https://trailofbits.github.io/testing-handbook-preview/pr-preview/pr-128/docs/crypto/constant_time_tool/Recent content in Constant time analysis tooling on Testing HandbookHugoen-ushttps://trailofbits.github.io/testing-handbook-preview/pr-preview/pr-128/docs/crypto/constant_time_tool/dudect/Mon, 01 Jan 0001 00:00:00 +0000https://trailofbits.github.io/testing-handbook-preview/pr-preview/pr-128/docs/crypto/constant_time_tool/dudect/Dudect # Overview # Dudect is a statistical constant-time analysis tool that measures the execution time of a specific code section for two input classes and aims to find the statical difference between the measurements of the two classes. If the timing measurements for the two input classes deviate from one another, it would suggest that the code is dependent on the input and, therefore, not constant time. The two most commonly used input classes are:https://trailofbits.github.io/testing-handbook-preview/pr-preview/pr-128/docs/crypto/constant_time_tool/timecop/Mon, 01 Jan 0001 00:00:00 +0000https://trailofbits.github.io/testing-handbook-preview/pr-preview/pr-128/docs/crypto/constant_time_tool/timecop/Timecop (Valgrind) # Timecop is a wrapper around Valgrind designed to detect potential timing leaks dynamically. It allows developers to mark memory regions as secret, and if during runtime, a branching instruction or memory access is performed that is dependent on the secret memory region, Valgrind will report the behavior, helping to identify timing vulnerabilities. Overview # Timecop is a C macro wrapper around functions provided by Valgrind. Setup # To use Timecop, you must first install Valgrind.