Implementation notes: armeabi, berry2, crypto_aead/drygascon128k56

Computer: berry2
Microarchitecture: armeabi; Cortex-A7 (410fc075)
Architecture: armeabi
CPU ID: unknown CPU ID
SUPERCOP version: 20221122
Operation: crypto_aead
Primitive: drygascon128k56

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
989499	16704 268 32	29796 664 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
1089862	8036 268 32	19308 664 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
1204497	7557 268 32	18233 656 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
1539876	8924 268 32	20540 664 848	`T:opt_arm_cortex-m`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
1846507	4777 0 0	28154 388 832	`T:le32`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210118	20210114
1976274	14133 268 32	37258 652 864	`T:opt_arm_cortex-m`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210118	20210114
1981414	5591 0 0	18728 400 816	`T:le32`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
3473197	5729 0 0	29073 388 832	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210118	20210114
3670040	9565 0 0	22700 400 816	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
4451550	4691 0 0	16008 400 816	`T:le32`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
4865834	4891 0 0	16552 400 816	`T:le32`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
6606003	3358 0 0	14078 392 816	`T:le32`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
11214186	3041 0 0	14356 400 816	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
11821970	3058 0 0	13777 392 816	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114
13648044	3785 0 0	15444 400 816	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210118	20210114

Compiler output

Implementation: T:opt_v6m-cortex-m0
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:7:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v6m.S: .cpu cortex-m0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:16: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^
drygascon128_arm-v6m.S: drygascon128_arm-v6m.S:461:16: note: too many operands for instruction
drygascon128_arm-v6m.S: lsrs r1,r6,#0
drygascon128_arm-v6m.S: ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v6m-cortex-m0

Compiler output

Implementation: T:opt_v6m-cortex-m0
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: crypto_aead_drygascon128k56.a(drygascon128_arm-v6m.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file crypto_aead_drygascon128k56.a(drygascon128_arm-v6m.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v6m-cortex-m0

Compiler output

Implementation: T:opt_v7m-cortex-m3
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:25:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v7m.S: .cpu cortex-m3
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: operand must be a register in range [r0, r12] or r14
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^
drygascon128_arm-v7m.S: drygascon128_arm-v7m.S:314:18: note: too many operands for instruction
drygascon128_arm-v7m.S: lsrs r11,r14,#0
drygascon128_arm-v7m.S: ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m-cortex-m3

Compiler output

Implementation: T:opt_v7m-cortex-m3
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: crypto_aead_drygascon128k56.a(drygascon128_arm-v7m.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file crypto_aead_drygascon128k56.a(drygascon128_arm-v7m.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m-cortex-m3

Compiler output

Implementation: T:opt_v7m_fpu-cortex-m4
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:23:1: warning: new target does not support arm mode, switching to thumb mode
drygascon128_arm-v7m_fpu.S: .cpu cortex-m4
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:5: error: invalid instruction, any one of the following would fix this:
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: operand must be an immediate in the range [1,32]
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: operand must be a register in range [r0, r12] or r14
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^
drygascon128_arm-v7m_fpu.S: drygascon128_arm-v7m_fpu.S:316:18: note: too many operands for instruction
drygascon128_arm-v7m_fpu.S: lsrs r11,r14,#0
drygascon128_arm-v7m_fpu.S: ^

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4 T:opt_v7m_fpu-cortex-m7

Compiler output

Implementation: T:opt_v7m_fpu-cortex-m4
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: error: crypto_aead_drygascon128k56.a(drygascon128_arm-v7m_fpu.o): conflicting architecture profiles M/A
try.c: /usr/bin/ld: failed to merge target specific data of file crypto_aead_drygascon128k56.a(drygascon128_arm-v7m_fpu.o)
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m4
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_v7m_fpu-cortex-m7

Namespace violations

Implementation: T:opt_arm_cortex-m
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

aead-common.o aead_check_tag T
aead-common.o aead_check_tag_precheck T
drygascon.o drygascon128_aead_decrypt_core T
drygascon.o drygascon128_aead_encrypt_core T
drygascon.o drygascon128_cipher D
drygascon.o drygascon128_hash T
drygascon.o drygascon128_hash_algorithm D
drygascon.o drygascon128k16_aead_decrypt T
drygascon.o drygascon128k16_aead_encrypt T
drygascon.o drygascon128k16_cipher D
drygascon.o drygascon128k16_expected D
drygascon.o drygascon128k32_aead_decrypt T
drygascon.o drygascon128k32_aead_encrypt T
drygascon.o drygascon128k32_cipher D
drygascon.o drygascon128k32_expected D
drygascon.o drygascon128k56_aead_decrypt T
drygascon.o drygascon128k56_aead_encrypt T
drygascon.o drygascon128k56_cipher D
drygascon.o drygascon128k56_expected D
drygascon.o drygascon256_aead_decrypt T
drygascon.o drygascon256_aead_encrypt T
drygascon.o drygascon256_cipher D
drygascon.o drygascon256_expected B
drygascon.o drygascon256_hash T
drygascon.o drygascon256_hash_algorithm D
internal-drysponge.o drygascon128_f_impl T
internal-drysponge.o drygascon128_f_wrap T
internal-drysponge.o drysponge128_g T
internal-drysponge.o drysponge128_g_core T
internal-drysponge.o drysponge128_safe_alignement T
internal-drysponge.o drysponge128_setup T
internal-drysponge.o drysponge256_f_absorb T
internal-drysponge.o drysponge256_g T
internal-drysponge.o drysponge256_g_core T
internal-drysponge.o drysponge256_setup T
internal-drysponge.o gascon128_core_round T
internal-drysponge.o gascon256_core_round T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt_arm_cortex-m