Implementation notes: amd64, speed2supercop, crypto_encrypt/ntruees1087ep1

Computer: speed2supercop
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-1fc9cbf5
SUPERCOP version: 20240625
Operation: crypto_encrypt
Primitive: ntruees1087ep1

Test failure


error 111
crypto_encrypt returns nonzero

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:refgcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refgcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refgcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refgcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)

Compiler output


ntru_crypto_ntru_mult_coeffs_simd.c: ntru_crypto_ntru_mult_coeffs_simd.c:40:17: error: argument value 65535 is outside the valid range [0, 255] [-Wargument-outside-range]
ntru_crypto_ntru_mult_coeffs_simd.c:     abroad[0] = _mm_shuffle_epi32(ai8h, 0xFFFF);
ntru_crypto_ntru_mult_coeffs_simd.c:                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ntru_crypto_ntru_mult_coeffs_simd.c: /usr/lib/llvm-16/lib/clang/16/include/emmintrin.h:4240:13: note: expanded from macro '_mm_shuffle_epi32'
ntru_crypto_ntru_mult_coeffs_simd.c:   ((__m128i)__builtin_ia32_pshufd((__v4si)(__m128i)(a), (int)(imm)))
ntru_crypto_ntru_mult_coeffs_simd.c:             ^                                           ~~~~~~~~~~
ntru_crypto_ntru_mult_coeffs_simd.c: ntru_crypto_ntru_mult_coeffs_simd.c:41:17: error: argument value 43690 is outside the valid range [0, 255] [-Wargument-outside-range]
ntru_crypto_ntru_mult_coeffs_simd.c:     abroad[1] = _mm_shuffle_epi32(ai8h, 0xAAAA);
ntru_crypto_ntru_mult_coeffs_simd.c:                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ntru_crypto_ntru_mult_coeffs_simd.c: /usr/lib/llvm-16/lib/clang/16/include/emmintrin.h:4240:13: note: expanded from macro '_mm_shuffle_epi32'
ntru_crypto_ntru_mult_coeffs_simd.c:   ((__m128i)__builtin_ia32_pshufd((__v4si)(__m128i)(a), (int)(imm)))
ntru_crypto_ntru_mult_coeffs_simd.c:             ^                                           ~~~~~~~~~~
ntru_crypto_ntru_mult_coeffs_simd.c: ntru_crypto_ntru_mult_coeffs_simd.c:42:17: error: argument value 21845 is outside the valid range [0, 255] [-Wargument-outside-range]
ntru_crypto_ntru_mult_coeffs_simd.c:     abroad[2] = _mm_shuffle_epi32(ai8h, 0x5555);
ntru_crypto_ntru_mult_coeffs_simd.c:                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ntru_crypto_ntru_mult_coeffs_simd.c: /usr/lib/llvm-16/lib/clang/16/include/emmintrin.h:4240:13: note: expanded from macro '_mm_shuffle_epi32'
ntru_crypto_ntru_mult_coeffs_simd.c:   ((__m128i)__builtin_ia32_pshufd((__v4si)(__m128i)(a), (int)(imm)))
ntru_crypto_ntru_mult_coeffs_simd.c:             ^                                           ~~~~~~~~~~
ntru_crypto_ntru_mult_coeffs_simd.c: ntru_crypto_ntru_mult_coeffs_simd.c:45:17: error: argument value 65535 is outside the valid range [0, 255] [-Wargument-outside-range]
ntru_crypto_ntru_mult_coeffs_simd.c:     abroad[4] = _mm_shuffle_epi32(ai8l, 0xFFFF);
ntru_crypto_ntru_mult_coeffs_simd.c:                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ntru_crypto_ntru_mult_coeffs_simd.c: /usr/lib/llvm-16/lib/clang/16/include/emmintrin.h:4240:13: note: expanded from macro '_mm_shuffle_epi32'
ntru_crypto_ntru_mult_coeffs_simd.c:   ((__m128i)__builtin_ia32_pshufd((__v4si)(__m128i)(a), (int)(imm)))
ntru_crypto_ntru_mult_coeffs_simd.c:             ^                                           ~~~~~~~~~~
ntru_crypto_ntru_mult_coeffs_simd.c: ntru_crypto_ntru_mult_coeffs_simd.c:46:17: error: argument value 43690 is outside the valid range [0, 255] [-Wargument-outside-range]
ntru_crypto_ntru_mult_coeffs_simd.c: ...

Number of similar (implementation,compiler) pairs: 5, namely:
ImplementationCompiler
T:refclang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:refclang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:refclang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:refclang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:refclang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


ntru_crypto_sha1.c: ntru_crypto_sha1.c: In function 'sha1_blk':
ntru_crypto_sha1.c: ntru_crypto_sha1.c:83:33: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha1.c:    83 |     E += RL(A, 5) + K00_19 + (B & (C ^ D) ^ D) + data[ 0]; B = RL(B, 30);
ntru_crypto_sha1.c:       |                               ~~^~~~~~~~~
ntru_crypto_sha1.c: ntru_crypto_sha1.c:84:33: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha1.c:    84 |     D += RL(E, 5) + K00_19 + (A & (B ^ C) ^ C) + data[ 1]; A = RL(A, 30);
ntru_crypto_sha1.c:       |                               ~~^~~~~~~~~
ntru_crypto_sha1.c: ntru_crypto_sha1.c:85:33: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha1.c:    85 |     C += RL(D, 5) + K00_19 + (E & (A ^ B) ^ B) + data[ 2]; E = RL(E, 30);
ntru_crypto_sha1.c:       |                               ~~^~~~~~~~~
ntru_crypto_sha1.c: ntru_crypto_sha1.c:86:33: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha1.c:    86 |     B += RL(C, 5) + K00_19 + (D & (E ^ A) ^ A) + data[ 3]; D = RL(D, 30);
ntru_crypto_sha1.c:       |                               ~~^~~~~~~~~
ntru_crypto_sha1.c: ntru_crypto_sha1.c:87:33: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha1.c:    87 |     A += RL(B, 5) + K00_19 + (C & (D ^ E) ^ E) + data[ 4]; C = RL(C, 30);
ntru_crypto_sha1.c:       |                               ~~^~~~~~~~~
ntru_crypto_sha1.c: ntru_crypto_sha1.c:88:33: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha1.c:    88 |     E += RL(A, 5) + K00_19 + (B & (C ^ D) ^ D) + data[ 5]; B = RL(B, 30);
ntru_crypto_sha1.c:       |                               ~~^~~~~~~~~
ntru_crypto_sha1.c: ntru_crypto_sha1.c:89:33: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha1.c:    89 |     D += RL(E, 5) + K00_19 + (A & (B ^ C) ^ C) + data[ 6]; A = RL(A, 30);
ntru_crypto_sha1.c:       |                               ~~^~~~~~~~~
ntru_crypto_sha1.c: ntru_crypto_sha1.c:90:33: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha1.c:    90 |     C += RL(D, 5) + K00_19 + (E & (A ^ B) ^ B) + data[ 7]; E = RL(E, 30);
ntru_crypto_sha1.c:       |                               ~~^~~~~~~~~
ntru_crypto_sha1.c: ...
ntru_crypto_sha2.c: ntru_crypto_sha2.c: In function 'sha2_blk':
ntru_crypto_sha2.c: ntru_crypto_sha2.c:88:21: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha2.c:    88 |     H += S1(E) + (E & (F ^ G) ^ G) + 0x428A2F98UL + data[ 0]; D += H;
ntru_crypto_sha2.c:       |                   ~~^~~~~~~~~
ntru_crypto_sha2.c: ntru_crypto_sha2.c:90:21: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha2.c:    90 |     G += S1(D) + (D & (E ^ F) ^ F) + 0x71374491UL + data[ 1]; C += G;
ntru_crypto_sha2.c:       |                   ~~^~~~~~~~~
ntru_crypto_sha2.c: ntru_crypto_sha2.c:92:21: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha2.c:    92 |     F += S1(C) + (C & (D ^ E) ^ E) + 0xB5C0FBCFUL + data[ 2]; B += F;
ntru_crypto_sha2.c:       |                   ~~^~~~~~~~~
ntru_crypto_sha2.c: ntru_crypto_sha2.c:94:21: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha2.c:    94 |     E += S1(B) + (B & (C ^ D) ^ D) + 0xE9B5DBA5UL + data[ 3]; A += E;
ntru_crypto_sha2.c:       |                   ~~^~~~~~~~~
ntru_crypto_sha2.c: ntru_crypto_sha2.c:96:21: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha2.c:    96 |     D += S1(A) + (A & (B ^ C) ^ C) + 0x3956C25BUL + data[ 4]; H += D;
ntru_crypto_sha2.c:       |                   ~~^~~~~~~~~
ntru_crypto_sha2.c: ntru_crypto_sha2.c:98:21: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha2.c:    98 |     C += S1(H) + (H & (A ^ B) ^ B) + 0x59F111F1UL + data[ 5]; G += C;
ntru_crypto_sha2.c:       |                   ~~^~~~~~~~~
ntru_crypto_sha2.c: ntru_crypto_sha2.c:100:21: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha2.c:   100 |     B += S1(G) + (G & (H ^ A) ^ A) + 0x923F82A4UL + data[ 6]; F += B;
ntru_crypto_sha2.c:       |                   ~~^~~~~~~~~
ntru_crypto_sha2.c: ntru_crypto_sha2.c:102:21: warning: suggest parentheses around arithmetic in operand of '^' [-Wparentheses]
ntru_crypto_sha2.c:   102 |     A += S1(F) + (F & (G ^ H) ^ H) + 0xAB1C5ED5UL + data[ 7]; E += A;
ntru_crypto_sha2.c:       |                   ~~^~~~~~~~~
ntru_crypto_sha2.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:refgcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refgcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refgcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:refgcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)