constant-time-analysis
Analyzes code and bytecode to detect timing side-channel vulnerabilities in cryptographic implementations.
Install
npx skills add https://github.com/trailofbits/skills --skill constant-time-analysisStats
| Total installs | 1,194 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Analyzes assembly or bytecode to flag variable-time operations (division, secret-dependent branches, weak RNG, table lookups by secret index) that leak secret data through execution timing
- Supports C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, and Ruby with language-specific analysis guides
- Offers cross-architecture and optimization-level testing for compiled languages to catch compiler-dependent timing leaks
- Requires manual data-flow verification for each flagged operation; static analysis flags all potentially dangerous instructions regardless of secret involvement
Tags
Related skills
| Skill | Installs | vs constant-time-analysis |
|---|---|---|
| assets | 1,304 | +110 |
| guidelines-advisor | 1,289 | +95 |
| coverage-analysis | 1,237 | +43 |
| constant-time-testing | 1,176 | -18 |
| ruzzy | 1,155 | -39 |
FAQ
- How many installs does constant-time-analysis have?
- constant-time-analysis has 1,194 total installs and 1.2K installs this week.
- Where is constant-time-analysis hosted?
- constant-time-analysis is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does constant-time-analysis have?
- constant-time-analysis has 4.0K GitHub stars.
- When was constant-time-analysis first indexed?
- OrangeBot.AI first indexed constant-time-analysis on Jan 19, 2026.
- How do I install constant-time-analysis?
- Run: npx skills add https://github.com/trailofbits/skills --skill constant-time-analysis