Quality Assurance & Testing
Constant Time Testing
Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over Valgrind for dynamic tracing. Covers the formal, symbolic, dynamic, and statistical tool categories and how to read a result. Use when testing whether a running implementation is constant-time, measuring timing variance on a compiled binary, or investigating a suspected timing attack. Not for statically inspecting compiler output — the constant-time-analysis plugin covers that.
- Publisher / source
- trailofbits/skills (found on skills.sh, an awesome list, the CSV list)
- Upstream record
- trailofbits/skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication · recorded passed scan 2026-11-02
- Content fingerprint
d294126ee90dbb949261145fbf1fb05dbbeb1a986320ba597b746fa4068f0028