 0 036053 808 872T:dolbeau/amd64-avx2clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
123088805 0 026696 744 896T:fastergcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
124209867 0 029861 768 928T:fastergcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
128729278 0 028740 760 928T:fastergcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1885611027 0 030245 808 856T:dolbeau/amd64-sseclang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1907611242 0 034493 808 872T:dolbeau/amd64-sseclang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
1908811242 0 034685 808 872T:dolbeau/amd64-sseclang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
2024813135 0 032572 760 928T:dolbeau/amd64-ssegcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
366566989 0 030461 808 872T:refclang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
367048541 0 032173 808 872T:refclang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
386887653 0 029878 808 856T:refclang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
486684862 0 024222 808 856T:refclang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
758765930 0 025477 768 928T:refgcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625

Test failure


error 111
crypto_aead_decrypt allows trivial forgeries

Number of similar (implementation,compiler) pairs: 10, namely:
ImplementationCompiler
T:dolbeau/amd64-avx2clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-avx2gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-avx2gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-sseclang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-ssegcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-ssegcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refclang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:refgcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refgcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refgcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)

Test failure


error 111
crypto_aead_decrypt returns nonzero

Number of similar (implementation,compiler) pairs: 2, namely:
ImplementationCompiler
T:dolbeau/amd64-avx2gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-ssegcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)

Test failure


error 111

Number of similar (implementation,compiler) pairs: 2, namely:
ImplementationCompiler
T:fasterclang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:fasterclang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


encrypt.c: encrypt.c:484:24: warning: unused variable 'ia1' [-Wunused-variable]
encrypt.c:       ALIGN32 uint64_t ia1[4];
encrypt.c:                        ^
encrypt.c: encrypt.c:333:19: warning: unused variable 'j' [-Wunused-variable]
encrypt.c:     unsigned i=0, j;
encrypt.c:                   ^
encrypt.c: encrypt.c:625:12: warning: variable 'atot' set but not used [-Wunused-but-set-variable]
encrypt.c:   unsigned atot, mtot, arnd64, mrnd64;
encrypt.c:            ^
encrypt.c: encrypt.c:625:18: warning: variable 'mtot' set but not used [-Wunused-but-set-variable]
encrypt.c:   unsigned atot, mtot, arnd64, mrnd64;
encrypt.c:                  ^
encrypt.c: 4 warnings generated.

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:dolbeau/amd64-avx2clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-avx2clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-avx2clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-avx2clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


encrypt.c: encrypt.c:90:2: error: "This code requires AVX2 to work"
encrypt.c: #error "This code requires AVX2 to work"
encrypt.c:  ^
encrypt.c: encrypt.c:484:24: warning: unused variable 'ia1' [-Wunused-variable]
encrypt.c:       ALIGN32 uint64_t ia1[4];
encrypt.c:                        ^
encrypt.c: encrypt.c:333:19: warning: unused variable 'j' [-Wunused-variable]
encrypt.c:     unsigned i=0, j;
encrypt.c:                   ^
encrypt.c: encrypt.c:625:12: warning: variable 'atot' set but not used [-Wunused-but-set-variable]
encrypt.c:   unsigned atot, mtot, arnd64, mrnd64;
encrypt.c:            ^
encrypt.c: encrypt.c:625:18: warning: variable 'mtot' set but not used [-Wunused-but-set-variable]
encrypt.c:   unsigned atot, mtot, arnd64, mrnd64;
encrypt.c:                  ^
encrypt.c: 4 warnings and 1 error generated.

Number of similar (implementation,compiler) pairs: 1, namely:
ImplementationCompiler
T:dolbeau/amd64-avx2clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


encrypt.c: encrypt.c:85: warning: "_bswap64" redefined
encrypt.c:    85 | #define _bswap64(a) __builtin_bswap64(a)
encrypt.c:       |
encrypt.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/13/include/x86gprintrin.h:33,
encrypt.c:                  from /usr/lib/gcc/x86_64-linux-gnu/13/include/immintrin.h:27,
encrypt.c:                  from encrypt.c:54:
encrypt.c: /usr/lib/gcc/x86_64-linux-gnu/13/include/ia32intrin.h:273: note: this is the location of the previous definition
encrypt.c:   273 | #define _bswap64(a)             __bswapq(a)
encrypt.c:       |
encrypt.c: encrypt.c:86: warning: "_bswap" redefined
encrypt.c:    86 | #define _bswap(a) __builtin_bswap(a)
encrypt.c:       |
encrypt.c: /usr/lib/gcc/x86_64-linux-gnu/13/include/ia32intrin.h:307: note: this is the location of the previous definition
encrypt.c:   307 | #define _bswap(a)               __bswapd(a)
encrypt.c:       |
encrypt.c: encrypt.c: In function 'prf_hash2_3':
encrypt.c: encrypt.c:484:24: warning: unused variable 'ia1' [-Wunused-variable]
encrypt.c:   484 |       ALIGN32 uint64_t ia1[4];
encrypt.c:       |                        ^~~
encrypt.c: encrypt.c:333:19: warning: unused variable 'j' [-Wunused-variable]
encrypt.c:   333 |     unsigned i=0, j;
encrypt.c:       |                   ^
encrypt.c: encrypt.c: In function 'hs1_data':
encrypt.c: encrypt.c:625:18: warning: variable 'mtot' set but not used [-Wunused-but-set-variable]
encrypt.c:   625 |   unsigned atot, mtot, arnd64, mrnd64;
encrypt.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:dolbeau/amd64-avx2gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-avx2gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-avx2gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-avx2gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)

Compiler output


encrypt.c: encrypt.c:90:2: error: "This code requires AVX512F to work"
encrypt.c: #error "This code requires AVX512F to work"
encrypt.c:  ^
encrypt.c: In file included from encrypt.c:195:
encrypt.c: ./c368.h:143:11: warning: unused variable 't_0' [-Wunused-variable]
encrypt.c:   __m512i t_0;
encrypt.c:           ^
encrypt.c: ./c368.h:144:11: warning: unused variable 't_1' [-Wunused-variable]
encrypt.c:   __m512i t_1;
encrypt.c:           ^
encrypt.c: ./c368.h:145:11: warning: unused variable 't_2' [-Wunused-variable]
encrypt.c:   __m512i t_2;
encrypt.c:           ^
encrypt.c: ./c368.h:146:11: warning: unused variable 't_3' [-Wunused-variable]
encrypt.c:   __m512i t_3;
encrypt.c:           ^
encrypt.c: ./c368.h:147:11: warning: unused variable 't_4' [-Wunused-variable]
encrypt.c:   __m512i t_4;
encrypt.c:           ^
encrypt.c: ./c368.h:148:11: warning: unused variable 't_5' [-Wunused-variable]
encrypt.c:   __m512i t_5;
encrypt.c:           ^
encrypt.c: ./c368.h:149:11: warning: unused variable 't_6' [-Wunused-variable]
encrypt.c:   __m512i t_6;
encrypt.c:           ^
encrypt.c: ...

Number of similar (implementation,compiler) pairs: 5, namely:
ImplementationCompiler
T:dolbeau/amd64-avx512clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-avx512clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-avx512clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-avx512clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-avx512clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


encrypt.c: encrypt.c:85: warning: "_bswap64" redefined
encrypt.c:    85 | #define _bswap64(a) __builtin_bswap64(a)
encrypt.c:       |
encrypt.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/13/include/x86gprintrin.h:33,
encrypt.c:                  from /usr/lib/gcc/x86_64-linux-gnu/13/include/immintrin.h:27,
encrypt.c:                  from encrypt.c:54:
encrypt.c: /usr/lib/gcc/x86_64-linux-gnu/13/include/ia32intrin.h:273: note: this is the location of the previous definition
encrypt.c:   273 | #define _bswap64(a)             __bswapq(a)
encrypt.c:       |
encrypt.c: encrypt.c:86: warning: "_bswap" redefined
encrypt.c:    86 | #define _bswap(a) __builtin_bswap(a)
encrypt.c:       |
encrypt.c: /usr/lib/gcc/x86_64-linux-gnu/13/include/ia32intrin.h:307: note: this is the location of the previous definition
encrypt.c:   307 | #define _bswap(a)               __bswapd(a)
encrypt.c:       |
encrypt.c: encrypt.c:90:2: error: #error "This code requires AVX512F to work"
encrypt.c:    90 | #error "This code requires AVX512F to work"
encrypt.c:       |  ^~~~~
encrypt.c: In file included from encrypt.c:195:
encrypt.c: c368.h: In function 'chacha_noxor368':
encrypt.c: c368.h:158:11: warning: unused variable 't_15' [-Wunused-variable]
encrypt.c:   158 |   __m512i t_15;
encrypt.c:       |           ^~~~
encrypt.c: c368.h:157:11: warning: unused variable 't_14' [-Wunused-variable]
encrypt.c:   157 |   __m512i t_14;
encrypt.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:dolbeau/amd64-avx512gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-avx512gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-avx512gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-avx512gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)

Compiler output


encrypt.c: In file included from encrypt.c:192:
encrypt.c: ./c256.h:131:5: warning: unused variable 't0' [-Wunused-variable]
encrypt.c:     ONEQUAD(0,1,2,3);
encrypt.c:     ^
encrypt.c: ./c256.h:129:26: note: expanded from macro 'ONEQUAD'
encrypt.c: #define ONEQUAD(a,b,c,d) ONEQUAD_TRANSPOSE_NOXOR(a,b,c,d)
encrypt.c:                          ^
encrypt.c: ./c256.h:110:15: note: expanded from macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c:       __m128i t0, t1, t2, t3;                                           \
encrypt.c:               ^
encrypt.c: ./c256.h:131:5: warning: unused variable 't1' [-Wunused-variable]
encrypt.c: ./c256.h:129:26: note: expanded from macro 'ONEQUAD'
encrypt.c: #define ONEQUAD(a,b,c,d) ONEQUAD_TRANSPOSE_NOXOR(a,b,c,d)
encrypt.c:                          ^
encrypt.c: ./c256.h:110:19: note: expanded from macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c:       __m128i t0, t1, t2, t3;                                           \
encrypt.c:                   ^
encrypt.c: ./c256.h:131:5: warning: unused variable 't2' [-Wunused-variable]
encrypt.c: ./c256.h:129:26: note: expanded from macro 'ONEQUAD'
encrypt.c: #define ONEQUAD(a,b,c,d) ONEQUAD_TRANSPOSE_NOXOR(a,b,c,d)
encrypt.c:                          ^
encrypt.c: ./c256.h:110:23: note: expanded from macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c:       __m128i t0, t1, t2, t3;                                           \
encrypt.c:                       ^
encrypt.c: ./c256.h:131:5: warning: unused variable 't3' [-Wunused-variable]
encrypt.c: ...

Number of similar (implementation,compiler) pairs: 5, namely:
ImplementationCompiler
T:dolbeau/amd64-sseclang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-sseclang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-sseclang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-sseclang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:dolbeau/amd64-sseclang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


encrypt.c: In file included from encrypt.c:192:
encrypt.c: c256.h: In function 'chacha_noxor368':
encrypt.c: c256.h:110:27: warning: unused variable 't3' [-Wunused-variable]
encrypt.c:   110 |       __m128i t0, t1, t2, t3;                                           \
encrypt.c:       |                           ^~
encrypt.c: c256.h:129:26: note: in expansion of macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c:   129 | #define ONEQUAD(a,b,c,d) ONEQUAD_TRANSPOSE_NOXOR(a,b,c,d)
encrypt.c:       |                          ^~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: c256.h:131:5: note: in expansion of macro 'ONEQUAD'
encrypt.c:   131 |     ONEQUAD(0,1,2,3);
encrypt.c:       |     ^~~~~~~
encrypt.c: c256.h:110:23: warning: unused variable 't2' [-Wunused-variable]
encrypt.c:   110 |       __m128i t0, t1, t2, t3;                                           \
encrypt.c:       |                       ^~
encrypt.c: c256.h:129:26: note: in expansion of macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c:   129 | #define ONEQUAD(a,b,c,d) ONEQUAD_TRANSPOSE_NOXOR(a,b,c,d)
encrypt.c:       |                          ^~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: c256.h:131:5: note: in expansion of macro 'ONEQUAD'
encrypt.c:   131 |     ONEQUAD(0,1,2,3);
encrypt.c:       |     ^~~~~~~
encrypt.c: c256.h:110:19: warning: unused variable 't1' [-Wunused-variable]
encrypt.c:   110 |       __m128i t0, t1, t2, t3;                                           \
encrypt.c:       |                   ^~
encrypt.c: c256.h:129:26: note: in expansion of macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c:   129 | #define ONEQUAD(a,b,c,d) ONEQUAD_TRANSPOSE_NOXOR(a,b,c,d)
encrypt.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:dolbeau/amd64-ssegcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-ssegcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-ssegcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:dolbeau/amd64-ssegcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)

Compiler output


hs1.c: In function 'xor_copy_chacha_key',
hs1.c:     inlined from 'hs1_gen_siv' at hs1.c:973:5:
hs1.c: hs1.c:890:30: warning: 'chacha_state' is used uninitialized [-Wuninitialized]
hs1.c:   890 |             ((uint64_t *)dst)[2] ^= ((uint64_t *)src)[2];
hs1.c:       |             ~~~~~~~~~~~~~~~~~^~~
hs1.c: hs1.c: In function 'hs1_gen_siv':
hs1.c: hs1.c:936:50: note: 'chacha_state' declared here
hs1.c:   936 |     __attribute__ ((aligned(32))) chacha_state_t chacha_state;
hs1.c:       |                                                  ^~~~~~~~~~~~
hs1.c: In function 'xor_copy_chacha_key',
hs1.c:     inlined from 'hs1siv_decrypt' at hs1.c:1023:5:
hs1.c: hs1.c:890:30: warning: 'chacha_state' may be used uninitialized [-Wmaybe-uninitialized]
hs1.c:   890 |             ((uint64_t *)dst)[2] ^= ((uint64_t *)src)[2];
hs1.c:       |             ~~~~~~~~~~~~~~~~~^~~
hs1.c: hs1.c: In function 'hs1siv_decrypt':
hs1.c: hs1.c:1011:50: note: 'chacha_state' declared here
hs1.c:  1011 |     __attribute__ ((aligned(32))) chacha_state_t chacha_state;
hs1.c:       |                                                  ^~~~~~~~~~~~
hs1.c: In function 'xor_copy_chacha_key',
hs1.c:     inlined from 'hs1' at hs1.c:1062:5:
hs1.c: hs1.c:890:30: warning: 'chacha_state' is used uninitialized [-Wuninitialized]
hs1.c:   890 |             ((uint64_t *)dst)[2] ^= ((uint64_t *)src)[2];
hs1.c:       |             ~~~~~~~~~~~~~~~~~^~~
hs1.c: hs1.c: In function 'hs1':
hs1.c: hs1.c:1053:50: note: 'chacha_state' declared here
hs1.c: ...

Number of similar (implementation,compiler) pairs: 2, namely:
ImplementationCompiler
T:fastergcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:fastergcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)