Implementation notes: ppc64, power9, crypto_kem/frodokem640shake

Computer: power9
Architecture: ppc64
CPU ID: unknown CPU ID
SUPERCOP version: 20210326
Operation: crypto_kem
Primitive: frodokem640shake

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
20895496	39436 28 0	63049 724 1904	`T:optimized`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
21630308	35264 42 0	60911 740 1928	`T:optimized`	`gcc_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
21642887	35264 42 0	60911 740 1928	`T:optimized`	`gcc_-mcpu=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
21862342	37700 42 0	63611 740 1928	`T:optimized`	`gcc_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
22095054	94144 56 0	72169 724 1904	`T:optimized`	`clang_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
22235518	47072 28 0	72169 724 1904	`T:optimized`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
23009573	33868 28 0	57433 724 1888	`T:optimized`	`clang_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
23042885	33868 28 0	57433 724 1888	`T:optimized`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
28448651	9764 28 0	30307 716 1888	`T:optimized`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
28665320	9764 28 0	30307 716 1888	`T:optimized`	`clang_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
48150785	10128 28 0	31219 716 1888	`T:optimized`	`clang_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
49864623	10128 28 0	31219 716 1888	`T:optimized`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
57595293	12388 28 0	36695 716 1912	`T:optimized`	`gcc_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
58605212	12068 28 0	36295 716 1912	`T:optimized`	`gcc_-mcpu=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
58685438	12068 28 0	36295 716 1912	`T:optimized`	`gcc_-mcpu=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
62573712	8968 28 0	30751 708 1904	`T:optimized`	`gcc_-mcpu=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
62661712	8968 28 0	30751 708 1904	`T:optimized`	`gcc_-mcpu=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
65239486	11692 28 0	35379 716 1912	`T:optimized`	`gcc_-mcpu=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
65313881	11692 28 0	35379 716 1912	`T:optimized`	`gcc_-mcpu=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
65968672	8924 28 0	30775 708 1904	`T:optimized`	`gcc_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
67400173	11736 28 0	35447 716 1912	`T:optimized`	`gcc_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/smmintrin.h:25:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: #error \
KeccakP-1600-times4-SIMD256.c: ^
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/smmintrin.h:35:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:32:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: ^
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/smmintrin.h:35:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:43:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/xmmintrin.h:31:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: ^
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/smmintrin.h:35:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:43:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/xmmintrin.h:56:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/mmintrin.h:31:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: #error \
KeccakP-1600-times4-SIMD256.c: ^
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:20:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:13:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:32:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: ...
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/smmintrin.h:25:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: #error \
KeccakP-1600-times4-SIMD256.c: ^
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/smmintrin.h:35:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:32:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: ^
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/smmintrin.h:35:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:43:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/xmmintrin.h:31:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: ^
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/smmintrin.h:35:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:43:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/xmmintrin.h:56:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/mmintrin.h:31:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: #error \
KeccakP-1600-times4-SIMD256.c: ^
KeccakP-1600-times4-SIMD256.c: In file included from KeccakP-1600-times4-SIMD256.c:20:
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:13:
KeccakP-1600-times4-SIMD256.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:32:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/tmmintrin.h:44,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/smmintrin.h:43,
KeccakP-1600-times4-SIMD256.c: from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: /usr/lib/gcc/powerpc64le-linux-gnu/10/include/pmmintrin.h:49:2: error: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this warning."
KeccakP-1600-times4-SIMD256.c: 49 | #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this warning."
KeccakP-1600-times4-SIMD256.c: | ^~~~~
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/pmmintrin.h:56,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/tmmintrin.h:44,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/smmintrin.h:43,
KeccakP-1600-times4-SIMD256.c: from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: /usr/lib/gcc/powerpc64le-linux-gnu/10/include/emmintrin.h:56:2: error: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: 56 | #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: | ^~~~~
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/emmintrin.h:66,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/pmmintrin.h:56,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/tmmintrin.h:44,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/smmintrin.h:43,
KeccakP-1600-times4-SIMD256.c: from KeccakP-1600-times4-SIMD256.c:19:
KeccakP-1600-times4-SIMD256.c: /usr/lib/gcc/powerpc64le-linux-gnu/10/include/xmmintrin.h:54:2: error: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: 54 | #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
KeccakP-1600-times4-SIMD256.c: | ^~~~~
KeccakP-1600-times4-SIMD256.c: In file included from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/xmmintrin.h:79,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/emmintrin.h:66,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/pmmintrin.h:56,
KeccakP-1600-times4-SIMD256.c: from /usr/lib/gcc/powerpc64le-linux-gnu/10/include/tmmintrin.h:44,
KeccakP-1600-times4-SIMD256.c: ...

Number of similar (compiler,implementation) pairs: 12, namely:

Compiler	Implementations
gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64

Namespace violations

Implementation: T:optimized
Security model: timingleaks
Compiler: clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
frodo640.o CDF_TABLE D
frodo640.o CDF_TABLE_LEN D
frodo640.o frodo_add T
frodo640.o frodo_key_decode T
frodo640.o frodo_key_encode T
frodo640.o frodo_mul_add_as_plus_e T
frodo640.o frodo_mul_add_sa_plus_e T
frodo640.o frodo_mul_add_sb_plus_e T
frodo640.o frodo_mul_bs T
frodo640.o frodo_sample_n T
frodo640.o frodo_sub T
util.o clear_bytes T
util.o frodo_pack T
util.o frodo_unpack T

Number of similar (compiler,implementation) pairs: 20, namely:

Compiler	Implementations
clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized

Namespace violations

Implementation: T:optimized
Security model: timingleaks
Compiler: clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

fips202.o KeccakF1600_StatePermute T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fips202.o shake256_squeezeblocks T
frodo640.o CDF_TABLE D
frodo640.o CDF_TABLE D
frodo640.o CDF_TABLE_LEN D
frodo640.o CDF_TABLE_LEN D
frodo640.o frodo_add T
frodo640.o frodo_add T
frodo640.o frodo_key_decode T
frodo640.o frodo_key_decode T
frodo640.o frodo_key_encode T
frodo640.o frodo_key_encode T
frodo640.o frodo_mul_add_as_plus_e T
frodo640.o frodo_mul_add_as_plus_e T
frodo640.o frodo_mul_add_sa_plus_e T
frodo640.o frodo_mul_add_sa_plus_e T
frodo640.o frodo_mul_add_sb_plus_e T
frodo640.o frodo_mul_add_sb_plus_e T
frodo640.o frodo_mul_bs T
frodo640.o frodo_mul_bs T
frodo640.o frodo_sample_n T
frodo640.o frodo_sample_n T
frodo640.o frodo_sub T
frodo640.o frodo_sub T
util.o clear_bytes T
util.o clear_bytes T
util.o frodo_pack T
util.o frodo_pack T
util.o frodo_unpack T
util.o frodo_unpack T

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized