Embrace paranoia.

ppad censor detects timing leaks down to the microarchitectural level, so that the machine cannot hide any secrets from you.

• Extreme power and precision.
  Rapidly detect subtle timing discrepancies, e.g. mean shifts, shape changes, and rare slow paths.
• Anytime-valid inference.
  False positive rates never exceed your chosen bound, no matter when or how often measurement is inspected, ceased, or resumed.
• Meter and target-generic.
  Measure targets for arbitrary runtimes (e.g. Rust, Go, Haskell) by wall-clock time, instruction counts, processor clock ticks, and more.

censor can detect the timing asymmetry introduced by a single correctly-predicted branch almost instantly, and can bound undetected effects to within fractions of a nanosecond. It is used to help verify the ppad cryptography stack.

We use censor to perform our dynamic constant-time analysis. Want to know more? Merely get in touch.