Lightlines
By trailofbits

constant-time-analysis

trailofbits5k installs

Find timing leaks in your cryptographic code.

What it does

Finds potential timing leaks in cryptographic code by inspecting compiler output and checking whether flagged operations touch secrets.

When to use it

Use when implementing or reviewing cryptographic routines, spotting division or modulo on secret-derived values, or investigating constant-time concerns.

How to use it

Give it cryptographic code to review; it returns verdicts on flagged operations with the data flow supporting each verdict.

What you provide

  • An existing project

Latest review

What you need · 8

The prescribed analyzer invocation uses uv.

C and C++ analysis requires clang or gcc in PATH; clang is the default compiler.

Go analysis requires go in PATH.

Rust analysis requires rustc in PATH.


Access · 0

No additional actions listed.