skills.rest
ofelixdev
ofelixdevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

constant-time-analysis

Detect timing side-channel vulnerabilities in cryptographic code across multiple programming languages.

Updated Feb 24, 2026
Search Tags:#security#cryptography#vulnerability analysis#constant-time#side-channel#timing attacks
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill constant-time-analysis-ofelixdev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: constant-time-analysis
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/constant-time-analysis
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill constant-time-analysis-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies potential security vulnerabilities in cryptographic code where execution time varies based on secret data, which can lead to information leakage.

Core Features & Use Cases

  • Vulnerability Detection: Analyzes code (C, C++, Go, Rust, Python, JS, PHP, Ruby, Swift, Java, Kotlin, C#) for dangerous instructions and patterns that leak timing information.
  • Cross-Platform Analysis: Supports analysis of compiled languages across various architectures and interpreted languages via bytecode.
  • Use Case: A security engineer is reviewing a new encryption library. They use this Skill to automatically scan the codebase for any division operations on secret keys or secret-dependent branches that could be exploited by timing attacks.

Quick Start

Analyze the provided Swift file 'crypto.swift' for timing vulnerabilities.

Frequently Asked Questions about constant-time-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect timing side-channel vulnerabilities in cryptographic code?▼

Detect timing side-channel vulnerabilities by analyzing source code, bytecode, or assembly for dangerous instructions like secret-dependent division, floating-point operations, conditional branches, and table lookups that leak execution time information.

What programming languages can I scan for constant-time execution issues?▼

Scan constant-time execution issues across C, C++, Go, Rust, Python, JavaScript, TypeScript, PHP, Ruby, Swift, Java, Kotlin, and C# by analyzing compiled architectures and interpreted bytecode for timing leaks.

What causes timing attacks in cryptographic implementations?▼

Timing attacks occur when execution time varies based on secret data. Cryptographic implementations are vulnerable if they use division, floating-point operations, conditional branches, or table lookups dependent on secret keys.

Can I analyze compiled binaries and bytecode for side-channel vulnerabilities?▼

Analyze compiled binaries and bytecode for side-channel vulnerabilities. The tool supports compiled languages across various architectures and interpreted languages via bytecode to identify dangerous timing-dependent patterns.

What's the best way to audit an encryption library for timing leaks?▼

Audit an encryption library for timing leaks by scanning the codebase to automatically identify division operations on secret keys or secret-dependent branches that could be exploited by timing attacks.

Related Skills

Explore More Software Engineering Skills→
macaughmacaugh
5

Binary Analysis and Reverse Engineering

Analyzes compiled binaries to identify vulnerabilities using static disassembly, dynamic debugging, and Python tools.

Community
Advanced
manuelbrandner85manuelbrandner85

constant-time-analysis

Detect variable-time instructions in assembly or bytecode for cryptographic implementations.

Community
Advanced
RedHatProductSecurityRedHatProductSecurity
47

constant-time-testing

Detect timing side-channel vulnerabilities in cryptographic implementations.

Official
Intermediate
Avi977Avi977

constant-time-testing

Detect timing leaks in cryptographic implementations using constant-time analysis.

Community
Advanced