[Page version: 20241023 11:47:51]
Measurements for amd64, h6sandy, crypto_sign Test results for amd64, h6sandy, crypto_sign Test results for crypto_sign/picnic3l5| Time | Object size | Test size | Implementation | Compiler | Benchmark date | SUPERCOP version | 
|---|---|---|---|---|---|---|
| 209822806 | 186039 152 0 | 349672 1084 1760 | optimizedct/avx2 | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 212161766 | 186591 152 0 | 348872 1084 1760 | optimizedct/avx2 | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 213821348 | 171207 152 0 | 328735 1076 1728 | optimizedct/sse2 | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241014 | 20241011 | 
| 213976413 | 165358 152 0 | 322423 1076 1728 | optimizedct/sse2 | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 214231115 | 170687 152 0 | 329535 1076 1728 | optimizedct/sse2 | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 214676055 | 176294 152 0 | 338152 1084 1760 | optimizedct/avx2 | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 214879206 | 182697 160 0 | 344651 1044 1824 | optimizedct/avx2 | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 215505033 | 169727 160 0 | 326706 1036 1792 | optimizedct/sse2 | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 217203410 | 170125 160 0 | 331307 1044 1824 | optimizedct/avx2 | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 220798408 | 161059 160 0 | 317234 1036 1792 | optimizedct/sse2 | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 222386724 | 168694 160 0 | 329363 1044 1824 | optimizedct/avx2 | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 224419088 | 159493 160 0 | 315242 1036 1792 | optimizedct/sse2 | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 227636381 | 167748 160 0 | 324714 1036 1792 | optimizedct/c | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 228593611 | 154874 152 0 | 310105 1068 1728 | optimizedct/sse2 | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 231066510 | 164482 152 0 | 323359 1076 1728 | optimizedct/c | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 231154615 | 160049 152 0 | 317127 1076 1728 | optimizedct/c | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 231375428 | 164402 152 0 | 321919 1076 1728 | optimizedct/c | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 232848484 | 162321 152 0 | 322354 1076 1760 | optimizedct/avx2 | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 233472703 | 162008 152 0 | 317543 1076 1728 | optimizedct/sse2 | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241014 | 20241011 | 
| 238265578 | 153285 160 0 | 307842 1028 1760 | optimizedct/sse2 | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 238558821 | 159515 160 0 | 319003 1036 1792 | optimizedct/avx2 | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 239424470 | 170211 152 0 | 330520 1084 1760 | optimizedct/avx2 | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 262759130 | 151320 152 0 | 306569 1068 1728 | optimizedct/c | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 264342165 | 157909 160 0 | 314082 1036 1792 | optimizedct/c | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 264645843 | 155882 152 0 | 311383 1076 1728 | optimizedct/c | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 271325941 | 156130 160 0 | 311842 1036 1792 | optimizedct/c | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 283442423 | 149824 160 0 | 304354 1028 1760 | optimizedct/c | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20241013 | 20241011 | 
| 2291144575 | 1287032 4 0 | 1382942 924 1728 | T:ref | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20240723 | 20240716 | 
| 2291958389 | 1273086 4 0 | 1367214 924 1728 | T:ref | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20240723 | 20240716 | 
| 2308425924 | 1292611 4 0 | 1390190 924 1728 | T:ref | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20240723 | 20240716 | 
| 2323573663 | 1291551 4 0 | 1387798 924 1728 | T:ref | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20240723 | 20240716 | 
| 2341035670 | 1282325 4 0 | 1378450 884 1792 | T:ref | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20240723 | 20240716 | 
| 2370894823 | 1268879 4 0 | 1363778 884 1792 | T:ref | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall | 20240723 | 20240716 | 
| 2398445070 | 1262359 4 0 | 1356040 916 1728 | T:ref | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall | 20240723 | 20240716 | 
picnic_impl.c: picnic_impl.c: In function 'mpc_LowMC_verify':
picnic_impl.c: picnic_impl.c:533:5: warning: 'mpc_matrix_mul' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c:   533 |     mpc_matrix_mul(roundKey, keyShares, KMatrix(0, params), params, 2);
picnic_impl.c:       |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
picnic_impl.c: picnic_impl.c:533:5: note: referencing argument 1 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:533:5: warning: 'mpc_matrix_mul' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c: picnic_impl.c:533:5: note: referencing argument 2 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:506:6: note: in a call to function 'mpc_matrix_mul'
picnic_impl.c:   506 | void mpc_matrix_mul(uint32_t* output[3], uint32_t* state[3], const uint32_t* matrix,
picnic_impl.c:       |      ^~~~~~~~~~~~~~
picnic_impl.c: picnic_impl.c:534:5: warning: 'mpc_xor' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c:   534 |     mpc_xor(state, roundKey, params->stateSizeWords, 2);
picnic_impl.c:       |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
picnic_impl.c: picnic_impl.c:534:5: note: referencing argument 1 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:534:5: warning: 'mpc_xor' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c: picnic_impl.c:534:5: note: referencing argument 2 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:260:6: note: in a call to function 'mpc_xor'
picnic_impl.c:   260 | void mpc_xor(uint32_t* state[3], uint32_t* in[3], uint32_t len, int players)
picnic_impl.c:       |      ^~~~~~~
picnic_impl.c: picnic_impl.c:537:9: warning: 'mpc_matrix_mul' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c:   537 |         mpc_matrix_mul(roundKey, keyShares, KMatrix(r, params), params, 2);
picnic_impl.c:       |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
picnic_impl.c: picnic_impl.c:537:9: note: referencing argument 1 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:537:9: warning: 'mpc_matrix_mul' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c: picnic_impl.c:537:9: note: referencing argument 2 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: ...| Implementation | Compiler | 
| T:ref | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| T:ref | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
KeccakHashtimes4.o Keccak_HashFinaltimes4 T KeccakHashtimes4.o Keccak_HashInitializetimes4 T KeccakHashtimes4.o Keccak_HashSqueezetimes4 T KeccakHashtimes4.o Keccak_HashUpdatetimes4 T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T compat.o picnic_explicit_bzero T compat.o picnic_timingsafe_bcmp T io.o mzd_from_char_array T io.o mzd_to_char_array T lowmc.o lowmc_compute T lowmc.o lowmc_compute_aux T lowmc_255_255_4.o lowmc_255_255_4 D mzd_additional.o mzd_addmul_v_s128_128 T mzd_additional.o mzd_addmul_v_s128_129 T mzd_additional.o mzd_addmul_v_s128_192 T mzd_additional.o mzd_addmul_v_s128_256 T mzd_additional.o mzd_addmul_v_s256_128 T mzd_additional.o mzd_addmul_v_s256_129 T mzd_additional.o mzd_addmul_v_s256_192 T mzd_additional.o mzd_addmul_v_s256_256 T mzd_additional.o mzd_addmul_v_uint64_128 T mzd_additional.o mzd_addmul_v_uint64_129 T mzd_additional.o mzd_addmul_v_uint64_192 T mzd_additional.o mzd_addmul_v_uint64_256 T mzd_additional.o mzd_and_s128_128 T mzd_additional.o mzd_and_s128_256 T mzd_additional.o mzd_and_s256_128 T mzd_additional.o mzd_and_s256_256 T mzd_additional.o mzd_and_uint64_128 T mzd_additional.o mzd_and_uint64_192 T mzd_additional.o mzd_and_uint64_256 T mzd_additional.o mzd_copy_s128_128 T mzd_additional.o mzd_copy_s128_256 T mzd_additional.o mzd_copy_s256_128 T mzd_additional.o mzd_copy_s256_256 T mzd_additional.o mzd_copy_uint64_128 T mzd_additional.o mzd_copy_uint64_192 T mzd_additional.o mzd_copy_uint64_256 T mzd_additional.o mzd_local_init_ex T mzd_additional.o mzd_mul_v_s128_128 T mzd_additional.o mzd_mul_v_s128_129 T mzd_additional.o mzd_mul_v_s128_192 T mzd_additional.o mzd_mul_v_s128_256 T mzd_additional.o mzd_mul_v_s256_128 T mzd_additional.o mzd_mul_v_s256_129 T mzd_additional.o mzd_mul_v_s256_192 T mzd_additional.o mzd_mul_v_s256_256 T mzd_additional.o mzd_mul_v_uint64_128 T mzd_additional.o mzd_mul_v_uint64_129 T mzd_additional.o mzd_mul_v_uint64_192 T mzd_additional.o mzd_mul_v_uint64_256 T mzd_additional.o mzd_shift_left_uint64_128 T mzd_additional.o mzd_shift_left_uint64_192 T mzd_additional.o mzd_shift_left_uint64_256 T mzd_additional.o mzd_shift_right_uint64_128 T mzd_additional.o mzd_shift_right_uint64_192 T mzd_additional.o mzd_shift_right_uint64_256 T mzd_additional.o mzd_xor_s128_128 T mzd_additional.o mzd_xor_s128_256 T mzd_additional.o mzd_xor_s256_1024 T mzd_additional.o mzd_xor_s256_128 T mzd_additional.o mzd_xor_s256_1280 T mzd_additional.o mzd_xor_s256_256 T mzd_additional.o mzd_xor_s256_768 T mzd_additional.o mzd_xor_uint64_128 T mzd_additional.o mzd_xor_uint64_192 T mzd_additional.o mzd_xor_uint64_256 T picnic.o picnic_clear_private_key T picnic.o picnic_get_lowmc_block_size T picnic.o picnic_get_param_name T picnic.o picnic_get_private_key_param T picnic.o picnic_get_private_key_size T picnic.o picnic_get_public_key_param T picnic.o picnic_get_public_key_size T picnic.o picnic_keygen T picnic.o picnic_read_private_key T picnic.o picnic_read_public_key T picnic.o picnic_sign T picnic.o picnic_signature_size T picnic.o picnic_sk_to_pk T picnic.o picnic_validate_keypair T picnic.o picnic_verify T picnic.o picnic_write_private_key T picnic.o picnic_write_public_key T picnic3_impl.o impl_sign_picnic3 T picnic3_impl.o impl_verify_picnic3 T picnic3_simulate.o lowmc_simulate_online_get_implementation T picnic3_tree.o addMerkleNodes T picnic3_tree.o buildMerkleTree T picnic3_tree.o createTree T picnic3_tree.o freeTree T picnic3_tree.o generateSeeds T picnic3_tree.o getLeaf T picnic3_tree.o getLeaves T picnic3_tree.o openMerkleTree T picnic3_tree.o openMerkleTreeSize T picnic3_tree.o reconstructSeeds T picnic3_tree.o revealSeeds T picnic3_tree.o revealSeedsSize T picnic3_tree.o verifyMerkleTree T picnic3_types.o allocateCommitments T picnic3_types.o allocateCommitments2 T picnic3_types.o allocateInputs T picnic3_types.o allocateMsgs T picnic3_types.o allocateMsgsVerify T picnic3_types.o allocateProof2 T picnic3_types.o allocateRandomTape T picnic3_types.o allocateSignature2 T picnic3_types.o freeCommitments T picnic3_types.o freeCommitments2 T picnic3_types.o freeInputs T picnic3_types.o freeMsgs T picnic3_types.o freeRandomTape T picnic3_types.o freeSignature2 T picnic_instances.o picnic_instance_get T randomness.o rand_bits T
| Implementation | Compiler | 
| optimizedct/avx2 | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/avx2 | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/avx2 | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/avx2 | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
KeccakHashtimes4.o Keccak_HashFinaltimes4 T KeccakHashtimes4.o Keccak_HashInitializetimes4 T KeccakHashtimes4.o Keccak_HashSqueezetimes4 T KeccakHashtimes4.o Keccak_HashUpdatetimes4 T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T compat.o picnic_explicit_bzero T compat.o picnic_timingsafe_bcmp T io.o mzd_from_char_array T io.o mzd_to_char_array T lowmc.o lowmc_compute T lowmc.o lowmc_compute_aux T lowmc_255_255_4.o lowmc_255_255_4 D mzd_additional.o mzd_addmul_v_uint64_128 T mzd_additional.o mzd_addmul_v_uint64_129 T mzd_additional.o mzd_addmul_v_uint64_192 T mzd_additional.o mzd_addmul_v_uint64_256 T mzd_additional.o mzd_and_uint64_128 T mzd_additional.o mzd_and_uint64_192 T mzd_additional.o mzd_and_uint64_256 T mzd_additional.o mzd_copy_uint64_128 T mzd_additional.o mzd_copy_uint64_192 T mzd_additional.o mzd_copy_uint64_256 T mzd_additional.o mzd_local_init_ex T mzd_additional.o mzd_mul_v_uint64_128 T mzd_additional.o mzd_mul_v_uint64_129 T mzd_additional.o mzd_mul_v_uint64_192 T mzd_additional.o mzd_mul_v_uint64_256 T mzd_additional.o mzd_shift_left_uint64_128 T mzd_additional.o mzd_shift_left_uint64_192 T mzd_additional.o mzd_shift_left_uint64_256 T mzd_additional.o mzd_shift_right_uint64_128 T mzd_additional.o mzd_shift_right_uint64_192 T mzd_additional.o mzd_shift_right_uint64_256 T mzd_additional.o mzd_xor_uint64_128 T mzd_additional.o mzd_xor_uint64_192 T mzd_additional.o mzd_xor_uint64_256 T picnic.o picnic_clear_private_key T picnic.o picnic_get_lowmc_block_size T picnic.o picnic_get_param_name T picnic.o picnic_get_private_key_param T picnic.o picnic_get_private_key_size T picnic.o picnic_get_public_key_param T picnic.o picnic_get_public_key_size T picnic.o picnic_keygen T picnic.o picnic_read_private_key T picnic.o picnic_read_public_key T picnic.o picnic_sign T picnic.o picnic_signature_size T picnic.o picnic_sk_to_pk T picnic.o picnic_validate_keypair T picnic.o picnic_verify T picnic.o picnic_write_private_key T picnic.o picnic_write_public_key T picnic3_impl.o impl_sign_picnic3 T picnic3_impl.o impl_verify_picnic3 T picnic3_simulate.o lowmc_simulate_online_get_implementation T picnic3_tree.o addMerkleNodes T picnic3_tree.o buildMerkleTree T picnic3_tree.o createTree T picnic3_tree.o freeTree T picnic3_tree.o generateSeeds T picnic3_tree.o getLeaf T picnic3_tree.o getLeaves T picnic3_tree.o openMerkleTree T picnic3_tree.o openMerkleTreeSize T picnic3_tree.o reconstructSeeds T picnic3_tree.o revealSeeds T picnic3_tree.o revealSeedsSize T picnic3_tree.o verifyMerkleTree T picnic3_types.o allocateCommitments T picnic3_types.o allocateCommitments2 T picnic3_types.o allocateInputs T picnic3_types.o allocateMsgs T picnic3_types.o allocateMsgsVerify T picnic3_types.o allocateProof2 T picnic3_types.o allocateRandomTape T picnic3_types.o allocateSignature2 T picnic3_types.o freeCommitments T picnic3_types.o freeCommitments2 T picnic3_types.o freeInputs T picnic3_types.o freeMsgs T picnic3_types.o freeRandomTape T picnic3_types.o freeSignature2 T picnic_instances.o picnic_instance_get T randomness.o rand_bits T
| Implementation | Compiler | 
| optimizedct/c | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/c | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/c | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/c | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
KeccakHashtimes4.o Keccak_HashFinaltimes4 T KeccakHashtimes4.o Keccak_HashInitializetimes4 T KeccakHashtimes4.o Keccak_HashSqueezetimes4 T KeccakHashtimes4.o Keccak_HashUpdatetimes4 T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T compat.o picnic_explicit_bzero T compat.o picnic_timingsafe_bcmp T io.o mzd_from_char_array T io.o mzd_to_char_array T lowmc.o lowmc_compute T lowmc.o lowmc_compute_aux T lowmc_255_255_4.o lowmc_255_255_4 D mzd_additional.o mzd_addmul_v_s128_128 T mzd_additional.o mzd_addmul_v_s128_129 T mzd_additional.o mzd_addmul_v_s128_192 T mzd_additional.o mzd_addmul_v_s128_256 T mzd_additional.o mzd_addmul_v_uint64_128 T mzd_additional.o mzd_addmul_v_uint64_129 T mzd_additional.o mzd_addmul_v_uint64_192 T mzd_additional.o mzd_addmul_v_uint64_256 T mzd_additional.o mzd_and_s128_128 T mzd_additional.o mzd_and_s128_256 T mzd_additional.o mzd_and_uint64_128 T mzd_additional.o mzd_and_uint64_192 T mzd_additional.o mzd_and_uint64_256 T mzd_additional.o mzd_copy_s128_128 T mzd_additional.o mzd_copy_s128_256 T mzd_additional.o mzd_copy_uint64_128 T mzd_additional.o mzd_copy_uint64_192 T mzd_additional.o mzd_copy_uint64_256 T mzd_additional.o mzd_local_init_ex T mzd_additional.o mzd_mul_v_s128_128 T mzd_additional.o mzd_mul_v_s128_129 T mzd_additional.o mzd_mul_v_s128_192 T mzd_additional.o mzd_mul_v_s128_256 T mzd_additional.o mzd_mul_v_uint64_128 T mzd_additional.o mzd_mul_v_uint64_129 T mzd_additional.o mzd_mul_v_uint64_192 T mzd_additional.o mzd_mul_v_uint64_256 T mzd_additional.o mzd_shift_left_uint64_128 T mzd_additional.o mzd_shift_left_uint64_192 T mzd_additional.o mzd_shift_left_uint64_256 T mzd_additional.o mzd_shift_right_uint64_128 T mzd_additional.o mzd_shift_right_uint64_192 T mzd_additional.o mzd_shift_right_uint64_256 T mzd_additional.o mzd_xor_s128_128 T mzd_additional.o mzd_xor_s128_256 T mzd_additional.o mzd_xor_uint64_128 T mzd_additional.o mzd_xor_uint64_192 T mzd_additional.o mzd_xor_uint64_256 T picnic.o picnic_clear_private_key T picnic.o picnic_get_lowmc_block_size T picnic.o picnic_get_param_name T picnic.o picnic_get_private_key_param T picnic.o picnic_get_private_key_size T picnic.o picnic_get_public_key_param T picnic.o picnic_get_public_key_size T picnic.o picnic_keygen T picnic.o picnic_read_private_key T picnic.o picnic_read_public_key T picnic.o picnic_sign T picnic.o picnic_signature_size T picnic.o picnic_sk_to_pk T picnic.o picnic_validate_keypair T picnic.o picnic_verify T picnic.o picnic_write_private_key T picnic.o picnic_write_public_key T picnic3_impl.o impl_sign_picnic3 T picnic3_impl.o impl_verify_picnic3 T picnic3_simulate.o lowmc_simulate_online_get_implementation T picnic3_tree.o addMerkleNodes T picnic3_tree.o buildMerkleTree T picnic3_tree.o createTree T picnic3_tree.o freeTree T picnic3_tree.o generateSeeds T picnic3_tree.o getLeaf T picnic3_tree.o getLeaves T picnic3_tree.o openMerkleTree T picnic3_tree.o openMerkleTreeSize T picnic3_tree.o reconstructSeeds T picnic3_tree.o revealSeeds T picnic3_tree.o revealSeedsSize T picnic3_tree.o verifyMerkleTree T picnic3_types.o allocateCommitments T picnic3_types.o allocateCommitments2 T picnic3_types.o allocateInputs T picnic3_types.o allocateMsgs T picnic3_types.o allocateMsgsVerify T picnic3_types.o allocateProof2 T picnic3_types.o allocateRandomTape T picnic3_types.o allocateSignature2 T picnic3_types.o freeCommitments T picnic3_types.o freeCommitments2 T picnic3_types.o freeInputs T picnic3_types.o freeMsgs T picnic3_types.o freeRandomTape T picnic3_types.o freeSignature2 T picnic_instances.o picnic_instance_get T randomness.o rand_bits T
| Implementation | Compiler | 
| optimizedct/sse2 | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/sse2 | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/sse2 | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/sse2 | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
api.o params D hash.o HashFinal T hash.o HashInit T hash.o HashSqueeze T hash.o HashUpdate T hash.o HashUpdateIntLE T hash.o fromLittleEndian T hash.o toLittleEndian T lowmc_constants.o KMatrix T lowmc_constants.o KMatrixInv T lowmc_constants.o LMatrix T lowmc_constants.o LMatrixInv T lowmc_constants.o RConstant T picnic.o get_param_set T picnic.o get_transform T picnic.o is_picnic3 T picnic.o picnic_get_param_name T picnic.o picnic_keygen T picnic.o picnic_read_private_key T picnic.o picnic_read_public_key T picnic.o picnic_sign T picnic.o picnic_signature_size T picnic.o picnic_validate_keypair T picnic.o picnic_verify T picnic.o picnic_write_private_key T picnic.o picnic_write_public_key T picnic.o print_signature T picnic3_impl.o ceil_log2 T picnic3_impl.o deserializeSignature2 T picnic3_impl.o serializeSignature2 T picnic3_impl.o sign_picnic3 T picnic3_impl.o verify_picnic3 T picnic_impl.o Commit T picnic_impl.o G T picnic_impl.o H3 T picnic_impl.o LowMCEnc T picnic_impl.o arePaddingBitsZero T picnic_impl.o computeSeeds T picnic_impl.o createRandomTape T picnic_impl.o deserializeSignature T picnic_impl.o getBit T picnic_impl.o getBitFromWordArray T picnic_impl.o getChallenge T picnic_impl.o matrix_mul T picnic_impl.o mpc_AND T picnic_impl.o mpc_AND_verify T picnic_impl.o mpc_LowMC T picnic_impl.o mpc_LowMC_verify T picnic_impl.o mpc_matrix_mul T picnic_impl.o mpc_substitution T picnic_impl.o mpc_substitution_verify T picnic_impl.o mpc_xor T picnic_impl.o mpc_xor_constant T picnic_impl.o mpc_xor_constant_verify T picnic_impl.o numBytes T picnic_impl.o parity T picnic_impl.o printHex T picnic_impl.o prove T picnic_impl.o random_bytes_supercop T picnic_impl.o serializeSignature T picnic_impl.o setBit T picnic_impl.o setBitInWordArray T picnic_impl.o setChallenge T picnic_impl.o sign_picnic1 T picnic_impl.o verify T picnic_impl.o verifyProof T picnic_impl.o xor_array T picnic_impl.o xor_three T picnic_impl.o zeroTrailingBits T picnic_types.o allocateCommitments T picnic_types.o allocateCommitments2 T picnic_types.o allocateGCommitments T picnic_types.o allocateInputs T picnic_types.o allocateMsgs T picnic_types.o allocateProof T picnic_types.o allocateProof2 T picnic_types.o allocateRandomTape T picnic_types.o allocateSeeds T picnic_types.o allocateShares T picnic_types.o allocateSignature T picnic_types.o allocateSignature2 T picnic_types.o allocateView T picnic_types.o allocateViews T picnic_types.o freeCommitments T picnic_types.o freeCommitments2 T picnic_types.o freeGCommitments T picnic_types.o freeInputs T picnic_types.o freeMsgs T picnic_types.o freeProof T picnic_types.o freeProof2 T picnic_types.o freeRandomTape T picnic_types.o freeSeeds T picnic_types.o freeShares T picnic_types.o freeSignature T picnic_types.o freeSignature2 T picnic_types.o freeView T picnic_types.o freeViews T picnic_types.o getTapeSizeBytes T tree.o addMerkleNodes T tree.o buildMerkleTree T tree.o createTree T tree.o exists T tree.o expandSeeds T tree.o freeTree T tree.o generateSeeds T tree.o getLeaf T tree.o getLeaves T tree.o getParent T tree.o getSibling T tree.o hasLeftChild T tree.o hasRightChild T tree.o hasSibling T tree.o hashSeed T tree.o isLeafNode T tree.o isLeftChild T tree.o openMerkleTree T tree.o openMerkleTreeSize T tree.o printLeaves T tree.o printSeeds T tree.o reconstructSeeds T tree.o revealSeeds T tree.o revealSeedsSize T tree.o verifyMerkleTree T
| Implementation | Compiler | 
| T:ref | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| T:ref | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| T:ref | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| T:ref | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| T:ref | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| T:ref | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| T:ref | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
TIMECOP iterations: 10
| Implementation | Compiler | 
| optimizedct/avx2 | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/avx2 | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/avx2 | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/avx2 | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/avx2 | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/c | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/c | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/c | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/c | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/c | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/sse2 | clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0) | 
| optimizedct/sse2 | gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/sse2 | gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/sse2 | gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) | 
| optimizedct/sse2 | gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0) |