Implementation notes: amd64, speed2supercop, crypto_hash/fugue256

Checksum failure

fcdde2302d3692407e13d53ade1a369dcfc4e15cc8b0eee59777ddb521dc279f

Compiler output

hash.c: In file included from hash.c:7:
hash.c: fugue_256_code.h:61:3: warning: multi-line comment [-Wcomment]
hash.c:    61 |   //  *(uint_64t*) &(state[off(p,0)]) ^= *(uint_64t *) &(state[off(p,4)]);  state[off(p,2)] ^= state[off(p,6)]; \
hash.c:       |   ^

Compiler output

hash.c: In file included from hash.c:24:
hash.c: In file included from ./fugue_256_sse4_code.h:15:
hash.c: ./aestab.h:53:93: warning: backslash and newline separated by space [-Wbackslash-newline-escape]
hash.c:     w(r,0x8c), w(r,0xa1), w(r,0x89), w(r,0x0d), w(r,0xbf), w(r,0xe6), w(r,0x42), w(r,0x68),\
hash.c:                                                                                             ^
hash.c: hash.c:74:52: warning: unused variable 'row' [-Wunused-variable]
hash.c:     __attribute__((aligned(16)))     crypto_uint32 row[4];
hash.c:                                                    ^
hash.c: hash.c:75:52: warning: unused variable 'col' [-Wunused-variable]
hash.c:     __attribute__((aligned(16)))     crypto_uint32 col[4];
hash.c:                                                    ^
hash.c: hash.c:77:14: warning: variable 'mask_0to0' set but not used [-Wunused-but-set-variable]
hash.c:     __m128i  mask_0to0;
hash.c:              ^
hash.c: hash.c:78:14: warning: variable 'mask_123to123' set but not used [-Wunused-but-set-variable]
hash.c:     __m128i  mask_123to123;
hash.c:              ^
hash.c: hash.c:79:14: warning: unused variable 'zero_xmm' [-Wunused-variable]
hash.c:     __m128i  zero_xmm;
hash.c:              ^
hash.c: hash.c:80:14: warning: unused variable 'row128' [-Wunused-variable]
hash.c:     __m128i  row128;
hash.c:              ^
hash.c: hash.c:83:13: warning: unused variable 'ct0' [-Wunused-variable]
hash.c:     __m128i ct0,ct1,ct2,ct3;
hash.c: ...

Compiler output

hash.c: In file included from fugue_256_sse4_code.h:15,
hash.c:                  from hash.c:24:
hash.c: aestab.h:53:92: warning: backslash and newline separated by space
hash.c:    53 |     w(r,0x8c), w(r,0xa1), w(r,0x89), w(r,0x0d), w(r,0xbf), w(r,0xe6), w(r,0x42), w(r,0x68),\
hash.c:       |
hash.c: hash.c: In function 'crypto_hash_fugue256_SSE4_1_timingleaks':
hash.c: hash.c:207:40: warning: operation on 'i1' may be undefined [-Wsequence-point]
hash.c:   207 |         for (   ; i<30; i++) state[ (i1++) %30 ]  = hs_state[(i1 % 60) %32 ];
hash.c:       |                                     ~~~^~~
hash.c: hash.c:213:62: warning: dereferencing type-punned pointer will break strict-aliasing rules [-Wstrict-aliasing]
hash.c:   213 |         state[ (i1++) %30 ] = ((crypto_uint32 *) & tmp_state)[0];
hash.c:       |                                                              ^
hash.c: hash.c:216:40: warning: operation on 'i1' may be undefined [-Wsequence-point]
hash.c:   216 |         for (   ; i<30; i++) state[ (i1++) %30 ]  = hs_state[(i1 % 60) % 32 ];
hash.c:       |                                     ~~~^~~
hash.c: hash.c:99:18: warning: unused variable 'itmp' [-Wunused-variable]
hash.c:    99 |     short i, i1, itmp;
hash.c:       |                  ^~~~
hash.c: hash.c:83:25: warning: unused variable 'ct3' [-Wunused-variable]
hash.c:    83 |     __m128i ct0,ct1,ct2,ct3;
hash.c:       |                         ^~~
hash.c: hash.c:83:21: warning: unused variable 'ct2' [-Wunused-variable]
hash.c:    83 |     __m128i ct0,ct1,ct2,ct3;
hash.c:       |                     ^~~
hash.c: hash.c:83:17: warning: unused variable 'ct1' [-Wunused-variable]
hash.c: ...

Compiler output

hash.c: In file included from fugue_256_sse4_code.h:15,
hash.c:                  from hash.c:24:
hash.c: aestab.h:53:92: warning: backslash and newline separated by space
hash.c:    53 |     w(r,0x8c), w(r,0xa1), w(r,0x89), w(r,0x0d), w(r,0xbf), w(r,0xe6), w(r,0x42), w(r,0x68),\
hash.c:       |
hash.c: hash.c: In function 'crypto_hash_fugue256_SSE4_1_timingleaks':
hash.c: hash.c:207:40: warning: operation on 'i1' may be undefined [-Wsequence-point]
hash.c:   207 |         for (   ; i<30; i++) state[ (i1++) %30 ]  = hs_state[(i1 % 60) %32 ];
hash.c:       |                                     ~~~^~~
hash.c: hash.c:216:40: warning: operation on 'i1' may be undefined [-Wsequence-point]
hash.c:   216 |         for (   ; i<30; i++) state[ (i1++) %30 ]  = hs_state[(i1 % 60) % 32 ];
hash.c:       |                                     ~~~^~~
hash.c: hash.c:99:18: warning: unused variable 'itmp' [-Wunused-variable]
hash.c:    99 |     short i, i1, itmp;
hash.c:       |                  ^~~~
hash.c: hash.c:83:25: warning: unused variable 'ct3' [-Wunused-variable]
hash.c:    83 |     __m128i ct0,ct1,ct2,ct3;
hash.c:       |                         ^~~
hash.c: hash.c:83:21: warning: unused variable 'ct2' [-Wunused-variable]
hash.c:    83 |     __m128i ct0,ct1,ct2,ct3;
hash.c:       |                     ^~~
hash.c: hash.c:83:17: warning: unused variable 'ct1' [-Wunused-variable]
hash.c:    83 |     __m128i ct0,ct1,ct2,ct3;
hash.c:       |                 ^~~
hash.c: hash.c:83:13: warning: unused variable 'ct0' [-Wunused-variable]
hash.c: ...

Compiler output

hash.c: In file included from hash.c:22:
hash.c: In file included from ./fugue_256_ssse3_code.h:15:
hash.c: ./aestab.h:53:93: warning: backslash and newline separated by space [-Wbackslash-newline-escape]
hash.c:     w(r,0x8c), w(r,0xa1), w(r,0x89), w(r,0x0d), w(r,0xbf), w(r,0xe6), w(r,0x42), w(r,0x68),\
hash.c:                                                                                             ^
hash.c: In file included from hash.c:22:
hash.c: ./fugue_256_ssse3_code.h:111:24: warning: backslash and newline separated by space [-Wbackslash-newline-escape]
hash.c: t0       =  xmm_out ; \
hash.c:                        ^
hash.c: hash.c:72:52: warning: unused variable 'row' [-Wunused-variable]
hash.c:     __attribute__((aligned(16)))     crypto_uint32 row[4];
hash.c:                                                    ^
hash.c: hash.c:73:52: warning: unused variable 'col' [-Wunused-variable]
hash.c:     __attribute__((aligned(16)))     crypto_uint32 col[4];
hash.c:                                                    ^
hash.c: hash.c:77:14: warning: unused variable 'zero_xmm' [-Wunused-variable]
hash.c:     __m128i  zero_xmm;
hash.c:              ^
hash.c: hash.c:78:14: warning: unused variable 'row128' [-Wunused-variable]
hash.c:     __m128i  row128;
hash.c:              ^
hash.c: hash.c:79:31: warning: unused variable 'xmm_out1' [-Wunused-variable]
hash.c:     __m128i  xmm_out, xmm_in, xmm_out1, xmm_out2;
hash.c:                               ^
hash.c: hash.c:79:41: warning: unused variable 'xmm_out2' [-Wunused-variable]
hash.c: ...

Compiler output

hash.c: In file included from fugue_256_ssse3_code.h:15,
hash.c:                  from hash.c:22:
hash.c: aestab.h:53:92: warning: backslash and newline separated by space
hash.c:    53 |     w(r,0x8c), w(r,0xa1), w(r,0x89), w(r,0x0d), w(r,0xbf), w(r,0xe6), w(r,0x42), w(r,0x68),\
hash.c:       |
hash.c: fugue_256_ssse3_code.h:111:23: warning: backslash and newline separated by space
hash.c:   111 | t0       =  xmm_out ; \
hash.c:       |
hash.c: hash.c: In function 'crypto_hash_fugue256_SSSE3_timingleaks':
hash.c: hash.c:205:40: warning: operation on 'i1' may be undefined [-Wsequence-point]
hash.c:   205 |         for (   ; i<30; i++) state[ (i1++) %30 ]  = hs_state[(i1 % 60) %32 ];
hash.c:       |                                     ~~~^~~
hash.c: hash.c:211:62: warning: dereferencing type-punned pointer will break strict-aliasing rules [-Wstrict-aliasing]
hash.c:   211 |         state[ (i1++) %30 ] = ((crypto_uint32 *) & tmp_state)[0];
hash.c:       |                                                              ^
hash.c: hash.c:214:40: warning: operation on 'i1' may be undefined [-Wsequence-point]
hash.c:   214 |         for (   ; i<30; i++) state[ (i1++) %30 ]  = hs_state[(i1 % 60) % 32 ];
hash.c:       |                                     ~~~^~~
hash.c: hash.c:97:18: warning: unused variable 'itmp' [-Wunused-variable]
hash.c:    97 |     short i, i1, itmp;
hash.c:       |                  ^~~~
hash.c: hash.c:80:38: warning: unused variable 'xfr' [-Wunused-variable]
hash.c:    80 |     __m128i  t0,t1,t2,t3, tmp_state, xfr;
hash.c:       |                                      ^~~
hash.c: hash.c:79:41: warning: unused variable 'xmm_out2' [-Wunused-variable]
hash.c: ...

Compiler output

hash.c: In file included from fugue_256_ssse3_code.h:15,
hash.c:                  from hash.c:22:
hash.c: aestab.h:53:92: warning: backslash and newline separated by space
hash.c:    53 |     w(r,0x8c), w(r,0xa1), w(r,0x89), w(r,0x0d), w(r,0xbf), w(r,0xe6), w(r,0x42), w(r,0x68),\
hash.c:       |
hash.c: fugue_256_ssse3_code.h:111:23: warning: backslash and newline separated by space
hash.c:   111 | t0       =  xmm_out ; \
hash.c:       |
hash.c: hash.c: In function 'crypto_hash_fugue256_SSSE3_timingleaks':
hash.c: hash.c:205:40: warning: operation on 'i1' may be undefined [-Wsequence-point]
hash.c:   205 |         for (   ; i<30; i++) state[ (i1++) %30 ]  = hs_state[(i1 % 60) %32 ];
hash.c:       |                                     ~~~^~~
hash.c: hash.c:214:40: warning: operation on 'i1' may be undefined [-Wsequence-point]
hash.c:   214 |         for (   ; i<30; i++) state[ (i1++) %30 ]  = hs_state[(i1 % 60) % 32 ];
hash.c:       |                                     ~~~^~~
hash.c: hash.c:97:18: warning: unused variable 'itmp' [-Wunused-variable]
hash.c:    97 |     short i, i1, itmp;
hash.c:       |                  ^~~~
hash.c: hash.c:80:38: warning: unused variable 'xfr' [-Wunused-variable]
hash.c:    80 |     __m128i  t0,t1,t2,t3, tmp_state, xfr;
hash.c:       |                                      ^~~
hash.c: hash.c:79:41: warning: unused variable 'xmm_out2' [-Wunused-variable]
hash.c:    79 |     __m128i  xmm_out, xmm_in, xmm_out1, xmm_out2;
hash.c:       |                                         ^~~~~~~~
hash.c: hash.c:79:31: warning: unused variable 'xmm_out1' [-Wunused-variable]
hash.c: ...

Compiler output

hash.c: hash.c:540:43: warning: unused variable 'uBlockCount' [-Wunused-variable]
hash.c:         unsigned int i, col[30], block[4], base, uBlockCount = 5;
hash.c:                                                  ^
hash.c: hash.c:541:10: warning: unused variable 't1' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                 ^
hash.c: hash.c:541:14: warning: unused variable 't2' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                     ^
hash.c: hash.c:746:10: warning: unused variable 't1' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                 ^
hash.c: hash.c:746:14: warning: unused variable 't2' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                     ^
hash.c: hash.c:915:10: warning: unused variable 't1' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                 ^
hash.c: hash.c:915:14: warning: unused variable 't2' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                     ^
hash.c: hash.c:1053:10: warning: unused variable 't1' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                 ^
hash.c: hash.c:1053:14: warning: unused variable 't2' [-Wunused-variable]
hash.c: ...

Compiler output

hash.c: hash.c:449:4: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'Compress256' that is compiled without support for 'ssse3'
hash.c:                         SUBROUND256_2(ctx->state[8], ctx->state[9], ctx->state[7], ctx->state[2], ctx->state[7], ctx->state[8], ctx->state[6], ctx->state[1]);
hash.c:                         ^
hash.c: hash.c:340:2: note: expanded from macro 'SUBROUND256_2'
hash.c:         SUBSTITUTE(r0, _t1, _t2, _t3, _t0);\
hash.c:         ^
hash.c: hash.c:249:10: note: expanded from macro 'SUBSTITUTE'
hash.c:                         _t2 = _mm_shuffle_epi8(r0, M128(_inv_shift_rows));\
hash.c:                               ^
hash.c: hash.c:449:4: error: always_inline function '_mm_aesenclast_si128' requires target feature 'aes', but would be inlined into function 'Compress256' that is compiled without support for 'aes'
hash.c: hash.c:340:2: note: expanded from macro 'SUBROUND256_2'
hash.c:         SUBSTITUTE(r0, _t1, _t2, _t3, _t0);\
hash.c:         ^
hash.c: hash.c:250:10: note: expanded from macro 'SUBSTITUTE'
hash.c:                         _t2 = _mm_aesenclast_si128(_t2, M128(_zero))
hash.c:                               ^
hash.c: hash.c:449:4: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'Compress256' that is compiled without support for 'ssse3'
hash.c: hash.c:341:2: note: expanded from macro 'SUBROUND256_2'
hash.c:         SUPERMIX(_t2, _t3, _t0, _t1, r0);\
hash.c:         ^
hash.c: hash.c:253:2: note: expanded from macro 'SUPERMIX'
hash.c:         PRESUPERMIX(t0, t1, t2, t3, t4);\
hash.c:         ^
hash.c: hash.c:245:25: note: expanded from macro 'PRESUPERMIX'
hash.c:         s2 = _mm_xor_si128(s2, _mm_shuffle_epi8(M128(_mul2mask), t1));\
hash.c: ...

Compiler output

hash.c: In file included from hash.c:21:
hash.c: vperm.h:57:9: warning: multi-line comment [-Wcomment]
hash.c:    57 |         //t2 = _mm_shuffle_epi8(table[0], x);\
hash.c:       |         ^
hash.c: hash.c:123:1: warning: multi-line comment [-Wcomment]
hash.c:   123 | //#define PACK_S0(s0, s1, t1)\
hash.c:       | ^
hash.c: hash.c:132:1: warning: multi-line comment [-Wcomment]
hash.c:   132 | //#define UNPACK_S0(s0, s1, t1)\
hash.c:       | ^
hash.c: hash.c:141:1: warning: multi-line comment [-Wcomment]
hash.c:   141 | //#define CMIX(s1, s2, r1, r2, t1, t2)\
hash.c:       | ^
hash.c: hash.c:330:1: warning: multi-line comment [-Wcomment]
hash.c:   330 | //#define SUBROUND256(r1, r2, r0, r5)\
hash.c:       | ^
hash.c: hash.c: In function 'Final256':
hash.c: hash.c:541:21: warning: unused variable 't2' [-Wunused-variable]
hash.c:   541 |         __m128i t1, t2;
hash.c:       |                     ^~
hash.c: hash.c:541:17: warning: unused variable 't1' [-Wunused-variable]
hash.c:   541 |         __m128i t1, t2;
hash.c:       |                 ^~
hash.c: hash.c:540:50: warning: unused variable 'uBlockCount' [-Wunused-variable]
hash.c:   540 |         unsigned int i, col[30], block[4], base, uBlockCount = 5;
hash.c: ...

Compiler output

hash.c: hash.c:539:43: warning: unused variable 'uBlockCount' [-Wunused-variable]
hash.c:         unsigned int i, col[30], block[4], base, uBlockCount = 5;
hash.c:                                                  ^
hash.c: hash.c:540:14: warning: unused variable 't2' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                     ^
hash.c: hash.c:745:14: warning: unused variable 't2' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                     ^
hash.c: hash.c:914:14: warning: unused variable 't2' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                     ^
hash.c: hash.c:1052:14: warning: unused variable 't2' [-Wunused-variable]
hash.c:         __m128i t1, t2;
hash.c:                     ^
hash.c: 5 warnings generated.

Compiler output

hash.c: hash.c:447:4: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'Compress256' that is compiled without support for 'ssse3'
hash.c:                         TIX256(pmsg, ctx->state[1], ctx->state[0], ctx->state[6], ctx->state[8], _t0, _t1, _t2);
hash.c:                         ^
hash.c: hash.c:168:2: note: expanded from macro 'TIX256'
hash.c:         TRANSFORM(t1, _k_ipt, t2, t3);\
hash.c:         ^
hash.c: ./vperm.h:52:7: note: expanded from macro 'TRANSFORM'
hash.c:         t1 = _mm_shuffle_epi8(*((__m128i*)table + 1), t1);\
hash.c:              ^
hash.c: hash.c:447:4: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'Compress256' that is compiled without support for 'ssse3'
hash.c: hash.c:168:2: note: expanded from macro 'TIX256'
hash.c:         TRANSFORM(t1, _k_ipt, t2, t3);\
hash.c:         ^
hash.c: ./vperm.h:53:7: note: expanded from macro 'TRANSFORM'
hash.c:         x  = _mm_shuffle_epi8(*((__m128i*)table + 0), x);\
hash.c:              ^
hash.c: hash.c:448:4: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'Compress256' that is compiled without support for 'ssse3'
hash.c:                         SUBROUND256_2(ctx->state[8], ctx->state[9], ctx->state[7], ctx->state[2], ctx->state[7], ctx->state[8], ctx->state[6], ctx->state[1]);
hash.c:                         ^
hash.c: hash.c:339:2: note: expanded from macro 'SUBROUND256_2'
hash.c:         SUBSTITUTE(r0, _t1, _t2, _t3, _t0);\
hash.c:         ^
hash.c: hash.c:264:20: note: expanded from macro 'SUBSTITUTE'
hash.c: #define SUBSTITUTE SUBSTITUTE_VPERM_CORE
hash.c:                    ^
hash.c: ...

Compiler output

hash.c: In file included from hash.c:21:
hash.c: vperm.h:57:9: warning: multi-line comment [-Wcomment]
hash.c:    57 |         //t2 = _mm_shuffle_epi8(table[0], x);\
hash.c:       |         ^
hash.c: hash.c:122:1: warning: multi-line comment [-Wcomment]
hash.c:   122 | //#define PACK_S0(s0, s1, t1)\
hash.c:       | ^
hash.c: hash.c:131:1: warning: multi-line comment [-Wcomment]
hash.c:   131 | //#define UNPACK_S0(s0, s1, t1)\
hash.c:       | ^
hash.c: hash.c:140:1: warning: multi-line comment [-Wcomment]
hash.c:   140 | //#define CMIX(s1, s2, r1, r2, t1, t2)\
hash.c:       | ^
hash.c: hash.c:329:1: warning: multi-line comment [-Wcomment]
hash.c:   329 | //#define SUBROUND256(r1, r2, r0, r5)\
hash.c:       | ^
hash.c: hash.c: In function 'Final256':
hash.c: hash.c:540:21: warning: unused variable 't2' [-Wunused-variable]
hash.c:   540 |         __m128i t1, t2;
hash.c:       |                     ^~
hash.c: hash.c:539:50: warning: unused variable 'uBlockCount' [-Wunused-variable]
hash.c:   539 |         unsigned int i, col[30], block[4], base, uBlockCount = 5;
hash.c:       |                                                  ^~~~~~~~~~~
hash.c: hash.c: In function 'Final384':
hash.c: hash.c:745:21: warning: unused variable 't2' [-Wunused-variable]
hash.c: ...