Implementation notes: ppc64, power9, crypto_aead/hs1sivlov2

Computer: power9
Architecture: ppc64
CPU ID: unknown CPU ID
SUPERCOP version: 20210326
Operation: crypto_aead
Primitive: hs1sivlov2

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
18952	9316 0 0	34839 676 1224	`T:faster`	`gcc_-mcpu=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
19105	9316 0 0	34839 676 1224	`T:faster`	`gcc_-mcpu=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
19430	14728 0 0	40649 684 1216	`T:faster`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
20246	7032 0 0	29411 668 1216	`T:faster`	`gcc_-mcpu=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
20418	7032 0 0	29411 668 1216	`T:faster`	`gcc_-mcpu=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
22103	8740 0 0	32766 676 1216	`T:faster`	`gcc_-mcpu=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
22183	8740 0 0	32766 676 1216	`T:faster`	`gcc_-mcpu=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
22780	8374 0 0	33617 684 1208	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
22808	8374 0 0	33617 684 1208	`T:ref`	`clang_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
22859	8194 0 0	34049 684 1216	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
22891	8982 0 0	36337 684 1216	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
22984	17964 0 0	36337 684 1216	`T:ref`	`clang_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
31297	8053 0 0	35247 676 1240	`T:ref`	`gcc_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
31452	7737 0 0	34651 676 1240	`T:ref`	`gcc_-mcpu=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
31482	7737 0 0	34651 676 1240	`T:ref`	`gcc_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
33018	6729 0 0	32279 676 1224	`T:ref`	`gcc_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
33144	6517 0 0	32011 676 1224	`T:ref`	`gcc_-mcpu=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
33867	6517 0 0	32011 676 1224	`T:ref`	`gcc_-mcpu=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
35442	5017 0 0	27399 668 1216	`T:ref`	`gcc_-mcpu=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
37892	5017 0 0	27399 668 1216	`T:ref`	`gcc_-mcpu=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
38985	5121 0 0	27623 668 1216	`T:ref`	`gcc_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
39398	4650 0 0	26347 676 1208	`T:ref`	`clang_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
53822	4650 0 0	26347 676 1208	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
62202	7525 0 0	31691 676 1224	`T:ref`	`gcc_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
63410	7473 0 0	31627 676 1224	`T:ref`	`gcc_-mcpu=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
64224	7473 0 0	31627 676 1224	`T:ref`	`gcc_-mcpu=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210422	20210326
87763	6054 0 0	28211 676 1208	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326
87824	6054 0 0	28211 676 1208	`T:ref`	`clang_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210422	20210326

Checksum failure

Implementation: T:faster
Security model: timingleaks
Compiler: gcc -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE

863c8f329eca5dcf546537e49f745f2700e6d645c93910e7303b6913339c53e8

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
gcc -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster

Test failure

Implementation: T:faster
Security model: timingleaks
Compiler: clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111
crypto_aead_encrypt is nondeterministic

Number of similar (compiler,implementation) pairs: 7, namely:

Compiler	Implementations
clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster

Test failure

Implementation: T:faster
Security model: timingleaks
Compiler: clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111
crypto_aead_encrypt is nondeterministic
error 111
crypto_aead_encrypt is nondeterministic

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster

Test failure

Implementation: T:faster
Security model: timingleaks
Compiler: gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

error 111
crypto_aead_encrypt does not handle m=c overlap

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster

Test failure

Implementation: T:faster
Security model: timingleaks
Compiler: gcc -O -fomit-frame-pointer -fwrapv -fPIC -fPIE

error 111
crypto_aead_decrypt returns nonzero

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
gcc -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster

Compiler output

Implementation: T:faster
Security model: timingleaks
Compiler: clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster

Compiler output

Implementation: T:faster
Security model: timingleaks
Compiler: clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

hs1.c: hs1.c:1033:30: warning: implicitly declaring library function 'malloc' with type 'void *(unsigned long)' [-Wimplicit-function-declaration]
hs1.c: unsigned char *tmp = malloc(abytes);
hs1.c: ^
hs1.c: hs1.c:1033:30: note: include the header <stdlib.h> or explicitly provide a declaration for 'malloc'
hs1.c: hs1.c:1037:9: warning: implicit declaration of function 'free' is invalid in C99 [-Wimplicit-function-declaration]
hs1.c: free(tmp);
hs1.c: ^
hs1.c: 2 warnings generated.
hs1.c: hs1.c:1033:30: warning: implicitly declaring library function 'malloc' with type 'void *(unsigned long)' [-Wimplicit-function-declaration]
hs1.c: unsigned char *tmp = malloc(abytes);
hs1.c: ^
hs1.c: hs1.c:1033:30: note: include the header <stdlib.h> or explicitly provide a declaration for 'malloc'
hs1.c: hs1.c:1037:9: warning: implicit declaration of function 'free' is invalid in C99 [-Wimplicit-function-declaration]
hs1.c: free(tmp);
hs1.c: ^
hs1.c: 2 warnings generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster

Compiler output

Implementation: T:faster
Security model: timingleaks
Compiler: gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

hs1.c: hs1.c: In function 'hs1siv_decrypt':
hs1.c: hs1.c:1033:30: warning: implicit declaration of function 'malloc' [-Wimplicit-function-declaration]
hs1.c: 1033 | unsigned char *tmp = malloc(abytes);
hs1.c: | ^~~~~~
hs1.c: hs1.c:1033:30: warning: incompatible implicit declaration of built-in function 'malloc'
hs1.c: hs1.c:25:1: note: include '<stdlib.h>' or provide a declaration of 'malloc'
hs1.c: 24 | #include "crypto_aead.h"
hs1.c: +++ |+#include <stdlib.h>
hs1.c: 25 |
hs1.c: hs1.c:1037:9: warning: implicit declaration of function 'free' [-Wimplicit-function-declaration]
hs1.c: 1037 | free(tmp);
hs1.c: | ^~~~
hs1.c: hs1.c:1037:9: warning: incompatible implicit declaration of built-in function 'free'
hs1.c: hs1.c:1037:9: note: include '<stdlib.h>' or provide a declaration of 'free'

Number of similar (compiler,implementation) pairs: 12, namely:

Compiler	Implementations
gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster

Namespace violations

Implementation: T:faster
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

hs1.o chacha_blocks T
hs1.o hash_finalize T
hs1.o hash_step T
hs1.o hs1 T
hs1.o hs1_bzero T
hs1.o hs1_gen_siv T
hs1.o hs1_memcpy T
hs1.o hs1_setup T
hs1.o hs1siv_decrypt T
hs1.o hs1siv_encrypt T
hs1.o poly_finalize T

Number of similar (compiler,implementation) pairs: 7, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
gcc -mcpu=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -mcpu=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

encrypt.o chacha T
encrypt.o chacha_ivsetup T
encrypt.o chacha_keysetup T
encrypt.o hs1 T
encrypt.o hs1_hash T
encrypt.o hs1siv_chacha256 T
encrypt.o hs1siv_decrypt T
encrypt.o hs1siv_encrypt T
encrypt.o hs1siv_subkeygen T
encrypt.o prf_hash2 T

Number of similar (compiler,implementation) pairs: 20, namely:

Compiler	Implementations
clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -mcpu=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -mcpu=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -mcpu=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -mcpu=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -mcpu=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -mcpu=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -mcpu=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -mcpu=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

encrypt.o chacha T
encrypt.o chacha T
encrypt.o chacha_ivsetup T
encrypt.o chacha_ivsetup T
encrypt.o chacha_keysetup T
encrypt.o chacha_keysetup T
encrypt.o hs1 T
encrypt.o hs1 T
encrypt.o hs1_hash T
encrypt.o hs1_hash T
encrypt.o hs1siv_chacha256 T
encrypt.o hs1siv_chacha256 T
encrypt.o hs1siv_decrypt T
encrypt.o hs1siv_decrypt T
encrypt.o hs1siv_encrypt T
encrypt.o hs1siv_encrypt T
encrypt.o hs1siv_subkeygen T
encrypt.o hs1siv_subkeygen T
encrypt.o prf_hash2 T
encrypt.o prf_hash2 T

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref