constant-time-testing

Name: constant-time-testing
Availability: InStock
Author: erenisiklar

Detect timing leaks in cryptographic code using statistical, dynamic, and formal tools.

Updated Mar 27, 2026

Search Tags:#cryptography #timing #security-testing #dudect #constant-time #side-channel

Ready to run

npx skills add https://github.com/erenisiklar/Pusula --skill constant-time-testing-erenisiklar

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: constant-time-testing
Source: https://github.com/erenisiklar/Pusula/tree/main/.claude/skills/constant-time-testing
Command: npx skills add https://github.com/erenisiklar/Pusula --skill constant-time-testing-erenisiklar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Constant-time testing detects timing side channels in cryptographic code and helps protect sensitive information from leakage.

Core Features & Use Cases

Identify timing leaks in crypto implementations
Support for dynamic (Timecop), statistical (dudect), and formal (ct-verif/SideTrail) techniques
Guidance for remediation and secure coding practices

Quick Start

Run a phased constant-time analysis on your crypto function using the recommended tools to identify and fix timing leaks.

Frequently Asked Questions about constant-time-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect timing leaks in cryptographic code?▼

Detect timing leaks in cryptographic code by measuring execution time with secret inputs across libraries and architectures. This Skill identifies leak patterns in modular exponentiation, AES, and related primitives using statistical, dynamic, and formal analysis techniques.

What is constant-time testing for side-channel vulnerabilities?▼

Constant-time testing is a security-testing technique that identifies timing side channels in cryptographic code. By measuring execution time variations with different secret inputs, it detects vulnerabilities that could leak sensitive information to attackers.

How do I use dudect to test for timing side channels?▼

Use dudect as a statistical tool within a phased constant-time analysis workflow to measure execution time variations in your cryptographic functions. This Skill guides you through applying dudect alongside dynamic and formal tools to detect timing leaks accurately.

Does constant-time testing work with AES and modular exponentiation implementations?▼

Constant-time testing works directly with AES and modular exponentiation implementations across various libraries and architectures. The Skill specifically targets these primitives to identify timing leak patterns and provides remediation guidance for secure coding.

How do I fix timing leaks after identifying them in crypto implementations?▼

Fix timing leaks by following the remediation guidance provided after identifying them through statistical, dynamic, and formal analysis. The Skill supports a phased workflow that includes interpreting test results and applying secure coding practices to eliminate side channels.

What's the best way to combine Timecop, dudect, and ct-verif for security testing?▼

Combine Timecop, dudect, and ct-verif through a phased constant-time analysis workflow that leverages dynamic, statistical, and formal techniques respectively. This approach ensures comprehensive timing leak detection across cryptographic implementations and architectures.