Constant Time Analysis

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.

plurigrid Updated

File contents

Constant Time Analysis Skill

Trit: -1 (MINUS) Category: constant-time-analysis Author: Trail of Bits Source: trailofbits/skills License: AGPL-3.0

Description

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.

When to Use

This is a Trail of Bits security skill. Refer to the original repository for detailed usage guidelines and examples.

See: https://github.com/trailofbits/skills

Related Skills

  • audit-context-building
  • codeql
  • semgrep
  • variant-analysis

plurigrid/asi/tree/main/plugins/asi/skills/constant-time-analysis commit e38a3f06b2

Frequently asked questions

npx skillmds@latest add plurigrid/constant-time-analysis-2