What is Constant-time verification? Definition and why it matters
=================================================================

Proving that a program's control flow and memory access pattern do not depend on secret data, so timing and cache side channels cannot leak keys.

Detail: Jasmin checks it in the compiler; HACL* proves secret independence in F*; AWS-LC's assembly is verified constant-time. Functional correctness proofs do not imply it: the KyberSlash timing bugs were in code that computed the right answer.

Source page: https://sorryfree.com/glossary/constant-time-verification/
Compiled by: sorryfree editors (https://sorryfree.com/about/)
Last reviewed: 2026-09-13