Implementation notes: armeabi, berry2, crypto_aead/drygascon128k32

Computer: berry2
Microarchitecture: armeabi; Cortex-A7 (410fc075)
Architecture: armeabi
CPU ID: unknown CPU ID
SUPERCOP version: 20221122
Operation: crypto_aead
Primitive: drygascon128k32

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
936510	16704 268 32	29784 664 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
1035175	8036 268 32	19296 664 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
1208278	7557 268 32	18233 656 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
1479947	8924 268 32	20488 664 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
1831443	4669 0 0	28006 388 832	`T:le32`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210118	20210114
2002054	5607 0 0	18732 400 816	`T:le32`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
2034750	14133 268 32	37226 652 864	`T:opt_arm_cortex-m`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210118	20210114
3473554	6101 0 0	29413 388 832	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210118	20210114
3655528	9685 0 0	22808 400 816	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
4400589	4707 0 0	16012 400 816	`T:le32`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
4970483	4939 0 0	16548 400 816	`T:le32`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
6518782	3374 0 0	14094 392 816	`T:le32`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
10536045	3001 0 0	14304 400 816	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
12162790	3034 0 0	13753 392 816	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
14260020	3749 0 0	15356 400 816	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114

Compiler output

Implementation: T:opt_v6m-cortex-m0
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:7:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v6m.S: .cpu cortex-m0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:16: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:16: note: too many operands for instruction
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v6m-cortex-m0

Compiler output

Implementation: T:opt_v6m-cortex-m0
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: crypto_aead_drygascon128k32.a(drygascon128_arm-v6m.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file crypto_aead_drygascon128k32.a(drygascon128_arm-v6m.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0

Compiler output

Implementation: T:opt_v7m-cortex-m3
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:25:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v7m.S: .cpu cortex-m3
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: operand must be a register in range [r0, r12] or r14
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: too many operands for instruction
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m-cortex-m3

Compiler output

Implementation: T:opt_v7m-cortex-m3
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: crypto_aead_drygascon128k32.a(drygascon128_arm-v7m.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file crypto_aead_drygascon128k32.a(drygascon128_arm-v7m.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3

Compiler output

Implementation: T:opt_v7m_fpu-cortex-m4
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:23:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v7m_fpu.S: .cpu cortex-m4
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: operand must be a register in range [r0, r12] or r14
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: too many operands for instruction
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4 T:opt_v7m_fpu-cortex-m7

Compiler output

Implementation: T:opt_v7m_fpu-cortex-m4
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: crypto_aead_drygascon128k32.a(drygascon128_arm-v7m_fpu.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file crypto_aead_drygascon128k32.a(drygascon128_arm-v7m_fpu.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7

Namespace violations

Implementation: T:opt_arm_cortex-m
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

aead-common.o aead_check_tag T
aead-common.o aead_check_tag_precheck T
drygascon.o drygascon128_aead_decrypt_core T
drygascon.o drygascon128_aead_encrypt_core T
drygascon.o drygascon128_cipher D
drygascon.o drygascon128_hash T
drygascon.o drygascon128_hash_algorithm D
drygascon.o drygascon128k16_aead_decrypt T
drygascon.o drygascon128k16_aead_encrypt T
drygascon.o drygascon128k16_cipher D
drygascon.o drygascon128k16_expected D
drygascon.o drygascon128k32_aead_decrypt T
drygascon.o drygascon128k32_aead_encrypt T
drygascon.o drygascon128k32_cipher D
drygascon.o drygascon128k32_expected D
drygascon.o drygascon128k56_aead_decrypt T
drygascon.o drygascon128k56_aead_encrypt T
drygascon.o drygascon128k56_cipher D
drygascon.o drygascon128k56_expected D
drygascon.o drygascon256_aead_decrypt T
drygascon.o drygascon256_aead_encrypt T
drygascon.o drygascon256_cipher D
drygascon.o drygascon256_expected B
drygascon.o drygascon256_hash T
drygascon.o drygascon256_hash_algorithm D
internal-drysponge.o drygascon128_f_impl T
internal-drysponge.o drygascon128_f_wrap T
internal-drysponge.o drysponge128_g T
internal-drysponge.o drysponge128_g_core T
internal-drysponge.o drysponge128_safe_alignement T
internal-drysponge.o drysponge128_setup T
internal-drysponge.o drysponge256_f_absorb T
internal-drysponge.o drysponge256_g T
internal-drysponge.o drysponge256_g_core T
internal-drysponge.o drysponge256_setup T
internal-drysponge.o gascon128_core_round T
internal-drysponge.o gascon256_core_round T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m