constant-time-analysis
Detects compiler-induced timing side-channel vulnerabilities in cryptographic code by analyzing assembly and bytecode output across multiple languages (C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, Ruby) and architectures (x86_64, ARM64, ARM, RISC-V, PowerPC, s390x, i386). Identifies dangerous instructions like division, floating-point operations, and conditional branches that could leak secret data through execution timing differences.
Install
Source: https://github.com/trailofbits/skills/tree/HEAD/plugins/constant-time-analysis
What it's made of
1 command · 1 skill
- Commands
- 1
- Agents
- 0
- Skills
- 1
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (trailofbits).