constant-time-testing
trailofbits4.9k installs
Find timing leaks in your cryptographic code.
What it does
Detects timing leaks in cryptographic code and pinpoints their causes through statistical testing and runtime tracing.
When to use it
Use when testing a running implementation for constant-time behavior, measuring timing variance in a compiled binary, or investigating suspected timing attacks.
How to use it
Give it cryptographic project code; it writes a timing-test harness and tests the implementation for timing leakage.
What you provide
- An existing project
Latest review
What you need · 2
Requires dudect for the initial statistical timing-test harness and subsequent leakage checks.
Requires Valgrind for the root-cause investigation performed when dudect detects leakage.
Access · 0
No additional actions listed.