Implementation notes: ppc64, power9, crypto_kem/frodokem976aes

Computer: power9
Architecture: ppc64
CPU ID: unknown CPU ID
SUPERCOP version: 20210326
Operation: crypto_kem
Primitive: frodokem976aes

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
21116856	35764 46 0	62294 756 1984	`T:optimized`	`gcc_-mcpu=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
21148322	38176 46 0	64970 756 1984	`T:optimized`	`gcc_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
21153966	35764 46 0	62294 756 1984	`T:optimized`	`gcc_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
22638229	39480 32 0	64047 724 1960	`T:optimized`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
24623559	43144 32 0	67647 724 1944	`T:optimized`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
24815631	94072 64 0	73071 724 1960	`T:optimized`	`clang_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
24821312	47036 32 0	73071 724 1960	`T:optimized`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
24895632	43144 32 0	67647 724 1944	`T:optimized`	`clang_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
29995922	10516 32 0	31913 716 1944	`T:optimized`	`clang_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
30123995	10516 32 0	31913 716 1944	`T:optimized`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
46220200	11144 32 0	33097 716 1944	`T:optimized`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
46230936	11144 32 0	33097 716 1944	`T:optimized`	`clang_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210423	20210326
76887780	13256 32 0	38370 732 1968	`T:optimized`	`gcc_-mcpu=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
77007779	13256 32 0	38370 732 1968	`T:optimized`	`gcc_-mcpu=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
82881650	9816 32 0	32498 724 1960	`T:optimized`	`gcc_-mcpu=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
82891647	9816 32 0	32498 724 1960	`T:optimized`	`gcc_-mcpu=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
87093456	12656 32 0	37262 732 1968	`T:optimized`	`gcc_-mcpu=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
87101413	12656 32 0	37262 732 1968	`T:optimized`	`gcc_-mcpu=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
91777642	13416 32 0	38618 732 1968	`T:optimized`	`gcc_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
98367719	9832 32 0	32594 724 1960	`T:optimized`	`gcc_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326
100554684	12704 32 0	37322 732 1968	`T:optimized`	`gcc_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210423	20210326

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

aes_ni.c: In file included from aes_ni.c:6:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:13:
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:32:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: ^
aes_ni.c: In file included from aes_ni.c:6:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:13:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:43:
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/xmmintrin.h:31:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: ^
aes_ni.c: In file included from aes_ni.c:6:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:13:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:43:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/xmmintrin.h:56:
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/mmintrin.h:31:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: #error \
aes_ni.c: ^
aes_ni.c: In file included from aes_ni.c:6:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:15:
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/__wmmintrin_aes.h:37:10: error: invalid conversion between vector type '__m128i' (vector of 2 'long long' values) and integer type 'int' of different size
aes_ni.c: return (__m128i)__builtin_ia32_aesenc128((__v2di)__V, (__v2di)__R);
aes_ni.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/__wmmintrin_aes.h:57:10: error: invalid conversion between vector type '__m128i' (vector of 2 'long long' values) and integer type 'int' of different size
aes_ni.c: return (__m128i)__builtin_ia32_aesenclast128((__v2di)__V, (__v2di)__R);
aes_ni.c: ...
aes_ni.c: In file included from aes_ni.c:6:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:13:
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:32:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: ^
aes_ni.c: In file included from aes_ni.c:6:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:13:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:43:
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/xmmintrin.h:31:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: #error "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: ^
aes_ni.c: In file included from aes_ni.c:6:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:13:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/emmintrin.h:43:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/xmmintrin.h:56:
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/ppc_wrappers/mmintrin.h:31:2: error: "Please read comment above. Use -DNO_WARN_X86_INTRINSICS to disable this error."
aes_ni.c: #error \
aes_ni.c: ^
aes_ni.c: In file included from aes_ni.c:6:
aes_ni.c: In file included from /usr/lib/llvm-11/lib/clang/11.0.0/include/wmmintrin.h:15:
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/__wmmintrin_aes.h:37:10: error: invalid conversion between vector type '__m128i' (vector of 2 'long long' values) and integer type 'int' of different size
aes_ni.c: return (__m128i)__builtin_ia32_aesenc128((__v2di)__V, (__v2di)__R);
aes_ni.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.0/include/__wmmintrin_aes.h:57:10: error: invalid conversion between vector type '__m128i' (vector of 2 'long long' values) and integer type 'int' of different size
aes_ni.c: return (__m128i)__builtin_ia32_aesenclast128((__v2di)__V, (__v2di)__R);
aes_ni.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

aes_ni.c: aes_ni.c:6:10: fatal error: wmmintrin.h: No such file or directory
aes_ni.c: 6 | #include <wmmintrin.h>
aes_ni.c: | ^~~~~~~~~~~~~
aes_ni.c: compilation terminated.

Number of similar (compiler,implementation) pairs: 12, namely:

Compiler	Implementations
gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -mcpu=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64

Namespace violations

Implementation: T:optimized
Security model: timingleaks
Compiler: clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

aes.o AES128_free_schedule T
aes.o AES256_free_schedule T
aes.o handleErrors T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
frodo976.o CDF_TABLE D
frodo976.o CDF_TABLE_LEN D
frodo976.o frodo_add T
frodo976.o frodo_key_decode T
frodo976.o frodo_key_encode T
frodo976.o frodo_mul_add_as_plus_e T
frodo976.o frodo_mul_add_sa_plus_e T
frodo976.o frodo_mul_add_sb_plus_e T
frodo976.o frodo_mul_bs T
frodo976.o frodo_sample_n T
frodo976.o frodo_sub T
util.o clear_bytes T
util.o frodo_pack T
util.o frodo_unpack T

Number of similar (compiler,implementation) pairs: 20, namely:

Compiler	Implementations
clang -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized
gcc -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized
gcc -mcpu=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:optimized

Namespace violations

Implementation: T:optimized
Security model: timingleaks
Compiler: clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

aes.o AES128_free_schedule T
aes.o AES128_free_schedule T
aes.o AES256_free_schedule T
aes.o AES256_free_schedule T
aes.o handleErrors T
aes.o handleErrors T
fips202.o KeccakF1600_StatePermute T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fips202.o shake256_squeezeblocks T
frodo976.o CDF_TABLE D
frodo976.o CDF_TABLE D
frodo976.o CDF_TABLE_LEN D
frodo976.o CDF_TABLE_LEN D
frodo976.o frodo_add T
frodo976.o frodo_add T
frodo976.o frodo_key_decode T
frodo976.o frodo_key_decode T
frodo976.o frodo_key_encode T
frodo976.o frodo_key_encode T
frodo976.o frodo_mul_add_as_plus_e T
frodo976.o frodo_mul_add_as_plus_e T
frodo976.o frodo_mul_add_sa_plus_e T
frodo976.o frodo_mul_add_sa_plus_e T
frodo976.o frodo_mul_add_sb_plus_e T
frodo976.o frodo_mul_add_sb_plus_e T
frodo976.o frodo_mul_bs T
frodo976.o frodo_mul_bs T
frodo976.o frodo_sample_n T
frodo976.o frodo_sample_n T
frodo976.o frodo_sub T
frodo976.o frodo_sub T
util.o clear_bytes T
util.o clear_bytes T
util.o frodo_pack T
util.o frodo_pack T
util.o frodo_unpack T
util.o frodo_unpack T

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimized