constant-time-analysis
Analyze cryptographic code to detect operations that leak secret data through execution timing variations.
Profile →npx skills add sickn33/agentic-awesome-skills --skill constant-time-analysis --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Constant-Time Analysis Analyze cryptographic code to detect operations that leak secret data through execution timing variations. ## When to Use ```text User writing crypto code? ──yes──> Use this skill │ no │ v User asking about timing attacks? ──yes──> Use this skill │ no │ v Code handles secret keys/tokens? ──yes──> Use this skill │ no │ v Skip this skill ``` **Concrete triggers:** - User implements signature, encryption, or key derivation - Code contains `/` or `%` operators on secret-derived values - User mentions "constant-time", "timing attack", "side-channel", "KyberSlash" - Reviewing functions named `sign`, `verify`, `encrypt`, `decrypt`, `derive_key` ## When NOT to Use - Non-cryptographic code (business logic, UI, etc.) - Public data processing where timing leaks don't matter - Code that doesn't handle secrets, keys, or authentication tokens - High-level API usage where timing is handled by the library ## Language Selection Based on the file extension or language context, refer to the appropriate guide: | Language | File Extensions | Guide | | ---------- | --------------------------------- | -------------------------------------------------------- | | C, C++ | `.c`, `.h
- When to Use
- When NOT to Use
- Language Selection
- Quick Start
- Native Compiled Languages Only (C, C++, Go, Rust)
- VM-Compiled Languages (Java, Kotlin, C#)
- Swift (iOS/macOS)
- Prerequisites
- Quick Reference
- Interpreting Results
- Verifying Results (Avoiding False Positives)
- Quick Triage Questions
- Limitations
- Real-World Impact
Analyze any supported file type
uv run {baseDir}/ct_analyzer/analyzer.py <source_file>
Include conditional branch warnings
uv run {baseDir}/ct_analyzer/analyzer.py --warnings <source_file>
Filter to specific functions
uv run {baseDir}/ct_analyzer/analyzer.py --func 'sign|verify' <source_file>
JSON output for CI
uv run {baseDir}/ct_analyzer/analyzer.py --json <source_file>
Cross-architecture testing (RECOMMENDED)
uv run {baseDir}/ct_analyzer/analyzer.py --arch x86_64 crypto.cWhat does the constant-time-analysis skill do?
Analyze cryptographic code to detect operations that leak secret data through execution timing variations.
How do I install it?
Run `npx skills add sickn33/agentic-awesome-skills --skill constant-time-analysis --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.