ppad
substratum identifies timing vulnerabilities
statically, from the compiled assembly, so you can know
exactly what the machine is running.
-
Deterministic non-constant-time analysis.
Prove invariants and flag variable-time instructions and
secret-dependent branches & addresses, statically.
-
Supports major ISAs and runtimes.
Analyze aarch64, x86-64, and riscv64 procured from either
compilation or disassembly. Awareness of e.g. Rust, Go,
V8 JS/WASM, and GHC runtime patterns limits runtime-specific
false positives.
-
Extreme signal distillation.
Work only with structure that matters, compressing context for
agent reasoning and judgment by orders of magnitude.
substratum has been used to analyze hundreds
of projects across varied cryptography corpora, and is used to
help verify the ppad
cryptography stack.
We use substratum to perform our static constant-time
analysis. Want to know more? Merely get in touch.