Implementation notes: amd64, speed2supercop, crypto_encrypt/ledapkc53sl

Computer: speed2supercop
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-1fc9cbf5
SUPERCOP version: 20240425
Operation: crypto_encrypt
Primitive: ledapkc53sl

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
109422004	66150 1861640 52	96376 1862424 1696	`T:portableopt`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240429	20240425
132303852	49520 1861640 52	77912 1862424 1696	`T:portableopt`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240429	20240425
166076028	46237 1861640 52	74096 1862424 1696	`T:portableopt`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240429	20240425
255989304	33106 1861640 52	60023 1862416 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240429	20240425

Compiler output

Implementation: T:portableopt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c: In function 'gf2x_mod_fmac':
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:805:39: warning: iteration 1 invokes undefined behavior [-Waggressive-loop-optimizations]
gf2x_arith_mod_xPplusOne.c: 805 | result[j] ^= (shifted_temp[j] << low_shift_amt) | ( zeroshift_mask &
gf2x_arith_mod_xPplusOne.c: | ~~~~~~~~~~~~^~~
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:804:18: note: within this loop
gf2x_arith_mod_xPplusOne.c: 804 | for (; j < NUM_DIGITS_GF2X_ELEMENT-1 ; j++) {
gf2x_arith_mod_xPplusOne.c: | ~~^~~~~~~~~~~~~~~~~~~~~~~~~~~

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt