Find timing leaks in your cryptographic code.
Finds potential timing leaks in cryptographic code by inspecting compiler output and checking whether flagged operations touch secrets.
When to use it
Use when implementing or reviewing cryptographic routines, spotting division or modulo on secret-derived values, or investigating constant-time concerns.
Give it cryptographic code to review; it returns verdicts on flagged operations with the data flow supporting each verdict.
What you provide
The prescribed analyzer invocation uses uv.
C and C++ analysis requires clang or gcc in PATH; clang is the default compiler.
Go analysis requires go in PATH.
Rust analysis requires rustc in PATH.
No additional actions listed.