Skip to main content
Back to registry

constant-time-analysis

trailofbits/skills

Analyze cryptographic code to detect operations that leak secret data through execution timing variations.

Installs762
Install command
npx skills add https://github.com/trailofbits/skills --skill constant-time-analysis
Security audits
Gen Agent Trust HubFAIL
SocketPASS
SnykPASS
About this skill
Analyze cryptographic code to detect operations that leak secret data through execution timing variations. Concrete triggers: Based on the file extension or language context, refer to the appropriate guide: Note: Java, Kotlin, and C# compile to bytecode (JVM/CIL) that runs on a virtual machine with JIT compilation. The analyzer examines the bytecode directly, not the JIT-compiled native code. The --arch and --opt-level flags do not apply to these languages. Note: Swift compiles to native code like C/C++/Go/Rust, so it uses assembly-level analysis and supports --arch and --opt-level flags. macOS users : Homebrew installs Java and .NET as "keg-only". You must add them to your PATH: See references/vm-compiled.md for detailed setup instructions and troubleshooting. PASSED - No variable-time operations detected. FAILED - Dangerous instructions found.

Source description provided by the upstream skill listing. Community reviews and install context appear in the sections below.

Community Reviews

Latest reviews

Sign in to review

No community reviews yet. Be the first to review.

Browse this skill in context
FAQ
What does constant-time-analysis do?

Analyze cryptographic code to detect operations that leak secret data through execution timing variations.

Is constant-time-analysis good?

constant-time-analysis does not have approved reviews yet, so SkillJury cannot publish a community verdict.

What agent does constant-time-analysis work with?

constant-time-analysis currently lists compatibility with codex, gemini-cli, opencode, cursor, github-copilot, claude-code.

What are alternatives to constant-time-analysis?

Skills in the same category include telegram-bot-builder, flutter-app-size, sharp-edges, iterative-retrieval.

How do I install constant-time-analysis?

npx skills add https://github.com/trailofbits/skills --skill constant-time-analysis

Related skills

More from trailofbits/skills

Related skills

Alternatives in Software Engineering