constant-time-testing
Identify and fix timing side-channel leaks in cryptographic implementations using specialized testing and verification.
Install
npx skills add https://github.com/trailofbits/skills --skill constant-time-testingStats
| Total installs | 1,176 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Covers four tool categories: formal verification (mathematical proofs), symbolic execution (concrete counterexamples), dynamic tracing (runtime secret tracking), and statistical testing (real-world timing measurement)
- Provides workflow combining dudect for initial leak detection and timecop for pinpointing root causes, with formal verification for high-assurance audits
- Identifies four common vulnerability patterns: secret-dependent branches, array lookups, integer division, and shift operations that leak timing information
- Includes implementation guide covering assessment, detailed analysis, remediation, and CI integration for continuous monitoring
Tags
Related skills
| Skill | Installs | vs constant-time-testing |
|---|---|---|
| ton-vulnerability-scanner | 1,172 | -4 |
| substrate-vulnerability-scanner | 1,173 | -3 |
| cairo-vulnerability-scanner | 1,169 | -7 |
| fuzzing-obstacles | 1,266 | +90 |
| ruzzy | 1,155 | -21 |
FAQ
- How many installs does constant-time-testing have?
- constant-time-testing has 1,176 total installs and 1.2K installs this week.
- Where is constant-time-testing hosted?
- constant-time-testing is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does constant-time-testing have?
- constant-time-testing has 4.0K GitHub stars.
- When was constant-time-testing first indexed?
- OrangeBot.AI first indexed constant-time-testing on Jan 19, 2026.
- How do I install constant-time-testing?
- Run: npx skills add https://github.com/trailofbits/skills --skill constant-time-testing