constant-time-testing

trailofbits/skills/plugins/testing-handbook-skills/skills/constant-time-testing

6.9k 0 +6.9k/7dDev Tools
PlatformClaude CodeOpenAI Codex

Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over Valgrind for dynamic tracing. Covers the formal, symbolic, dynamic, and statistical tool categories and how to read a result. Use when testing whether a running implementation is constant-time, measuring timing variance on a compiled binary, or investigating a suspected timing attack. Not for statically inspecting compiler output — the constant-time-analysis plugin covers that.

Claude CodeOpenAI Codex

All Skills