Constant-Time Testing skill: what it does and how to install it

What it does. Guides testing of compiled cryptographic code for timing leakage using dudect to compare execution times statistically and Timecop over Valgrind to trace secret-dependent operations. It covers formal, symbolic, dynamic and statistical approaches, plus workflows for investigating findings and integrating tests into CI.

When to use it. For implementations that process private keys, passwords or other secret cryptographic data, including audits, new algorithms and suspected timing attacks. It does not cover static inspection of compiler output, which belongs to the constant-time-analysis plugin.