Constant Time Analysis
插件 已验证 活跃Detect compiler-induced timing side-channels in cryptographic code
To help developers identify and mitigate critical timing side-channel vulnerabilities in cryptographic implementations, ensuring more secure software.
功能
- Detects timing side-channel vulnerabilities
- Analyzes multiple languages (C, C++, Go, Rust, PHP, JS, TS, Python, Ruby)
- Supports various architectures (x86_64, ARM64, RISC-V) and compilers
- Tests across optimization levels
- Outputs results in text, JSON, or GitHub Actions annotations
使用场景
- Reviewing cryptographic code for timing side-channel risks
- Analyzing the impact of compiler optimizations on security
- Ensuring constant-time implementation of cryptographic algorithms
- Integrating security checks into CI/CD pipelines for crypto projects
非目标
- Detecting other types of side-channel attacks (e.g., cache-timing, microarchitectural)
- Performing dynamic analysis or runtime behavior analysis
- Analyzing non-cryptographic code
- Providing automated fixes for detected vulnerabilities
Trust
- info:Issues Attention13 issues opened and 4 closed in the last 90 days, indicating maintainer engagement but with a closure rate below 50%.
安装
请先添加 Marketplace
/plugin marketplace add trailofbits/skills/plugin install constant-time-analysis@trailofbits质量评分
已验证类似扩展
Context7 Plugin
100Upstash Context7 MCP 服务器，用于查找最新文档。直接从源代码存储库将特定版本的文档和代码示例拉取到您的 LLM 上下文中。
C4 Architecture
99Comprehensive C4 architecture documentation workflow with bottom-up code analysis, component synthesis, container mapping, and context diagram generation
Dimensional Analysis
99Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol. Prevents dimensional mismatches and catches formula bugs early.
Ruflo Knowledge Graph
99Knowledge graph construction — entity extraction, relation mapping, and pathfinder graph traversal
Protect Mcp
98Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin — receipts independently verifiable offline.
Signed Audit Trails
95Teaching skill: signed audit trails for Claude Code tool calls. Cookbook-style walkthrough of Cedar-gated tool calls with Ed25519 receipts, offline verification, and CI/CD integration. Pairs with the protect-mcp plugin.