Implementation notes: amd64, speed2supercop, crypto_stream/simon128128ctr

Computer: speed2supercop
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-1fc9cbf5
SUPERCOP version: 20240808
Operation: crypto_stream
Primitive: simon128128ctr
TimeObject sizeTest sizeImplementationCompilerBenchmark dateSUPERCOP version
4492111213 0 0126933 792 808T:avx2clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
4524111197 0 0127125 792 808T:avx2clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
4880123707 0 0138413 752 864T:avx2gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
7164111435 0 0124159 784 856T:avx2clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
7164118628 0 0129800 728 832T:avx2gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
7212119746 0 0132397 752 864T:avx2gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
7640141562 0 0153525 792 792T:avx2clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
8028116595 0 0131261 752 864T:sse4gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
8192106945 0 0122742 792 808T:sse4clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
8452106913 0 0122902 792 808T:sse4clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
12756118695 0 0129832 728 832T:sse4gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
12820120576 0 0132860 744 864T:sse4gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
12920106836 0 0119695 784 856T:sse4clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
13456111121 0 0123014 792 792T:sse4clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625
13768116209 0 0128829 752 864T:sse4gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024070320240625

Compiler output


stream.c: stream.c:130:3: error: always_inline function '_mm256_set_epi64x' requires target feature 'avx', but would be inlined into function 'Encrypt' that is compiled without support for 'avx'
stream.c:   SET1(X[0],nonce[1]); SET4(Y[0],nonce[0]);
stream.c:   ^
stream.c: ./Intrinsics_AVX2_128block.h:25:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c))
stream.c:                      ^
stream.c: ./Intrinsics_AVX2_128block.h:24:13: note: expanded from macro 'SET'
stream.c: #define SET _mm256_set_epi64x
stream.c:             ^
stream.c: stream.c:130:3: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
stream.c: ./Intrinsics_AVX2_128block.h:25:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c))
stream.c:                      ^
stream.c: ./Intrinsics_AVX2_128block.h:24:13: note: expanded from macro 'SET'
stream.c: #define SET _mm256_set_epi64x
stream.c:             ^
stream.c: stream.c:130:24: error: always_inline function '_mm256_set_epi64x' requires target feature 'avx', but would be inlined into function 'Encrypt' that is compiled without support for 'avx'
stream.c:   SET1(X[0],nonce[1]); SET4(Y[0],nonce[0]);
stream.c:                        ^
stream.c: ./Intrinsics_AVX2_128block.h:26:22: note: expanded from macro 'SET4'
stream.c: #define SET4(X,c) (X=SET(c,c,c,c), X=ADD(X,_q))
stream.c:                      ^
stream.c: ./Intrinsics_AVX2_128block.h:24:13: note: expanded from macro 'SET'
stream.c: #define SET _mm256_set_epi64x
stream.c:             ^
stream.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:
ImplementationCompiler
T:avx2clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


stream.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/13/include/immintrin.h:51,
stream.c:                  from Intrinsics_AVX2_128block.h:5,
stream.c:                  from Simon128128AVX2.h:17,
stream.c:                  from stream.c:21:
stream.c: In function '_mm256_unpackhi_epi64',
stream.c:     inlined from 'Encrypt' at stream.c:165:22:
stream.c: /usr/lib/gcc/x86_64-linux-gnu/13/include/avx2intrin.h:880:19: warning: 'X[1]' may be used uninitialized [-Wmaybe-uninitialized]
stream.c:   880 |   return (__m256i)__builtin_ia32_punpckhqdq256 ((__v4di)__A, (__v4di)__B);
stream.c:       |                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
stream.c: stream.c: In function 'Encrypt':
stream.c: stream.c:110:8: note: 'X[1]' was declared here
stream.c:   110 |   u256 X[8],Y[8];
stream.c:       |        ^
stream.c: In function '_mm256_unpackhi_epi64',
stream.c:     inlined from 'Encrypt' at stream.c:166:22:
stream.c: /usr/lib/gcc/x86_64-linux-gnu/13/include/avx2intrin.h:880:19: warning: 'X[2]' may be used uninitialized [-Wmaybe-uninitialized]
stream.c:   880 |   return (__m256i)__builtin_ia32_punpckhqdq256 ((__v4di)__A, (__v4di)__B);
stream.c:       |                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
stream.c: stream.c: In function 'Encrypt':
stream.c: stream.c:110:8: note: 'X[2]' was declared here
stream.c:   110 |   u256 X[8],Y[8];
stream.c:       |        ^
stream.c: In function '_mm256_unpackhi_epi64',
stream.c:     inlined from 'Encrypt' at stream.c:167:22:
stream.c: /usr/lib/gcc/x86_64-linux-gnu/13/include/avx2intrin.h:880:19: warning: 'X[3]' may be used uninitialized [-Wmaybe-uninitialized]
stream.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:
ImplementationCompiler
T:avx2gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)

Compiler output


try.c: /usr/bin/ld: libcrypto_stream_simon128128ctr.a(stream.o): in function `Encrypt':
try.c: .../supercop-data/speed2supercop/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/timingleaks/crypto_stream/simon128128ctr/avx2/work/stream.c:147:(.text+0x...): undefined reference to `Transpose'
try.c: /usr/bin/ld: .../supercop-data/speed2supercop/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/timingleaks/crypto_stream/simon128128ctr/avx2/work/stream.c:147:(.text+0x...): undefined reference to `Transpose'
try.c: /usr/bin/ld: .../supercop-data/speed2supercop/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/timingleaks/crypto_stream/simon128128ctr/avx2/work/stream.c:156:(.text+0x...): undefined reference to `Transpose'
try.c: /usr/bin/ld: .../supercop-data/speed2supercop/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/timingleaks/crypto_stream/simon128128ctr/avx2/work/stream.c:156:(.text+0x...): undefined reference to `Transpose'
try.c: /usr/bin/ld: libcrypto_stream_simon128128ctr.a(stream.o): in function `Encrypt_Xor':
try.c: .../supercop-data/speed2supercop/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/timingleaks/crypto_stream/simon128128ctr/avx2/work/stream.c:297:(.text+0x...): undefined reference to `Transpose'
try.c: /usr/bin/ld: libcrypto_stream_simon128128ctr.a(stream.o):.../supercop-data/speed2supercop/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/timingleaks/crypto_stream/simon128128ctr/avx2/work/stream.c:297: more undefined references to `Transpose' follow
try.c: collect2: error: ld returned 1 exit status

Number of similar (implementation,compiler) pairs: 1, namely:
ImplementationCompiler
T:avx2gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)

Compiler output


stream.c: stream.c:324:58: warning: argument 'T' of type '__m128i[8]' with mismatched bound [-Warray-parameter]
stream.c: inline __attribute__((always_inline)) int Transpose(u128 T[8])
stream.c:                                                          ^
stream.c: stream.c:28:58: note: previously declared as '__m128i[]' here
stream.c: inline __attribute__((always_inline)) int Transpose(u128 M[]);
stream.c:                                                          ^
stream.c: 1 warning generated.

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:sse4clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:sse4clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:sse4clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))
T:sse4clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


stream.c: stream.c:306:3: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'ExpandKeyBS' that is compiled without support for 'ssse3'
stream.c:   EKBS(rk);
stream.c:   ^
stream.c: ./Simon128128SSE4.h:62:19: note: expanded from macro 'EKBS'
stream.c: #define EKBS(rk) (RKBS(rk,2,_D),  RKBS(rk,3,_C),  RKBS(rk,4,_D),  RKBS(rk,5,_C),  RKBS(rk,6,_D),  RKBS(rk,7,_D),  RKBS(rk,8,_D), RKBS(rk,9,_D), \
stream.c:                   ^
stream.c: ./Simon128128SSE4.h:53:52: note: expanded from macro 'RKBS'
stream.c: #define RKBS(rk,r,_V) (rk[r][7]= _D ^ rk[r-2][7] ^ ROR8(rk[r-1][2] ^ rk[r-1][3]), \
stream.c:                                                    ^
stream.c: ./Intrinsics_SSE4_128block.h:39:19: note: expanded from macro 'ROR8'
stream.c: #define ROR8(X)  (SHFL(X,R8))
stream.c:                   ^
stream.c: ./Intrinsics_SSE4_128block.h:35:14: note: expanded from macro 'SHFL'
stream.c: #define SHFL _mm_shuffle_epi8
stream.c:              ^
stream.c: stream.c:306:3: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'ExpandKeyBS' that is compiled without support for 'ssse3'
stream.c: ./Simon128128SSE4.h:62:19: note: expanded from macro 'EKBS'
stream.c: #define EKBS(rk) (RKBS(rk,2,_D),  RKBS(rk,3,_C),  RKBS(rk,4,_D),  RKBS(rk,5,_C),  RKBS(rk,6,_D),  RKBS(rk,7,_D),  RKBS(rk,8,_D), RKBS(rk,9,_D), \
stream.c:                   ^
stream.c: ./Simon128128SSE4.h:54:38: note: expanded from macro 'RKBS'
stream.c:                        rk[r][6]= _D ^ rk[r-2][6] ^ ROR8(rk[r-1][1] ^ rk[r-1][2]), \
stream.c:                                                    ^
stream.c: ./Intrinsics_SSE4_128block.h:39:19: note: expanded from macro 'ROR8'
stream.c: #define ROR8(X)  (SHFL(X,R8))
stream.c:                   ^
stream.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:
ImplementationCompiler
T:sse4clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_16.0.6_(27+b1))

Compiler output


stream.c: stream.c:324:58: warning: argument 1 of type '__m128i[8]' with mismatched bound [-Warray-parameter=]
stream.c:   324 | inline __attribute__((always_inline)) int Transpose(u128 T[8])
stream.c: stream.c:28:58: note: previously declared as '__m128i[]'
stream.c:    28 | inline __attribute__((always_inline)) int Transpose(u128 M[]);

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:sse4gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:sse4gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:sse4gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)
T:sse4gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (13.3.0)