Constant-timeness verification tools

This repository contains a list of tools for testing and verification of constant-timeness of programs. The list is based mostly on the work in “They’re not that hard to mitigate”: What Cryptographic Library Developers Think About Timing Attacks and “These results must be false”: A usability evaluation of constant-time analysis tools with addition of more tools. See the page for more.

Contributing

Do you have a new tool? Do you have more data on any of the tools we have? Did you create a tutorial for a tool? Make a PR and contribute your work!