Skip to content

sys: Prefix capability enum values with architecture#1770

Open
mkannwischer wants to merge 1 commit into
mainfrom
syscap-arch-naming
Open

sys: Prefix capability enum values with architecture#1770
mkannwischer wants to merge 1 commit into
mainfrom
syscap-arch-naming

Conversation

@mkannwischer

Copy link
Copy Markdown
Contributor

Disambiguate the mlk_sys_cap values by architecture: MLK_SYS_CAP_{AVX2,SHA3,MVE} become
MLK_SYS_CAP_{X86_64_AVX2,AARCH64_SHA3,ARMV81M_MVE}.

Generate the ABI checker tests before the macro-typo check in autogen so the renamed values in the generated check files pass validation, and drop the unused MLK_SYS_CAP_DUMMY allowlist entry.

Patch AWS-LC accordingly.

Disambiguate the mlk_sys_cap values by architecture:
MLK_SYS_CAP_{AVX2,SHA3,MVE} become
MLK_SYS_CAP_{X86_64_AVX2,AARCH64_SHA3,ARMV81M_MVE}.

Generate the ABI checker tests before the macro-typo check in autogen
so the renamed values in the generated check files pass validation,
and drop the unused MLK_SYS_CAP_DUMMY allowlist entry.

Patch AWS-LC accordingly.

- Ports pq-code-package/mldsa-native#1208
- Resolves #1320

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@oqs-bot

oqs-bot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-KEM-512)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** 1538s 1481s +3.8%
mlk_indcpa_enc 240s 233s +3%
mlk_indcpa_keypair_derand 211s 193s +9%
mlk_poly_rej_uniform 133s 125s +6%
mlk_rej_uniform_c 114s 108s +6%
rej_uniform_native_x86_64 56s 55s +2%
mlk_polyvec_basemul_acc_montgomery_cached_c 53s 49s +8%
poly_ntt_native 36s 32s +12%
mlk_poly_reduce_native 35s 33s +6%
rej_uniform_native_aarch64 33s 35s -6%
mlk_ntt_layer 31s 30s +3%
mlk_keccak_squeezeblocks_x4 24s 25s -4%
keccakf1600x4_permute_native_x4 19s 18s +6%
mlk_fqmul 16s 15s +7%
mlk_indcpa_dec 16s 15s +7%
mlk_poly_decompress_d10_native 14s 15s -7%
mlk_poly_decompress_d4_native 14s 14s +0%
mlk_poly_frommsg 10s 9s +11%
mlk_keccak_squeeze_once 9s 8s +12%
mlk_poly_frombytes_native 9s 6s +50%
mlk_polyvec_add 9s 11s -18%
mlk_keccakf1600_permute_c 8s 4s +100%
mlk_poly_sub 8s 7s +14%
polyvec_basemul_acc_montgomery_cached_native 8s 8s +0%
mlk_keccak_squeezeblocks 7s 7s +0%
mlk_ntt_butterfly_block 7s 8s -12%
mlk_poly_frombytes_c 6s 5s +20%
poly_frombytes_native_x86_64 6s 5s +20%
mlk_ct_cmask_nonzero_u16 5s 2s +150%
mlk_keccak_absorb_once_x4 5s 6s -17%
mlk_poly_add 5s 5s +0%
mlk_poly_compress_d11_native 5s 2s +150%
mlk_poly_getnoise_eta1_4x 5s 2s +150%
mlk_poly_ntt 5s 7s -29%
mlk_poly_tomsg 5s 2s +150%
mlk_shake128_squeezeblocks 5s 1s +400%
nttunpack_native_x86_64 5s 2s +150%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 4s 1s +300%
kem_dec 4s 5s -20%
mlk_ct_cmask_nonzero_u8 4s 2s +100%
mlk_ct_get_optblocker_u8 4s 1s +300%
mlk_enc_getnoise_eta1_eta2 4s 3s +33%
mlk_gen_matrix 4s 4s +0%
mlk_invntt_layer 4s 3s +33%
mlk_poly_compress_d10_c 4s 2s +100%
mlk_poly_compress_d5_c 4s 1s +300%
mlk_poly_decompress_d11_c 4s 1s +300%
mlk_poly_decompress_d4_c 4s 5s -20%
mlk_poly_getnoise_eta1_4x_native 4s 6s -33%
mlk_poly_rej_uniform_x4 4s 5s -20%
mlk_poly_tomont 4s 3s +33%
mlk_scalar_decompress_d10 4s 2s +100%
poly_compress_d10_native_x86_64 4s 2s +100%
poly_decompress_d4_native_x86_64 4s 3s +33%
poly_reduce_native_aarch64 4s 1s +300%
poly_tomont_native_aarch64 4s 2s +100%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 4s 2s +100%
intt_native_x86_64 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 3s 2s +50%
keccakf1600_permute_native 3s 3s +0%
kem_check_pk 3s 5s -40%
kem_keypair 3s 1s +200%
kem_keypair_derand 3s 3s +0%
mlk_barrett_reduce 3s 2s +50%
mlk_ct_get_optblocker_i32 3s 2s +50%
mlk_ct_sel_uint8 3s 2s +50%
mlk_gen_matrix_serial 3s 2s +50%
mlk_keccak_absorb_once 3s 4s -25%
mlk_keccakf1600_extract_bytes (big endian) 3s 3s +0%
mlk_keccakf1600x4_extract_bytes_c 3s 1s +200%
mlk_montgomery_reduce 3s 1s +200%
mlk_poly_compress_d10 3s 2s +50%
mlk_poly_compress_d5 3s 2s +50%
mlk_poly_compress_du 3s 2s +50%
mlk_poly_compress_dv 3s 2s +50%
mlk_poly_decompress_d10 3s 3s +0%
mlk_poly_decompress_d4 3s 1s +200%
mlk_poly_decompress_du 3s 4s -25%
mlk_poly_frombytes 3s 2s +50%
mlk_poly_mulcache_compute 3s 2s +50%
mlk_poly_tobytes 3s 4s -25%
mlk_polymat_permute_bitrev_to_custom 3s 4s -25%
mlk_polyvec_basemul_acc_montgomery_cached 3s 2s +50%
mlk_scalar_compress_d1 3s 2s +50%
mlk_scalar_compress_d4 3s 3s +0%
mlk_scalar_decompress_d11 3s 3s +0%
mlk_shake256x4 3s 4s -25%
mlk_value_barrier_u32 3s 3s +0%
poly_compress_d11_native_x86_64 3s 2s +50%
poly_compress_d5_native_x86_64 3s 3s +0%
poly_decompress_d10_native_x86_64 3s 4s -25%
poly_decompress_d11_native_x86_64 3s 1s +200%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 3s 4s -25%
rej_uniform_native 3s 4s -25%
keccak_f1600_x1_native_aarch64 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a 2s 1s +100%
keccak_f1600_x4_native_avx2 2s 2s +0%
keccakf1600x4_extract_bytes_native 2s 3s -33%
keccakf1600x4_xor_bytes_native 2s 2s +0%
kem_enc 2s 2s +0%
kem_enc_derand 2s 4s -50%
mlk_check_pct 2s 2s +0%
mlk_ct_cmask_neg_i16 2s 2s +0%
mlk_ct_cmov_zero 2s 3s -33%
mlk_ct_get_optblocker_u32 2s 3s -33%
mlk_ct_memcmp 2s 5s -60%
mlk_keccakf1600_permute 2s 2s +0%
mlk_keccakf1600_xor_bytes 2s 1s +100%
mlk_keccakf1600x4_extract_bytes 2s 3s -33%
mlk_keccakf1600x4_permute 2s 2s +0%
mlk_keccakf1600x4_xor_bytes 2s 2s +0%
mlk_keccakf1600x4_xor_bytes_c 2s 2s +0%
mlk_keypair_getnoise_eta1 2s 3s -33%
mlk_matvec_mul 2s 4s -50%
mlk_poly_cbd_eta1 2s 2s +0%
mlk_poly_cbd_eta2 2s 2s +0%
mlk_poly_compress_d10_native 2s 2s +0%
mlk_poly_compress_d11 2s 1s +100%
mlk_poly_compress_d11_c 2s 2s +0%
mlk_poly_compress_d4 2s 2s +0%
mlk_poly_compress_d4_native 2s 3s -33%
mlk_poly_decompress_d10_c 2s 3s -33%
mlk_poly_decompress_d5 2s 2s +0%
mlk_poly_decompress_d5_native 2s 2s +0%
mlk_poly_decompress_dv 2s 2s +0%
mlk_poly_getnoise_eta1122_4x 2s 3s -33%
mlk_poly_getnoise_eta2 2s 2s +0%
mlk_poly_invntt_tomont 2s 1s +100%
mlk_poly_invntt_tomont_c 2s 3s -33%
mlk_poly_mulcache_compute_native 2s 3s -33%
mlk_poly_reduce 2s 1s +100%
mlk_poly_reduce_c 2s 4s -50%
mlk_poly_tobytes_c 2s 2s +0%
mlk_poly_tobytes_native 2s 1s +100%
mlk_poly_tomont_native 2s 4s -50%
mlk_polyvec_decompress_du 2s 3s -33%
mlk_polyvec_invntt_tomont 2s 2s +0%
mlk_polyvec_ntt 2s 4s -50%
mlk_polyvec_permute_bitrev_to_custom 2s 3s -33%
mlk_polyvec_permute_bitrev_to_custom_native 2s 3s -33%
mlk_polyvec_reduce 2s 1s +100%
mlk_polyvec_tobytes 2s 2s +0%
mlk_polyvec_tomont 2s 2s +0%
mlk_scalar_compress_d10 2s 2s +0%
mlk_scalar_compress_d5 2s 3s -33%
mlk_scalar_decompress_d4 2s 1s +100%
mlk_scalar_decompress_d5 2s 2s +0%
mlk_sha3_256 2s 2s +0%
mlk_shake128x4_squeezeblocks 2s 3s -33%
mlk_value_barrier_u8 2s 2s +0%
ntt_native_aarch64 2s 3s -33%
ntt_native_x86_64 2s 2s +0%
poly_compress_d4_native_x86_64 2s 2s +0%
poly_decompress_d5_native_x86_64 2s 1s +100%
poly_invntt_tomont_native 2s 2s +0%
poly_mulcache_compute_native_x86_64 2s 3s -33%
poly_tobytes_native_aarch64 2s 2s +0%
poly_tobytes_native_x86_64 2s 4s -50%
poly_tomont_native_x86_64 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 2s 3s -33%
sys_check_capability 2s 2s +0%
intt_native_aarch64 1s 1s +0%
keccak_f1600_x4_native_aarch64_v84a 1s 1s +0%
kem_check_sk 1s 2s -50%
mlk_ct_sel_int16 1s 2s -50%
mlk_keccakf1600_extract_bytes 1s 3s -67%
mlk_keccakf1600_xor_bytes (big endian) 1s 1s +0%
mlk_poly_compress_d4_c 1s 2s -50%
mlk_poly_compress_d5_native 1s 3s -67%
mlk_poly_decompress_d11 1s 3s -67%
mlk_poly_decompress_d11_native 1s 2s -50%
mlk_poly_decompress_d5_c 1s 2s -50%
mlk_poly_mulcache_compute_c 1s 2s -50%
mlk_poly_ntt_c 1s 3s -67%
mlk_poly_tomont_c 1s 4s -75%
mlk_polyvec_compress_du 1s 3s -67%
mlk_polyvec_frombytes 1s 2s -50%
mlk_polyvec_mulcache_compute 1s 2s -50%
mlk_rej_uniform 1s 3s -67%
mlk_scalar_compress_d11 1s 1s +0%
mlk_scalar_signed_to_unsigned_q 1s 3s -67%
mlk_sha3_512 1s 2s -50%
mlk_shake128_absorb_once 1s 1s +0%
mlk_shake128x4_absorb_once 1s 3s -67%
mlk_shake256 1s 2s -50%
mlk_value_barrier_i32 1s 2s -50%
poly_getnoise_eta1122_4x_native 1s 3s -67%
poly_mulcache_compute_native_aarch64 1s 1s +0%
poly_reduce_native_x86_64 1s 2s -50%

@oqs-bot

oqs-bot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-KEM-1024)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** 1607s 1741s -7.7%
mlk_indcpa_enc 357s 378s -6%
mlk_indcpa_keypair_derand 153s 170s -10%
mlk_poly_rej_uniform 126s 144s -12%
mlk_rej_uniform_c 108s 125s -14%
mlk_polyvec_basemul_acc_montgomery_cached_c 64s 71s -10%
rej_uniform_native_x86_64 57s 60s -5%
poly_ntt_native 34s 40s -15%
rej_uniform_native_aarch64 34s 38s -11%
mlk_poly_reduce_native 32s 37s -14%
mlk_keccak_squeezeblocks_x4 26s 26s +0%
mlk_ntt_layer 26s 34s -24%
polyvec_basemul_acc_montgomery_cached_native 23s 28s -18%
keccakf1600x4_permute_native_x4 18s 19s -5%
mlk_fqmul 17s 16s +6%
mlk_polyvec_add 17s 17s +0%
mlk_indcpa_dec 12s 12s +0%
mlk_poly_decompress_d5_native 12s 15s -20%
mlk_poly_decompress_d11_native 11s 15s -27%
mlk_poly_frommsg 9s 12s -25%
mlk_polyvec_ntt 9s 9s +0%
mlk_keccak_squeezeblocks 8s 9s -11%
mlk_poly_frombytes_native 8s 7s +14%
mlk_poly_sub 8s 6s +33%
mlk_keccakf1600_permute_c 7s 5s +40%
mlk_poly_rej_uniform_x4 7s 6s +17%
mlk_keccak_squeeze_once 6s 9s -33%
mlk_ntt_butterfly_block 6s 9s -33%
mlk_poly_add 6s 4s +50%
mlk_poly_ntt 6s 7s -14%
mlk_shake256x4 6s 3s +100%
kem_dec 5s 6s -17%
mlk_invntt_layer 5s 5s +0%
mlk_keccak_absorb_once 5s 5s +0%
mlk_poly_decompress_d10_native 5s 3s +67%
mlk_poly_frombytes_c 5s 5s +0%
mlk_polymat_permute_bitrev_to_custom 5s 5s +0%
poly_frombytes_native_x86_64 5s 4s +25%
intt_native_aarch64 4s 3s +33%
kem_check_pk 4s 3s +33%
kem_enc_derand 4s 3s +33%
mlk_ct_get_optblocker_i32 4s 2s +100%
mlk_gen_matrix_serial 4s 5s -20%
mlk_keccak_absorb_once_x4 4s 7s -43%
mlk_poly_getnoise_eta1_4x_native 4s 3s +33%
mlk_poly_getnoise_eta2 4s 3s +33%
mlk_polyvec_permute_bitrev_to_custom_native 4s 3s +33%
mlk_scalar_decompress_d11 4s 1s +300%
mlk_scalar_decompress_d4 4s 2s +100%
poly_compress_d4_native_x86_64 4s 2s +100%
poly_decompress_d11_native_x86_64 4s 5s -20%
poly_decompress_d5_native_x86_64 4s 4s +0%
poly_invntt_tomont_native 4s 4s +0%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 4s 1s +300%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 4s 4s +0%
sys_check_capability 4s 2s +100%
kem_keypair_derand 3s 1s +200%
mlk_ct_sel_uint8 3s 3s +0%
mlk_enc_getnoise_eta1_eta2 3s 4s -25%
mlk_gen_matrix 3s 4s -25%
mlk_keccakf1600_xor_bytes 3s 3s +0%
mlk_keccakf1600x4_xor_bytes 3s 1s +200%
mlk_matvec_mul 3s 3s +0%
mlk_montgomery_reduce 3s 1s +200%
mlk_poly_cbd_eta2 3s 2s +50%
mlk_poly_compress_d10_native 3s 2s +50%
mlk_poly_compress_d5_native 3s 2s +50%
mlk_poly_compress_du 3s 2s +50%
mlk_poly_decompress_d4_c 3s 2s +50%
mlk_poly_decompress_d4_native 3s 2s +50%
mlk_poly_decompress_d5 3s 1s +200%
mlk_poly_decompress_d5_c 3s 1s +200%
mlk_poly_decompress_du 3s 3s +0%
mlk_poly_mulcache_compute 3s 3s +0%
mlk_poly_mulcache_compute_c 3s 2s +50%
mlk_poly_ntt_c 3s 3s +0%
mlk_poly_reduce_c 3s 2s +50%
mlk_poly_tobytes 3s 2s +50%
mlk_poly_tobytes_c 3s 1s +200%
mlk_poly_tomont_native 3s 2s +50%
mlk_polyvec_basemul_acc_montgomery_cached 3s 2s +50%
mlk_polyvec_decompress_du 3s 3s +0%
mlk_polyvec_invntt_tomont 3s 2s +50%
mlk_polyvec_reduce 3s 3s +0%
mlk_polyvec_tobytes 3s 2s +50%
mlk_scalar_compress_d1 3s 3s +0%
mlk_scalar_compress_d11 3s 3s +0%
mlk_sha3_256 3s 2s +50%
mlk_shake128x4_absorb_once 3s 3s +0%
mlk_shake256 3s 2s +50%
nttunpack_native_x86_64 3s 4s -25%
poly_decompress_d10_native_x86_64 3s 3s +0%
poly_getnoise_eta1122_4x_native 3s 3s +0%
poly_mulcache_compute_native_x86_64 3s 4s -25%
poly_reduce_native_x86_64 3s 1s +200%
poly_tobytes_native_x86_64 3s 2s +50%
poly_tomont_native_aarch64 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 3s 3s +0%
rej_uniform_native 3s 5s -40%
intt_native_x86_64 2s 1s +100%
keccak_f1600_x1_native_aarch64 2s 1s +100%
keccak_f1600_x1_native_aarch64_v84a 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 2s 4s -50%
keccak_f1600_x4_native_avx2 2s 4s -50%
keccakf1600x4_xor_bytes_native 2s 2s +0%
kem_check_sk 2s 2s +0%
mlk_barrett_reduce 2s 2s +0%
mlk_check_pct 2s 3s -33%
mlk_ct_cmask_neg_i16 2s 3s -33%
mlk_ct_cmask_nonzero_u8 2s 3s -33%
mlk_ct_cmov_zero 2s 3s -33%
mlk_ct_get_optblocker_u32 2s 1s +100%
mlk_ct_memcmp 2s 1s +100%
mlk_ct_sel_int16 2s 1s +100%
mlk_keccakf1600x4_extract_bytes_c 2s 3s -33%
mlk_keccakf1600x4_permute 2s 2s +0%
mlk_keccakf1600x4_xor_bytes_c 2s 3s -33%
mlk_keypair_getnoise_eta1 2s 5s -60%
mlk_poly_cbd_eta1 2s 3s -33%
mlk_poly_compress_d10 2s 1s +100%
mlk_poly_compress_d10_c 2s 3s -33%
mlk_poly_compress_d11 2s 2s +0%
mlk_poly_compress_d11_c 2s 3s -33%
mlk_poly_compress_d11_native 2s 3s -33%
mlk_poly_compress_d4 2s 4s -50%
mlk_poly_compress_d4_c 2s 2s +0%
mlk_poly_compress_d4_native 2s 2s +0%
mlk_poly_compress_d5 2s 2s +0%
mlk_poly_decompress_d10 2s 2s +0%
mlk_poly_decompress_d10_c 2s 3s -33%
mlk_poly_decompress_d11_c 2s 2s +0%
mlk_poly_decompress_dv 2s 2s +0%
mlk_poly_frombytes 2s 2s +0%
mlk_poly_getnoise_eta1122_4x 2s 2s +0%
mlk_poly_getnoise_eta1_4x 2s 4s -50%
mlk_poly_invntt_tomont 2s 2s +0%
mlk_poly_invntt_tomont_c 2s 2s +0%
mlk_poly_reduce 2s 2s +0%
mlk_poly_tomont_c 2s 1s +100%
mlk_poly_tomsg 2s 5s -60%
mlk_polyvec_compress_du 2s 2s +0%
mlk_polyvec_mulcache_compute 2s 4s -50%
mlk_polyvec_tomont 2s 1s +100%
mlk_rej_uniform 2s 2s +0%
mlk_scalar_compress_d10 2s 2s +0%
mlk_scalar_compress_d5 2s 2s +0%
mlk_scalar_decompress_d5 2s 2s +0%
mlk_scalar_signed_to_unsigned_q 2s 2s +0%
mlk_sha3_512 2s 2s +0%
mlk_shake128_squeezeblocks 2s 2s +0%
mlk_shake128x4_squeezeblocks 2s 4s -50%
mlk_value_barrier_i32 2s 1s +100%
mlk_value_barrier_u32 2s 2s +0%
poly_compress_d11_native_x86_64 2s 3s -33%
poly_compress_d5_native_x86_64 2s 1s +100%
poly_decompress_d4_native_x86_64 2s 3s -33%
poly_reduce_native_aarch64 2s 3s -33%
poly_tobytes_native_aarch64 2s 3s -33%
poly_tomont_native_x86_64 2s 4s -50%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 2s 3s -33%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 2s 1s +100%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 1s 3s -67%
keccakf1600_permute_native 1s 1s +0%
keccakf1600x4_extract_bytes_native 1s 2s -50%
kem_enc 1s 3s -67%
kem_keypair 1s 4s -75%
mlk_ct_cmask_nonzero_u16 1s 2s -50%
mlk_ct_get_optblocker_u8 1s 1s +0%
mlk_keccakf1600_extract_bytes 1s 4s -75%
mlk_keccakf1600_extract_bytes (big endian) 1s 1s +0%
mlk_keccakf1600_permute 1s 2s -50%
mlk_keccakf1600_xor_bytes (big endian) 1s 3s -67%
mlk_keccakf1600x4_extract_bytes 1s 3s -67%
mlk_poly_compress_d5_c 1s 2s -50%
mlk_poly_compress_dv 1s 2s -50%
mlk_poly_decompress_d11 1s 3s -67%
mlk_poly_decompress_d4 1s 1s +0%
mlk_poly_mulcache_compute_native 1s 2s -50%
mlk_poly_tobytes_native 1s 2s -50%
mlk_poly_tomont 1s 3s -67%
mlk_polyvec_frombytes 1s 1s +0%
mlk_polyvec_permute_bitrev_to_custom 1s 2s -50%
mlk_scalar_compress_d4 1s 2s -50%
mlk_scalar_decompress_d10 1s 3s -67%
mlk_shake128_absorb_once 1s 2s -50%
mlk_value_barrier_u8 1s 2s -50%
ntt_native_aarch64 1s 1s +0%
ntt_native_x86_64 1s 3s -67%
poly_compress_d10_native_x86_64 1s 2s -50%
poly_mulcache_compute_native_aarch64 1s 1s +0%

@oqs-bot

oqs-bot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-KEM-768)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** 1787s 1679s +6.4%
mlk_indcpa_keypair_derand 339s 311s +9%
mlk_indcpa_enc 259s 252s +3%
mlk_poly_rej_uniform 173s 138s +25%
mlk_rej_uniform_c 129s 122s +6%
rej_uniform_native_x86_64 56s 60s -7%
mlk_polyvec_basemul_acc_montgomery_cached_c 49s 50s -2%
mlk_poly_reduce_native 39s 36s +8%
poly_ntt_native 37s 39s -5%
rej_uniform_native_aarch64 36s 34s +6%
mlk_ntt_layer 30s 29s +3%
mlk_keccak_squeezeblocks_x4 29s 24s +21%
mlk_fqmul 19s 19s +0%
keccakf1600x4_permute_native_x4 18s 16s +12%
polyvec_basemul_acc_montgomery_cached_native 16s 16s +0%
mlk_poly_decompress_d4_native 15s 14s +7%
mlk_poly_decompress_d10_native 14s 15s -7%
mlk_polyvec_add 13s 11s +18%
mlk_indcpa_dec 12s 12s +0%
mlk_poly_frommsg 11s 11s +0%
mlk_poly_frombytes_native 10s 9s +11%
mlk_keccak_squeezeblocks 9s 7s +29%
mlk_keccak_squeeze_once 8s 9s -11%
mlk_ntt_butterfly_block 8s 6s +33%
mlk_poly_ntt 8s 4s +100%
mlk_poly_sub 8s 6s +33%
mlk_invntt_layer 7s 6s +17%
mlk_keccak_absorb_once_x4 7s 6s +17%
mlk_keccakf1600_permute_c 7s 5s +40%
mlk_poly_rej_uniform_x4 7s 6s +17%
kem_dec 6s 5s +20%
mlk_poly_add 6s 3s +100%
mlk_poly_frombytes_c 6s 5s +20%
mlk_poly_mulcache_compute_c 6s 4s +50%
mlk_keccak_absorb_once 5s 3s +67%
mlk_keccakf1600_extract_bytes 5s 1s +400%
mlk_poly_mulcache_compute 5s 2s +150%
poly_decompress_d10_native_x86_64 5s 4s +25%
poly_decompress_d4_native_x86_64 5s 6s -17%
poly_reduce_native_aarch64 5s 3s +67%
kem_enc_derand 4s 4s +0%
mlk_check_pct 4s 3s +33%
mlk_ct_cmov_zero 4s 3s +33%
mlk_ct_sel_int16 4s 2s +100%
mlk_gen_matrix_serial 4s 3s +33%
mlk_keccakf1600_permute 4s 2s +100%
mlk_keypair_getnoise_eta1 4s 2s +100%
mlk_poly_compress_d10 4s 1s +300%
mlk_poly_compress_dv 4s 6s -33%
mlk_poly_decompress_dv 4s 3s +33%
mlk_poly_getnoise_eta1122_4x 4s 3s +33%
mlk_polyvec_compress_du 4s 3s +33%
mlk_scalar_compress_d4 4s 1s +300%
mlk_value_barrier_u32 4s 3s +33%
nttunpack_native_x86_64 4s 3s +33%
poly_compress_d4_native_x86_64 4s 2s +100%
poly_decompress_d5_native_x86_64 4s 2s +100%
poly_frombytes_native_x86_64 4s 6s -33%
poly_tobytes_native_aarch64 4s 1s +300%
poly_tobytes_native_x86_64 4s 2s +100%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 4s 3s +33%
rej_uniform_native 4s 2s +100%
intt_native_aarch64 3s 1s +200%
keccak_f1600_x1_native_aarch64_v84a 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 3s 2s +50%
keccak_f1600_x4_native_avx2 3s 1s +200%
keccakf1600x4_xor_bytes_native 3s 1s +200%
kem_check_pk 3s 3s +0%
kem_check_sk 3s 4s -25%
mlk_ct_get_optblocker_u8 3s 1s +200%
mlk_ct_sel_uint8 3s 4s -25%
mlk_gen_matrix 3s 3s +0%
mlk_keccakf1600x4_permute 3s 2s +50%
mlk_keccakf1600x4_xor_bytes_c 3s 2s +50%
mlk_montgomery_reduce 3s 2s +50%
mlk_poly_cbd_eta2 3s 1s +200%
mlk_poly_decompress_d10 3s 2s +50%
mlk_poly_decompress_d10_c 3s 4s -25%
mlk_poly_decompress_d11 3s 3s +0%
mlk_poly_decompress_d4_c 3s 4s -25%
mlk_poly_getnoise_eta1_4x 3s 2s +50%
mlk_poly_invntt_tomont_c 3s 3s +0%
mlk_poly_tobytes_c 3s 2s +50%
mlk_poly_tomont 3s 2s +50%
mlk_poly_tomont_native 3s 1s +200%
mlk_poly_tomsg 3s 2s +50%
mlk_polymat_permute_bitrev_to_custom 3s 3s +0%
mlk_polyvec_decompress_du 3s 4s -25%
mlk_polyvec_frombytes 3s 3s +0%
mlk_polyvec_ntt 3s 2s +50%
mlk_polyvec_permute_bitrev_to_custom_native 3s 2s +50%
mlk_polyvec_tomont 3s 2s +50%
mlk_scalar_compress_d1 3s 2s +50%
mlk_scalar_compress_d11 3s 2s +50%
mlk_scalar_decompress_d4 3s 4s -25%
mlk_shake256x4 3s 2s +50%
poly_compress_d10_native_x86_64 3s 3s +0%
poly_decompress_d11_native_x86_64 3s 5s -40%
poly_getnoise_eta1122_4x_native 3s 1s +200%
poly_mulcache_compute_native_aarch64 3s 2s +50%
poly_reduce_native_x86_64 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 3s 4s -25%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 3s 1s +200%
intt_native_x86_64 2s 4s -50%
keccak_f1600_x1_native_aarch64 2s 1s +100%
keccak_f1600_x4_native_aarch64_v84a 2s 1s +100%
keccakf1600_permute_native 2s 3s -33%
keccakf1600x4_extract_bytes_native 2s 3s -33%
kem_enc 2s 2s +0%
kem_keypair 2s 2s +0%
mlk_barrett_reduce 2s 1s +100%
mlk_ct_cmask_neg_i16 2s 5s -60%
mlk_ct_get_optblocker_i32 2s 1s +100%
mlk_ct_memcmp 2s 3s -33%
mlk_enc_getnoise_eta1_eta2 2s 2s +0%
mlk_keccakf1600_extract_bytes (big endian) 2s 2s +0%
mlk_keccakf1600_xor_bytes (big endian) 2s 2s +0%
mlk_matvec_mul 2s 4s -50%
mlk_poly_cbd_eta1 2s 3s -33%
mlk_poly_compress_d10_c 2s 2s +0%
mlk_poly_compress_d11 2s 1s +100%
mlk_poly_compress_d11_native 2s 2s +0%
mlk_poly_compress_d4_c 2s 2s +0%
mlk_poly_compress_d4_native 2s 2s +0%
mlk_poly_compress_d5_c 2s 2s +0%
mlk_poly_compress_d5_native 2s 1s +100%
mlk_poly_compress_du 2s 3s -33%
mlk_poly_decompress_d11_c 2s 2s +0%
mlk_poly_decompress_d4 2s 5s -60%
mlk_poly_decompress_d5 2s 3s -33%
mlk_poly_decompress_d5_c 2s 2s +0%
mlk_poly_decompress_d5_native 2s 4s -50%
mlk_poly_frombytes 2s 3s -33%
mlk_poly_getnoise_eta2 2s 2s +0%
mlk_poly_mulcache_compute_native 2s 2s +0%
mlk_poly_ntt_c 2s 3s -33%
mlk_poly_reduce 2s 1s +100%
mlk_poly_tobytes 2s 1s +100%
mlk_poly_tomont_c 2s 2s +0%
mlk_polyvec_basemul_acc_montgomery_cached 2s 2s +0%
mlk_polyvec_mulcache_compute 2s 3s -33%
mlk_polyvec_permute_bitrev_to_custom 2s 1s +100%
mlk_polyvec_reduce 2s 2s +0%
mlk_polyvec_tobytes 2s 3s -33%
mlk_scalar_decompress_d10 2s 4s -50%
mlk_scalar_decompress_d5 2s 2s +0%
mlk_scalar_signed_to_unsigned_q 2s 2s +0%
mlk_sha3_256 2s 1s +100%
mlk_shake128x4_absorb_once 2s 2s +0%
mlk_shake128x4_squeezeblocks 2s 3s -33%
mlk_shake256 2s 2s +0%
ntt_native_x86_64 2s 4s -50%
poly_compress_d11_native_x86_64 2s 2s +0%
poly_compress_d5_native_x86_64 2s 2s +0%
poly_invntt_tomont_native 2s 4s -50%
poly_mulcache_compute_native_x86_64 2s 2s +0%
poly_tomont_native_aarch64 2s 3s -33%
poly_tomont_native_x86_64 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 2s 4s -50%
sys_check_capability 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 1s 2s -50%
kem_keypair_derand 1s 4s -75%
mlk_ct_cmask_nonzero_u16 1s 2s -50%
mlk_ct_cmask_nonzero_u8 1s 4s -75%
mlk_ct_get_optblocker_u32 1s 4s -75%
mlk_keccakf1600_xor_bytes 1s 1s +0%
mlk_keccakf1600x4_extract_bytes 1s 1s +0%
mlk_keccakf1600x4_extract_bytes_c 1s 1s +0%
mlk_keccakf1600x4_xor_bytes 1s 1s +0%
mlk_poly_compress_d10_native 1s 3s -67%
mlk_poly_compress_d11_c 1s 3s -67%
mlk_poly_compress_d4 1s 3s -67%
mlk_poly_compress_d5 1s 2s -50%
mlk_poly_decompress_d11_native 1s 3s -67%
mlk_poly_decompress_du 1s 3s -67%
mlk_poly_getnoise_eta1_4x_native 1s 1s +0%
mlk_poly_invntt_tomont 1s 1s +0%
mlk_poly_reduce_c 1s 2s -50%
mlk_poly_tobytes_native 1s 1s +0%
mlk_polyvec_invntt_tomont 1s 2s -50%
mlk_rej_uniform 1s 1s +0%
mlk_scalar_compress_d10 1s 2s -50%
mlk_scalar_compress_d5 1s 3s -67%
mlk_scalar_decompress_d11 1s 2s -50%
mlk_sha3_512 1s 3s -67%
mlk_shake128_absorb_once 1s 2s -50%
mlk_shake128_squeezeblocks 1s 4s -75%
mlk_value_barrier_i32 1s 4s -75%
mlk_value_barrier_u8 1s 3s -67%
ntt_native_aarch64 1s 2s -50%

@mkannwischer mkannwischer marked this pull request as ready for review June 30, 2026 13:03
@mkannwischer mkannwischer requested a review from a team as a code owner June 30, 2026 13:03
@hanno-becker hanno-becker added this to the v2 milestone Jul 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Revisit naming of system capability enumeration

3 participants