Test results for amd64, alder, crypto_sign/nccsign1aes

[Page version: 20250418 21:20:05]

Compiler output

aes.c: aes.c:51:24: warning: unused function 'br_swap32' [-Wunused-function]
aes.c:    51 | static inline uint32_t br_swap32(uint32_t x)
aes.c:       |                        ^~~~~~~~~
aes.c: 1 warning generated.

Compiler output

aes.c: aes.c:660:5: error: '__builtin_ia32_aeskeygenassist128' needs target feature aes
aes.c:   660 |     BLOCK1(0x01);
aes.c:       |     ^
aes.c: aes.c:641:13: note: expanded from macro 'BLOCK1'
aes.c:   641 |     temp1 = _mm_aeskeygenassist_si128(temp2, IMM);                        \
aes.c:       |             ^
aes.c: /usr/lib/llvm-19/lib/clang/19/include/__wmmintrin_aes.h:136:13: note: expanded from macro '_mm_aeskeygenassist_si128'
aes.c:   136 |   ((__m128i)__builtin_ia32_aeskeygenassist128((__v2di)(__m128i)(C), (int)(R)))
aes.c:       |             ^
aes.c: aes.c:661:5: error: '__builtin_ia32_aeskeygenassist128' needs target feature aes
aes.c:   661 |     BLOCK2(0x01);
aes.c:       |     ^
aes.c: aes.c:651:13: note: expanded from macro 'BLOCK2'
aes.c:   651 |     temp1 = _mm_aeskeygenassist_si128(temp0, IMM);                        \
aes.c:       |             ^
aes.c: /usr/lib/llvm-19/lib/clang/19/include/__wmmintrin_aes.h:136:13: note: expanded from macro '_mm_aeskeygenassist_si128'
aes.c:   136 |   ((__m128i)__builtin_ia32_aeskeygenassist128((__v2di)(__m128i)(C), (int)(R)))
aes.c:       |             ^
aes.c: aes.c:663:5: error: '__builtin_ia32_aeskeygenassist128' needs target feature aes
aes.c:   663 |     BLOCK1(0x02);
aes.c:       |     ^
aes.c: aes.c:641:13: note: expanded from macro 'BLOCK1'
aes.c:   641 |     temp1 = _mm_aeskeygenassist_si128(temp2, IMM);                        \
aes.c:       |             ^
aes.c: /usr/lib/llvm-19/lib/clang/19/include/__wmmintrin_aes.h:136:13: note: expanded from macro '_mm_aeskeygenassist_si128'
aes.c: ...

Namespace violations

aes.o aes256_ctr_keyexp T
aes.o aes256_ctx_release T
aes.o aes256_ecb T
aes.o aes256_ecb_keyexp T
aes.o aes256ctr_init T
aes.o aes256ctr_squeezeblocks T
fips202.o KeccakF_RoundConstants R
fips202.o sha3_256 T
fips202.o sha3_512 T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_absorb_once T
fips202.o shake128_finalize T
fips202.o shake128_init T
fips202.o shake128_squeeze T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_absorb_once T
fips202.o shake256_finalize T
fips202.o shake256_init T
fips202.o shake256_squeeze T
fips202.o shake256_squeezeblocks T
packing.o pack_pk T
packing.o pack_sig T
packing.o pack_sk T
packing.o polyeta_pack T
packing.o polyeta_unpack T
packing.o polyt0_pack T
packing.o polyt0_unpack T
packing.o polyt1_pack T
packing.o polyt1_unpack T
packing.o polyw1_pack T
packing.o polyz_pack T
packing.o polyz_unpack T
packing.o unpack_pk T
packing.o unpack_sig T
packing.o unpack_sk T
poly.o base_mul_avx T
poly.o invntt_tomont_avx_4way T
poly.o ntt_avx_4way T
poly.o poly_add T
poly.o poly_base_mul_avx_4way T
poly.o poly_caddq T
poly.o poly_challenge T
poly.o poly_chknorm T
poly.o poly_decompose T
poly.o poly_make_hint T
poly.o poly_modadd T
poly.o poly_modsub T
poly.o poly_power2round T
poly.o poly_reduce T
poly.o poly_shiftl T
poly.o poly_sub T
poly.o poly_uniform_avx_4way T
poly.o poly_uniform_eta T
poly.o poly_uniform_gamma1 T
poly.o poly_use_hint T
poly.o vector_3way_to_4way T
poly.o vector_4way_to_3way T
poly.o zetas D
poly.o zetas_inv D
reduce.o caddq T
reduce.o csubq T
reduce.o freeze T
reduce.o mod_add T
reduce.o mod_sub T
reduce.o montgomery_reduce T
reduce.o montgomery_reduce_avx T
reduce.o printt_256 T
reduce.o reduce32 T
reduce.o reduce32_avx T
reduce.o reduce32_avx_4 T
rounding.o decompose T
rounding.o make_hint T
rounding.o power2round T
rounding.o use_hint T
sign.o crypto_sign_signature T
sign.o crypto_sign_verify T
symmetric-aes.o NIMS_aes256ctr_init T
symmetric-shake.o NIMS_shake128_stream_init T
symmetric-shake.o NIMS_shake256_stream_init T

Namespace violations

aes.o aes128_ctr T
aes.o aes128_ctr_keyexp T
aes.o aes128_ctx_release T
aes.o aes128_ecb T
aes.o aes128_ecb_keyexp T
aes.o aes192_ctr T
aes.o aes192_ctr_keyexp T
aes.o aes192_ctx_release T
aes.o aes192_ecb T
aes.o aes192_ecb_keyexp T
aes.o aes256_ctr T
aes.o aes256_ctr_keyexp T
aes.o aes256_ctx_release T
aes.o aes256_ecb T
aes.o aes256_ecb_keyexp T
aes.o aes256ctr_init T
aes.o aes256ctr_prf T
aes.o aes256ctr_squeezeblocks T
fips202.o sha3_256 T
fips202.o sha3_512 T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_finalize T
fips202.o shake128_init T
fips202.o shake128_squeeze T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_finalize T
fips202.o shake256_init T
fips202.o shake256_squeeze T
fips202.o shake256_squeezeblocks T
packing.o pack_pk T
packing.o pack_sig T
packing.o pack_sk T
packing.o polyeta_pack T
packing.o polyeta_unpack T
packing.o polyt0_pack T
packing.o polyt0_unpack T
packing.o polyt1_pack T
packing.o polyt1_unpack T
packing.o polyw1_pack T
packing.o polyz_pack T
packing.o polyz_unpack T
packing.o unpack_pk T
packing.o unpack_sig T
packing.o unpack_sk T
poly.o base_mul T
poly.o invntt_tomont T
poly.o ntt T
poly.o pointwise_mul T
poly.o poly_add T
poly.o poly_base_mul T
poly.o poly_caddq T
poly.o poly_challenge T
poly.o poly_chknorm T
poly.o poly_decompose T
poly.o poly_make_hint T
poly.o poly_modadd T
poly.o poly_modsub T
poly.o poly_mul_schoolbook T
poly.o poly_power2round T
poly.o poly_reduce T
poly.o poly_shiftl T
poly.o poly_sub T
poly.o poly_uniform T
poly.o poly_uniform_eta T
poly.o poly_uniform_gamma1 T
poly.o poly_use_hint T
poly.o reduce_modQ T
poly.o zetas D
poly.o zetas_inv D
reduce.o caddq T
reduce.o csubq T
reduce.o freeze T
reduce.o mod_add T
reduce.o mod_sub T
reduce.o montgomery_reduce T
reduce.o reduce32 T
rounding.o decompose T
rounding.o make_hint T
rounding.o power2round T
rounding.o use_hint T
sign.o crypto_sign_signature T
sign.o crypto_sign_verify T
symmetric-aes.o NIMS_aes256ctr_init T
symmetric-shake.o NIMS_shake128_stream_init T
symmetric-shake.o NIMS_shake256_stream_init T

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10E05C
   at 0x...: polyeta_unpack (packing.c:67)
   by 0x...: unpack_sk (packing.c:525)
   by 0x...: crypto_sign_signature (sign.c:77)
   by 0x...: crypto_sign_nccsign1aes_avx2_constbranchindex (sign.c:195)
   by 0x...: test (try.c:145)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10E1EC
   at 0x...: polyeta_unpack (packing.c:67)
   by 0x...: unpack_sk (packing.c:525)
   by 0x...: crypto_sign_signature (sign.c:77)
   by 0x...: crypto_sign_nccsign1aes_avx2_constbranchindex (sign.c:195)
   by 0x...: test (try.c:145)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A62D
   at 0x...: main (try-anything.c:369)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10DE1C
   at 0x...: polyeta_unpack (packing.c:33)
   by 0x...: unpack_sk (packing.c:363)
   by 0x...: crypto_sign_signature (sign.c:73)
   by 0x...: crypto_sign_nccsign1aes_ref_constbranchindex (sign.c:183)
   by 0x...: test (try.c:145)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10DFDC
   at 0x...: polyeta_unpack (packing.c:33)
   by 0x...: unpack_sk (packing.c:363)
   by 0x...: crypto_sign_signature (sign.c:73)
   by 0x...: crypto_sign_nccsign1aes_ref_constbranchindex (sign.c:183)
   by 0x...: test (try.c:145)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Passed TIMECOP

TIMECOP iterations: 10