---

name: constant-time-analysis description: Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby. category: constant-time-analysis author: Trail of Bits source: trailofbits/skills license: AGPL-3.0 trit: -1 trit_label: MINUS verified: true featured: false

Constant Time Analysis Skill

Trit: -1 (MINUS) Category: constant-time-analysis Author: Trail of Bits Source: trailofbits/skills License: AGPL-3.0

Description

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.

When to Use

This is a Trail of Bits security skill. Refer to the original repository for detailed usage guidelines and examples.

See: https://github.com/trailofbits/skills

Related Skills

• audit-context-building
• codeql
• semgrep
• variant-analysis