Implementation notes: armeabi, berry2, crypto_aead/drygascon128k32

Computer: berry2
Microarchitecture: armeabi; Cortex-A7 (410fc075)
Architecture: armeabi
CPU ID: unknown CPU ID
SUPERCOP version: 20240107
Operation: crypto_aead
Primitive: drygascon128k32
TimeObject sizeTest sizeImplementationCompilerBenchmark dateSUPERCOP version
92659816704 268 3229784 664 848T:opt_arm_cortex-mgcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
10338458036 268 3219296 664 848T:opt_arm_cortex-mgcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
12060337557 268 3218233 656 848T:opt_arm_cortex-mgcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
14571368924 268 3220488 664 848T:opt_arm_cortex-mgcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
18268374669 0 028038 388 832T:le32clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2024012620240107
195909014133 268 3237258 652 864T:opt_arm_cortex-mclang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2024012620240107
19858995607 0 018732 400 816T:le32gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
34562546101 0 029445 388 832T:refclang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2024012620240107
36248949685 0 022808 400 816T:refgcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
43563054707 0 016012 400 816T:le32gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
48345574939 0 016548 400 816T:le32gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
60734933374 0 014094 392 816T:le32gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
105030153001 0 014304 400 816T:refgcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
117895233034 0 013753 392 816T:refgcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107
134460133749 0 015356 400 816T:refgcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024012620240107

Compiler output

Implementation: T:opt_v6m-cortex-m0
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:7:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v6m.S: .cpu cortex-m0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:16: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:16: note: too many operands for instruction
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^

Number of similar (compiler,implementation) pairs: 1, namely:
CompilerImplementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:opt_v6m-cortex-m0

Compiler output

Implementation: T:opt_v6m-cortex-m0
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE
try.c: /usr/bin/ld: error: libcrypto_aead_drygascon128k32.a(drygascon128_arm-v6m.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file libcrypto_aead_drygascon128k32.a(drygascon128_arm-v6m.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:
CompilerImplementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v6m-cortex-m0

Compiler output

Implementation: T:opt_v7m-cortex-m3
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:25:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v7m.S: .cpu cortex-m3
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: operand must be a register in range [r0, r12] or r14
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: too many operands for instruction
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^

Number of similar (compiler,implementation) pairs: 1, namely:
CompilerImplementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:opt_v7m-cortex-m3

Compiler output

Implementation: T:opt_v7m-cortex-m3
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE
try.c: /usr/bin/ld: error: libcrypto_aead_drygascon128k32.a(drygascon128_arm-v7m.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file libcrypto_aead_drygascon128k32.a(drygascon128_arm-v7m.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:
CompilerImplementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m-cortex-m3

Compiler output

Implementation: T:opt_v7m_fpu-cortex-m4
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:23:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v7m_fpu.S: .cpu cortex-m4
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: operand must be a register in range [r0, r12] or r14
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: too many operands for instruction
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^

Number of similar (compiler,implementation) pairs: 2, namely:
CompilerImplementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:opt_v7m_fpu-cortex-m4 T:opt_v7m_fpu-cortex-m7

Compiler output

Implementation: T:opt_v7m_fpu-cortex-m4
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE
try.c: /usr/bin/ld: error: libcrypto_aead_drygascon128k32.a(drygascon128_arm-v7m_fpu.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file libcrypto_aead_drygascon128k32.a(drygascon128_arm-v7m_fpu.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 8, namely:
CompilerImplementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_v7m_fpu-cortex-m7

Namespace violations

Implementation: T:opt_arm_cortex-m
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
aead-common.o aead_check_tag T
aead-common.o aead_check_tag_precheck T
drygascon.o drygascon128_aead_decrypt_core T
drygascon.o drygascon128_aead_encrypt_core T
drygascon.o drygascon128_cipher D
drygascon.o drygascon128_hash T
drygascon.o drygascon128_hash_algorithm D
drygascon.o drygascon128k16_aead_decrypt T
drygascon.o drygascon128k16_aead_encrypt T
drygascon.o drygascon128k16_cipher D
drygascon.o drygascon128k16_expected D
drygascon.o drygascon128k32_aead_decrypt T
drygascon.o drygascon128k32_aead_encrypt T
drygascon.o drygascon128k32_cipher D
drygascon.o drygascon128k32_expected D
drygascon.o drygascon128k56_aead_decrypt T
drygascon.o drygascon128k56_aead_encrypt T
drygascon.o drygascon128k56_cipher D
drygascon.o drygascon128k56_expected D
drygascon.o drygascon256_aead_decrypt T
drygascon.o drygascon256_aead_encrypt T
drygascon.o drygascon256_cipher D
drygascon.o drygascon256_expected B
drygascon.o drygascon256_hash T
drygascon.o drygascon256_hash_algorithm D
internal-drysponge.o drygascon128_f_impl T
internal-drysponge.o drygascon128_f_wrap T
internal-drysponge.o drysponge128_g T
internal-drysponge.o drysponge128_g_core T
internal-drysponge.o drysponge128_safe_alignement T
internal-drysponge.o drysponge128_setup T
internal-drysponge.o drysponge256_f_absorb T
internal-drysponge.o drysponge256_g T
internal-drysponge.o drysponge256_g_core T
internal-drysponge.o drysponge256_setup T
internal-drysponge.o gascon128_core_round T
internal-drysponge.o gascon256_core_round T

Number of similar (compiler,implementation) pairs: 5, namely:
CompilerImplementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:opt_arm_cortex-m
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_arm_cortex-m
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_arm_cortex-m
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_arm_cortex-m
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt_arm_cortex-m