constant-time-testing — Skills

What it does

Expose private keys - Extract secret exponents in RSA/ECDH

Enable remote attacks - Network-observable timing differences

Bypass cryptographic security - Undermine theoretical guarantees

Persist silently - Often undetected without specialized analysis

Auditing cryptographic implementations (primitives, protocols)

Code handles secret keys, passwords, or sensitive cryptographic material

Implementing crypto algorithms from scratch

Requirements & configuration

For $y$, both multiplications take time $t1+t1$. For $y'$, the second multiplication requires reduction, taking time $t1+t2$. This timing difference reveals whether $di$ is 0 or 1.

Weaknesses: Requires expertise, modeling assumptions may miss real-world issues

Conditional jump or move depends on uninitialised value(s)

constant time testing

Source

Repository: https://github.com/trailofbits/skills

constant-time-testing FAQ

What does the constant-time-testing skill do?

> Constant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for timing vulnerabilities. Expose private keys - Extract secret exponents in RSA/ECDH Enable remote attacks - Network-observable timing differences

What does constant-time-testing require?

For $y$, both multiplications take time $t1+t1$. For $y'$, the second multiplication requires reduction, taking time $t1+t2$. This timing difference reveals whether $di$ is 0 or 1. Weaknesses: Requires expertise, modeling assumptions may miss real-world issues Conditional jump or move depends on uninitialised value(s)

How do I install constant-time-testing?

Run: npx -y skills add https://github.com/trailofbits/skills --skill constant-time-testing --agent claude-code — the source lives at github.com/trailofbits/skills.

Maintain constant-time-testing?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[constant-time-testing on getagentictools](https://getagentictools.com/skills/trailofbits-skills-constant-time-testing?ref=badge)

npx agentictools info skills/trailofbits-skills-constant-time-testing

The second line is the CLI lookup for this page — handy in READMEs and docs.