Implementation notes: armeabi, bblack, crypto_aead/drygascon128k16

Computer: bblack
Microarchitecture: armeabi; Cortex-A8 (413fc082)
Architecture: armeabi
CPU ID: unknown CPU ID
SUPERCOP version: 20221122
Operation: crypto_aead
Primitive: drygascon128k16

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
668426	12860 268 32	22825 700 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
701755	5876 268 32	14817 700 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
878308	11389 268 32	26314 652 848	`T:opt_arm_cortex-m`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
878315	11401 268 32	25374 652 856	`T:opt_arm_cortex-m`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
878343	11389 268 32	26314 652 848	`T:opt_arm_cortex-m`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
947840	7497 268 32	20744 648 848	`T:opt_arm_cortex-m`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
969442	5361 268 32	14034 692 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
1046069	4749 0 0	18970 388 824	`T:le32`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
1046087	4369 0 0	19534 388 816	`T:le32`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
1046095	4369 0 0	19534 388 816	`T:le32`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
1136497	6136 268 32	15181 700 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
1794122	5395 0 0	15249 436 816	`T:le32`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
1880102	4853 0 0	27806 388 832	`T:le32`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
2063829	5757 0 0	28689 388 832	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
2071188	5817 0 0	20021 388 824	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
2089245	5837 0 0	20985 388 816	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
2089969	5837 0 0	20985 388 816	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
2577667	5325 0 0	15177 436 816	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
2661243	14229 268 32	36938 652 864	`T:opt_arm_cortex-m`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
3623810	3441 0 0	16929 384 816	`T:le32`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
4250908	4703 0 0	13533 436 816	`T:le32`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
4721594	4991 0 0	13925 436 816	`T:le32`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
8623209	2342 0 0	12227 428 816	`T:le32`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
10344728	2133 0 0	10961 436 816	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
11228628	3253 0 0	16732 384 816	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221018	20221005
12345341	2601 0 0	11533 436 816	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005
12811071	2102 0 0	11982 428 816	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221018	20221005

Compiler output

Implementation: T:opt_v6m-cortex-m0
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:7:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v6m.S: .cpu cortex-m0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:16: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:16: note: too many operands for instruction
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v6m-cortex-m0
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v6m-cortex-m0
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v6m-cortex-m0
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v6m-cortex-m0
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v6m-cortex-m0

Compiler output

Implementation: T:opt_v6m-cortex-m0
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: libcrypto_aead_drygascon128k16.a(drygascon128_arm-v6m.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file libcrypto_aead_drygascon128k16.a(drygascon128_arm-v6m.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0

Compiler output

Implementation: T:opt_v7m-cortex-m3
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:25:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v7m.S: .cpu cortex-m3
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: operand must be a register in range [r0, r12] or r14
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: too many operands for instruction
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m-cortex-m3
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m-cortex-m3
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m-cortex-m3
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m-cortex-m3
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m-cortex-m3

Compiler output

Implementation: T:opt_v7m-cortex-m3
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: libcrypto_aead_drygascon128k16.a(drygascon128_arm-v7m.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file libcrypto_aead_drygascon128k16.a(drygascon128_arm-v7m.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3

Compiler output

Implementation: T:opt_v7m_fpu-cortex-m4
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:23:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v7m_fpu.S: .cpu cortex-m4
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: operand must be a register in range [r0, r12] or r14
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: too many operands for instruction
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^

Number of similar (compiler,implementation) pairs: 10, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7

Compiler output

Implementation: T:opt_v7m_fpu-cortex-m4
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: libcrypto_aead_drygascon128k16.a(drygascon128_arm-v7m_fpu.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file libcrypto_aead_drygascon128k16.a(drygascon128_arm-v7m_fpu.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7

Namespace violations

Implementation: T:opt_arm_cortex-m
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

aead-common.o aead_check_tag T
aead-common.o aead_check_tag_precheck T
drygascon.o drygascon128_aead_decrypt_core T
drygascon.o drygascon128_aead_encrypt_core T
drygascon.o drygascon128_cipher D
drygascon.o drygascon128_hash T
drygascon.o drygascon128_hash_algorithm D
drygascon.o drygascon128k16_aead_decrypt T
drygascon.o drygascon128k16_aead_encrypt T
drygascon.o drygascon128k16_cipher D
drygascon.o drygascon128k16_expected D
drygascon.o drygascon128k32_aead_decrypt T
drygascon.o drygascon128k32_aead_encrypt T
drygascon.o drygascon128k32_cipher D
drygascon.o drygascon128k32_expected D
drygascon.o drygascon128k56_aead_decrypt T
drygascon.o drygascon128k56_aead_encrypt T
drygascon.o drygascon128k56_cipher D
drygascon.o drygascon128k56_expected D
drygascon.o drygascon256_aead_decrypt T
drygascon.o drygascon256_aead_encrypt T
drygascon.o drygascon256_cipher D
drygascon.o drygascon256_expected B
drygascon.o drygascon256_hash T
drygascon.o drygascon256_hash_algorithm D
internal-drysponge.o drygascon128_f_impl T
internal-drysponge.o drygascon128_f_wrap T
internal-drysponge.o drysponge128_g T
internal-drysponge.o drysponge128_g_core T
internal-drysponge.o drysponge128_safe_alignement T
internal-drysponge.o drysponge128_setup T
internal-drysponge.o drysponge256_f_absorb T
internal-drysponge.o drysponge256_g T
internal-drysponge.o drysponge256_g_core T
internal-drysponge.o drysponge256_setup T
internal-drysponge.o gascon128_core_round T
internal-drysponge.o gascon256_core_round T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_arm_cortex-m
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_arm_cortex-m
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_arm_cortex-m
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_arm_cortex-m
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m