{
  "slug": "constant-time-verification",
  "term": "Constant-time verification",
  "tools": [
    "jasmin",
    "hacl-star"
  ],
  "definition": "Proving that a program's control flow and memory access pattern do not depend on secret data, so timing and cache side channels cannot leak keys.",
  "detail": [
    "Jasmin checks it in the compiler; HACL* proves secret independence in F*; AWS-LC's assembly is verified constant-time. Functional correctness proofs do not imply it: the KyberSlash timing bugs were in code that computed the right answer."
  ],
  "page": "https://sorryfree.com/glossary/constant-time-verification/",
  "updated": "2026-09-13"
}