Implementation notes: amd64, speed2supercop, crypto_kem/ledakem33sl

Computer: speed2supercop
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-1fc9cbf5
SUPERCOP version: 20240808
Operation: crypto_kem
Primitive: ledakem33sl

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
9421796	99344 1173512 52	130269 1174312 1600	`T:portableopt`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625
9615784	84797 1173512 52	115613 1174312 1600	`T:portableopt`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625
10546820	73368 1173512 52	103205 1174272 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625
12073024	50185 1173512 52	77557 1174312 1600	`T:portableopt`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625
13223980	47728 1173512 52	75359 1174304 1696	`T:portableopt`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625
13841372	44527 1173512 52	72413 1174272 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625
15000372	41550 1173512 52	68997 1174272 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625
24898660	61016 72 52	90712 880 1600	`T:portableopt`	`clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625
35509284	28850 1173512 52	55365 1174264 1632	`T:portableopt`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240711	20240625

Compiler output

gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c: In function 'gf2x_mod_fmac':
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:805:39: warning: iteration 1 invokes undefined behavior [-Waggressive-loop-optimizations]
gf2x_arith_mod_xPplusOne.c:   805 |             result[j] ^= (shifted_temp[j] << low_shift_amt) | ( zeroshift_mask &
gf2x_arith_mod_xPplusOne.c:       |                           ~~~~~~~~~~~~^~~
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:804:18: note: within this loop
gf2x_arith_mod_xPplusOne.c:   804 |         for (; j < NUM_DIGITS_GF2X_ELEMENT-1 ; j++) {
gf2x_arith_mod_xPplusOne.c:       |                ~~^~~~~~~~~~~~~~~~~~~~~~~~~~~
niederreiter_decrypt.c: niederreiter_decrypt.c: In function 'decrypt_niederreiter_indcca2':
niederreiter_decrypt.c: niederreiter_decrypt.c:179:18: warning: array subscript '<unnamed-unsigned:256>[0]' is partly outside array bounds of 'unsigned char[2]' [-Warray-bounds=]
niederreiter_decrypt.c:   179 |                  tail[TRNG_BYTE_LENGTH] = {0};
niederreiter_decrypt.c:       |                  ^~~~

Number of similar (implementation,compiler) pairs: 2, namely:

Implementation	Compiler
`T:portableopt`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)`
`T:portableopt`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)`

Compiler output

niederreiter_decrypt.c: niederreiter_decrypt.c: In function 'decrypt_niederreiter_indcca2':
niederreiter_decrypt.c: niederreiter_decrypt.c:179:18: warning: array subscript '<unnamed-unsigned:256>[0]' is partly outside array bounds of 'unsigned char[2]' [-Warray-bounds=]
niederreiter_decrypt.c:   179 |                  tail[TRNG_BYTE_LENGTH] = {0};
niederreiter_decrypt.c:       |                  ^~~~

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`T:portableopt`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)`