Deprecated ARCFour; fixes in AES, EC, DLP

- Deprecated the ARCFour functionality.
- Fixed a potential security problem in the signing functions over elliptic curves.
- Fixed a potential security problem in the key expansion function for AES Encryption.
- Fixed some of the compilation warnings observed when building the static dispatcher on Windows* OS.
- Fixed minor issues with DLP functions.

Author: Rubtsov, Vasily

CHANGELOG.MD

@@ -0,0 +1,15 @@
+# Intel(R) Integrated Performance Primitives Cryptography (Intel(R) IPP Cryptography)
+
+This is a list of notable changes to Intel(R) IPP Cryptography, in reverse chronological order.
+
+## 2018-08-30
+- Deprecated the ARCFour functionality.
+- Fixed a potential security problem in the signing functions over elliptic curves.
+- Fixed a potential security problem in the key expansion function for AES Encryption.
+- Fixed some of the compilation warnings observed when building the static dispatcher on Windows* OS.
+- Fixed minor issues with DLP functions.
+
+
+------------------------------------------------------------------------
+Intel is a trademark of Intel Corporation or its subsidiaries in the U.S. and/or other countries.
+* Other names and brands may be claimed as the property of others.

README.md

@@ -1,4 +1,4 @@
-Intel(R) Integrated Performance Primitives Cryptography
+Intel(R) Integrated Performance Primitives Cryptography
 =======================================================
 
 Intel(R) Integrated Performance Primitives (Intel(R) IPP) Cryptography
@@ -92,6 +92,8 @@ Yasm 1.2.2
 
 -   Microsoft Visual Studio\* 2015
 
+-   Microsoft Visual Studio\* 2017
+
 ### Binary Tools for Linux\* OS:
 
 GNU binutils 2.27
@@ -174,14 +176,25 @@ with the options described in [CMake Arguments](#cmake-arguments).
     -   On Windows\* OS: open the Microsoft Visual Studio\* solution and
         run a build.
 
+        **Important:** the process used to build the Microsoft Visual Studio solutions results
+        in debug information being generated for assembly files by default for both Debug and
+        Release configurations. To build Intel IPP Cryptography library binaries without debug
+        information in the Release configuration, follow these steps:
+
+        1. Right-click a project file and select **Properties**.
+        2. In the **Configuration** drop-down list, select **Release**.
+        3. Select the **Microsoft Macro Assembler** tab.
+        4. Set the value of the **Generate Debug Information** option to **No**.
+        5. Repeat steps 1-3 for all projects you want to build.
+
     -   On Linux\* OS or macOS\*: start a build using makefiles.
-    
+
     At this point, you can shoose to build either static or dynamic libraries.
     Depending on the value of the `-DMERGED_BLD:BOOL` option in the `cmake` call in
     step 4, you will get a set of separate self-contained libraries optimized
     for particular platforms, or a dispatched library with all optimizations.
     See the description of `-DMERGED_BLD:BOOL` in [CMake Arguments](#cmake-arguments)
-    for more information. 
+    for more information.
 
     Built libraries are located in
     the `<build_dir>/.build/lib` directory.
@@ -202,11 +215,11 @@ with the options described in [CMake Arguments](#cmake-arguments).
 -   `-DMERGED_BLD:BOOL=<on|off>` - optional. Defines the configuration
     of the Intel IPP Cryptography library to build:
 
-    -   `-DMERGED_BLD:BOOL=on`: default configuration. Build of a dispatched 
+    -   `-DMERGED_BLD:BOOL=on`: default configuration. Build of a dispatched
         static library with all available optimizations; build of dynamic
         libraries with a dynamic dispatcher library.
 
-    -   `-DMERGED_BLD:BOOL=off`: Build of one static library per
+    -   `-DMERGED_BLD:BOOL=off`: build of one static library per
         optimization; build of one dynamic library per optimization.
 
 -   `-DTHREADED_LIB:BOOL=<off|on>` - optional. Defines the threading
@@ -218,7 +231,7 @@ with the options described in [CMake Arguments](#cmake-arguments).
     -   `-DTHREADED_LIB:BOOL=on`: build multi-threaded Intel IPP Cryptography
         library.
 
--   `-DPLATFORM_LIST="<platform list>"` -- optional, works only if
+-   `-DPLATFORM_LIST="<platform list>"` - optional, works only if
     `-DMERGED_BLD:BOOL=off` is set. Sets target platforms for the code
     to be compiled. See the supported platform list at
     <https://software.intel.com/en-us/ipp-dev-guide-dispatching>.
@@ -248,12 +261,12 @@ CC=<path to C compiler> CXX=<path to C++ compiler> cmake <Arguments>
 -   `-T<Compiler>` - defines the compiler for building, for example,
     `-T"Intel C++ Compiler 18.0"` defines Intel(R) Compiler 18.0 for
     building.
-    
+
 **Note:** Refer to CMake documentation for more information on these options.
 
 #### Linux\* OS CMake Arguments:
 
--   `-DNONPIC_LIB:BOOL=<off|on>` -optional. Defines whether the built
+-   `-DNONPIC_LIB:BOOL=<off|on>` - optional. Defines whether the built
     library will be position-dependent or not:
 
     -   `-DNONPIC_LIB:BOOL=off:` default. Position-independent code.
@@ -271,7 +284,7 @@ CC=<path to C compiler> CXX=<path to C++ compiler> cmake <Arguments>
     `"x86_64-linux-android-"` defines the prefix for x86_64 GNU compiler
     tools.
 
-    Note: Before running CMake scripts for cross-platform build for
+    **Note:** Before running CMake scripts for cross-platform build for
     Android\* OS, you need to do the following:
 
     1.  Set the following environment variables for Android\* NDK:
@@ -294,7 +307,7 @@ CC=<path to C compiler> CXX=<path to C++ compiler> cmake <Arguments>
 
 -   `-DUSEYASM=<path to Yasm* assembly>` - defines the path to the
     Yasm\* assembly compiler.
-    
+
 
 See Also
 --------
@@ -305,12 +318,12 @@ See Also
 
 Legal Information
 -----------------
-No license (express or implied, by estoppel or otherwise) to any intellectual property rights is granted by this document. 
-Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade. 
+No license (express or implied, by estoppel or otherwise) to any intellectual property rights is granted by this document.
+Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.
 
-This document contains information on products, services and/or processes in development.  All information provided here is subject to change without notice. Contact your Intel representative to obtain the latest forecast, schedule, specifications and roadmaps. 
+This document contains information on products, services and/or processes in development.  All information provided here is subject to change without notice. Contact your Intel representative to obtain the latest forecast, schedule, specifications and roadmaps.
 
-The products and services described may contain defects or errors known as errata which may cause deviations from published specifications. Current characterized errata are available on request. 
+The products and services described may contain defects or errors known as errata which may cause deviations from published specifications. Current characterized errata are available on request.
 
 Intel, and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.
 

include/ippcp.h

@@ -355,16 +355,24 @@ IPPAPI(IppStatus, ippsAES_CMACGetTag,(Ipp8u* pMD, int mdLen, const IppsAES_CMACS
 // RC4 Stream Ciphers
 // =========================================================
 */
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourCheckKey, (const Ipp8u *pKey, int keyLen, IppBool* pIsWeak))
 
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourGetSize, (int* pSize))
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourInit, (const Ipp8u *pKey, int keyLen, IppsARCFourState *pCtx))
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourReset, (IppsARCFourState* pCtx))
 
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourPack,(const IppsARCFourState* pCtx, Ipp8u* pBuffer))
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourUnpack,(const Ipp8u* pBuffer, IppsARCFourState* pCtx))
 
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourEncrypt, (const Ipp8u *pSrc, Ipp8u *pDst, int length, IppsARCFourState *pCtx))
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourDecrypt, (const Ipp8u *pSrc, Ipp8u *pDst, int length, IppsARCFourState *pCtx))
 
 

include/ippversion.h

@@ -53,6 +53,6 @@
 #define IPP_VERSION_MINOR  0
 #define IPP_VERSION_UPDATE 0
 
-#define IPP_VERSION_STR "2019.0.0 Beta Refresh"
+#define IPP_VERSION_STR "2019.0.0"
 
 #endif /* IPPVERSION_H__ */

sources/cmake/android/Intel18.0.0.cmake

@@ -65,4 +65,17 @@ if(${ARCH} MATCHES "ia32")
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -no-sox  -Zp16 -gcc -falign-stack=maintain-16-byte -Wa,--32 -no-use-asm -m32")
 else()
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -no-sox  -Zp16 -gcc")
-endif(${ARCH} MATCHES "ia32")
+endif(${ARCH} MATCHES "ia32")
+
+set(w7_opt "${w7_opt} -xSSE2")
+set(s8_opt "${s8_opt} -xATOM_SSSE3 -minstruction=nomovbe")
+set(p8_opt "${p8_opt} -xATOM_SSE4.2 -minstruction=nomovbe")
+set(g9_opt "${g9_opt} -xAVX")
+set(h9_opt "${h9_opt} -xCORE-AVX2")
+set(m7_opt "${m7_opt} -xSSE3")
+set(n8_opt "${n8_opt} -xATOM_SSSE3 -minstruction=nomovbe")
+set(y8_opt "${y8_opt} -xATOM_SSE4.2 -minstruction=nomovbe")
+set(e9_opt "${e9_opt} -xAVX")
+set(l9_opt "${l9_opt} -xCORE-AVX2")
+set(n0_opt "${n0_opt} -xMIC-AVX512")
+set(k0_opt "${k0_opt} -xCORE-AVX512")

sources/cmake/linux/Intel18.0.0.cmake

@@ -42,26 +42,44 @@
 # Intel(R) Integrated Performance Primitives (Intel(R) IPP) Cryptography
 #
 
-# linker
-set(LINK_FLAG_DYNAMIC_LINUX "-nostdlib -Wl,-shared -Wl,-z,defs -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now -Wl,-call_shared,-lc -Wl,-call_shared,-lm")
+# Linker flags
+
+# Security flags
+set(LINK_FLAG_SECURITY "") 
+# Disallows undefined symbols in object files. Undefined symbols in shared libraries are still allowed
+set(LINK_FLAG_SECURITY "${LINK_FLAG_SECURITY} -Wl,-z,defs")
+# Stack execution protection
+set(LINK_FLAG_SECURITY "${LINK_FLAG_SECURITY} -Wl,-z,noexecstack")
+# Data relocation and protection (RELRO)
+set(LINK_FLAG_SECURITY "${LINK_FLAG_SECURITY} -Wl,-z,relro -Wl,-z,now")
+
+set(LINK_FLAG_DYNAMIC_LINUX "${LINK_FLAG_SECURITY} -nostdlib -Wl,-shared -Wl,-call_shared,-lc -Wl,-call_shared,-lm")
 if(${ARCH} MATCHES "ia32")
   set(LINK_FLAG_DYNAMIC_LINUX "${LINK_FLAG_DYNAMIC_LINUX} -Wl,-m,elf_i386")
 endif(${ARCH} MATCHES "ia32")
 
-set(LINK_FLAG_PCS_LINUX "-nostdlib -Wl,-call_shared,-ldl -Wl,-call_shared,-lc -Wl,-call_shared,-lm") #check lm lc
+set(LINK_FLAG_PCS_LINUX "${LINK_FLAG_SECURITY} -nostdlib -Wl,-shared -Wl,-call_shared,-ldl -Wl,-call_shared,-lc -Wl,-call_shared,-lm")
 if(${ARCH} MATCHES "ia32")
   set(LINK_FLAG_PCS_LINUX "${LINK_FLAG_PCS_LINUX} -Wl,-m,elf_i386")
 endif(${ARCH} MATCHES "ia32")
 
-# compiler
+# Compiler flags
 set(CC_FLAGS_INLINE_ASM_UNIX_IA32 "-fasm-blocks -use_msasm -w -m32 -fomit-frame-pointer")
 
 set(CC_FLAGS_INLINE_ASM_UNIX_INTEL64 "-fasm-blocks -use_msasm -ffixed-rdi -ffixed-rsi -ffixed-rbx -ffixed-rcx -ffixed-rdx -ffixed-rbp -ffixed-r8 -ffixed-r9 -ffixed-r12 -ffixed-r13 -ffixed-r14 -ffixed-r15")
 
 set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS} ${LIBRARY_DEFINES}")
 
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -ffreestanding -restrict -qopt-report2 -qopt-report-phase:vec -std=c99 -falign-functions=32 -falign-loops=32 -diag-error 266 -diag-disable 13366 -Wformat -Wformat-security -fstack-protector")
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -ffreestanding -restrict -qopt-report2 -qopt-report-phase:vec -std=c99 -falign-functions=32 -falign-loops=32 -diag-error 266 -diag-disable 13366")
+
+# Stack-based Buffer Overrun Detection
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fstack-protector")
+
+# Format string vulnerabilities
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wformat -Wformat-security")
+
 if(NOT NONPIC_LIB)
+  # Position Independent Execution (PIE)
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fpic -fPIC")
 endif()
 if(THREADED_LIB)
@@ -71,8 +89,26 @@ if(CODE_COVERAGE)
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -prof-gen:srcpos -prof-dir ${PROF_DATA_DIR}")
 endif()
 
+set (CMAKE_C_FLAGS_RELEASE " -O3 -DNDEBUG" CACHE STRING "" FORCE)
+set (CMAKE_C_FLAGS_RELEASE_INIT " -O3 -DNDEBUG" CACHE STRING "" FORCE)
+
 if(${ARCH} MATCHES "ia32")
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -no-sox  -Zp16 -gcc -falign-stack=maintain-16-byte -Wa,--32 -no-use-asm -m32")
 else()
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -no-sox  -Zp16 -gcc")
-endif(${ARCH} MATCHES "ia32")
+endif(${ARCH} MATCHES "ia32")
+
+set(px_opt "${px_opt} -mia32")
+set(w7_opt "${w7_opt} -xSSE2")
+set(s8_opt "${s8_opt} -xATOM_SSSE3 -minstruction=nomovbe")
+set(p8_opt "${p8_opt} -xATOM_SSE4.2 -minstruction=nomovbe")
+set(g9_opt "${g9_opt} -xAVX")
+set(h9_opt "${h9_opt} -xCORE-AVX2")
+set(mx_opt "${mx_opt} -march=pentium")
+set(m7_opt "${m7_opt} -xSSE3")
+set(n8_opt "${n8_opt} -xATOM_SSSE3 -minstruction=nomovbe")
+set(y8_opt "${y8_opt} -xATOM_SSE4.2 -minstruction=nomovbe")
+set(e9_opt "${e9_opt} -xAVX")
+set(l9_opt "${l9_opt} -xCORE-AVX2")
+set(n0_opt "${n0_opt} -xMIC-AVX512")
+set(k0_opt "${k0_opt} -xCORE-AVX512")

sources/cmake/macosx/Intel18.0.0.cmake

@@ -43,7 +43,7 @@
 #
 
 # linker
-set(LINK_FLAG_DYNAMIC_MACOSX "-Wl,-dynamic -Wl,-noall_load -Wl,-single_module -Wl,-flat_namespace -Wl,-headerpad_max_install_names")
+set(LINK_FLAG_DYNAMIC_MACOSX "-Wl,-dynamic -Wl,-single_module -Wl,-flat_namespace -Wl,-headerpad_max_install_names")
 set(LINK_FLAG_DYNAMIC_MACOSX "${LINK_FLAG_DYNAMIC_MACOSX} -Wl,-current_version,2019.0.0 -Wl,-compatibility_version,2019.0 -Wl,-macosx_version_min,10.7")
 set(LINK_FLAG_DYNAMIC_MACOSX "${LINK_FLAG_DYNAMIC_MACOSX} -nostdlib -Wl,-lgcc_s.1 -Wl,-lm")
 if(${ARCH} MATCHES "ia32")
@@ -58,7 +58,7 @@ set(CC_FLAGS_INLINE_ASM_UNIX_IA32 "-fasm-blocks -use_msasm -w -m32 -fomit-frame-
 
 set(CC_FLAGS_INLINE_ASM_UNIX_INTEL64 "-fasm-blocks -use_msasm -ffixed-rdi -ffixed-rsi -ffixed-rbx -ffixed-rcx -ffixed-rdx -ffixed-rbp -ffixed-r8 -ffixed-r9 -ffixed-r12 -ffixed-r13 -ffixed-r14 -ffixed-r15")
 
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS} ${LIBRARY_DEFINES}")
+set(CMAKE_C_FLAGS "${LIBRARY_DEFINES}")
 
 set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -ffreestanding -restrict -qopt-report2 -qopt-report-phase:vec -std=c99 -falign-functions=32 -falign-loops=32 -diag-error 266 -diag-disable 13366 -Wformat -Wformat-security -fstack-protector")
 set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fpic -fPIC")
@@ -74,3 +74,16 @@ if(${ARCH} MATCHES "ia32")
 else()
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -arch x86_64")
 endif(${ARCH} MATCHES "ia32")
+
+set(w7_opt "${w7_opt} -xSSE2")
+set(s8_opt "${s8_opt} -xSSE3")
+set(p8_opt "${p8_opt} -xSSE4.2")
+set(g9_opt "${g9_opt} -xAVX")
+set(h9_opt "${h9_opt} -xCORE-AVX2")
+set(m7_opt "${m7_opt} -xSSE3")
+set(n8_opt "${n8_opt} -xSSSE3")
+set(y8_opt "${y8_opt} -xSSE4.2")
+set(e9_opt "${e9_opt} -xAVX")
+set(l9_opt "${l9_opt} -xCORE-AVX2")
+set(n0_opt "${n0_opt} -xMIC-AVX512")
+set(k0_opt "${k0_opt} -xCORE-AVX512")

sources/cmake/windows/Intel18.0.0.cmake

@@ -43,7 +43,14 @@
 #
 
 # linker
+set(LINK_FLAG_STATIC_WINDOWS "")
 set(LINK_FLAG_DYNAMIC_WINDOWS "/nologo /VERBOSE:SAFESEH /INCREMENTAL:NO /NXCOMPAT /DYNAMICBASE")
+
+# supress warning LNK4221:
+# "This object file does not define any previously undefined public symbols, so it will not be used by any link operation that consumes this library"
+set(LINK_FLAG_STATIC_WINDOWS  "${LINK_FLAG_STATIC_WINDOWS} /ignore:4221")
+set(LINK_FLAG_DYNAMIC_WINDOWS "${LINK_FLAG_DYNAMIC_WINDOWS} /ignore:4221")
+
 if(${ARCH} MATCHES "ia32")
   set(LINK_FLAG_DYNAMIC_WINDOWS "${LINK_FLAG_DYNAMIC_WINDOWS} /SAFESEH")
 endif(${ARCH} MATCHES "ia32")
@@ -55,9 +62,9 @@ set(LINK_LIB_STATIC_RELEASE  ${LINK_LIB_STATIC_RELEASE_VS2015})
 set(LINK_LIB_STATIC_DEBUG  ${LINK_LIB_STATIC_DEBUG_VS2015})
 
 # compiler
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS} ${LIBRARY_DEFINES}")
+set(CMAKE_C_FLAGS "${LIBRARY_DEFINES}")
 
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -nologo -Qfp-speculation:safe -Qfreestanding -X -W4 -GS -Qdiag-error:266 -Qdiag-disable:13366 /Qfnalign:32 /Qalign-loops:32 -Qrestrict -Zp16 -Qvc12 -Qopt-report2 -Qopt-report-phase:vec -Qopt-report-stdout -Qsox- /Gy -Qstd=c99")
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -nologo -Qfp-speculation:safe -Qfreestanding -X /W4 -GS -Qdiag-error:266 -Qdiag-disable:13366 /Qfnalign:32 /Qalign-loops:32 -Qrestrict -Zp16 -Qvc12 -Qopt-report2 -Qopt-report-phase:vec -Qopt-report-stdout -Qsox- /Gy -Qstd=c99")
 if(THREADED_LIB)
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Qopenmp -Qopenmp-lib:compat")
 endif()
@@ -66,4 +73,25 @@ if(CODE_COVERAGE)
 endif()
 
 set(CMAKE_C_FLAGS_DEBUG "/MTd /Zi /Od /Ob2 /DDEBUG" CACHE STRING "" FORCE)
-set(CMAKE_C_FLAGS_RELEASE "/MT /Zl /O3 /Ob2 /DNDEBUG" CACHE STRING "" FORCE)
+set(CMAKE_C_FLAGS_RELEASE "/MT /Zl /O3 /Ob2 /DNDEBUG" CACHE STRING "" FORCE)
+
+set (CMAKE_C_FLAGS_DEBUG_INIT "/MDd /Zi /Ob0 /Od /RTC1" CACHE STRING "" FORCE)
+set (CMAKE_C_FLAGS_RELEASE_INIT "-DNDEBUG /MD /Zl /O3 /Ob2 /DNDEBUG" CACHE STRING "" FORCE)
+
+# supress warning #10120: overriding '/O2' with '/O3' 
+# CMake bug: cmake cannot change the property "Optimization" to /O3 in MSVC project
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -wd10120")
+
+set(w7_opt "${w7_opt} -QxSSE2")
+set(s8_opt "${s8_opt} -QxATOM_SSSE3 -Qinstruction=nomovbe")
+set(p8_opt "${p8_opt} -QxATOM_SSE4.2 -Qinstruction=nomovbe")
+set(g9_opt "${g9_opt} -QxAVX")
+set(h9_opt "${h9_opt} -QxCORE-AVX2")
+set(m7_opt "${m7_opt} -QxSSE3")
+set(n8_opt "${n8_opt} -QxATOM_SSSE3 -Qinstruction=nomovbe")
+set(y8_opt "${y8_opt} -QxATOM_SSE4.2 -Qinstruction=nomovbe")
+set(e9_opt "${e9_opt} -QxAVX")
+set(l9_opt "${l9_opt} -QxCORE-AVX2")
+set(n0_opt "${n0_opt} -QxMIC-AVX512")
+set(k0_opt "${k0_opt} -QxCORE-AVX512")
+