Constant Time Analysis
Plugin Verified ActiveDetect compiler-induced timing side-channels in cryptographic code
To help developers identify and mitigate critical timing side-channel vulnerabilities in cryptographic implementations, ensuring more secure software.
Features
- Detects timing side-channel vulnerabilities
- Analyzes multiple languages (C, C++, Go, Rust, PHP, JS, TS, Python, Ruby)
- Supports various architectures (x86_64, ARM64, RISC-V) and compilers
- Tests across optimization levels
- Outputs results in text, JSON, or GitHub Actions annotations
Use Cases
- Reviewing cryptographic code for timing side-channel risks
- Analyzing the impact of compiler optimizations on security
- Ensuring constant-time implementation of cryptographic algorithms
- Integrating security checks into CI/CD pipelines for crypto projects
Non-Goals
- Detecting other types of side-channel attacks (e.g., cache-timing, microarchitectural)
- Performing dynamic analysis or runtime behavior analysis
- Analyzing non-cryptographic code
- Providing automated fixes for detected vulnerabilities
Trust
- info:Issues Attention13 issues opened and 4 closed in the last 90 days, indicating maintainer engagement but with a closure rate below 50%.
Installation
First, add the marketplace
/plugin marketplace add trailofbits/skills/plugin install constant-time-analysis@trailofbitsQuality Score
VerifiedTrust Signals
Similar Extensions
Context7 Plugin
100Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.
C4 Architecture
99Comprehensive C4 architecture documentation workflow with bottom-up code analysis, component synthesis, container mapping, and context diagram generation
Dimensional Analysis
99Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol. Prevents dimensional mismatches and catches formula bugs early.
Ruflo Knowledge Graph
99Knowledge graph construction — entity extraction, relation mapping, and pathfinder graph traversal
Protect Mcp
98Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin — receipts independently verifiable offline.
Signed Audit Trails
95Teaching skill: signed audit trails for Claude Code tool calls. Cookbook-style walkthrough of Cedar-gated tool calls with Ed25519 receipts, offline verification, and CI/CD integration. Pairs with the protect-mcp plugin.