AI Blocks › Keep your code secure
Timing leak checker
Point it at crypto code. Get a list of spots where run time could leak secret keys, with fixes.
Timing leak checker is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · CC BY 4.0 licence · Made by sickn33 · Level: expert · Thinking: high
Made by sickn33. See the original on GitHub; we copied it as it is, with its licence.
What it does
Spot places in encryption or signing code where the time it takes could give away a secret key. Attackers can measure small time differences, so a clean-looking function can still be broken. The skill reads your cryptographic code and flags operations whose speed depends on secret values. Examples include division or remainder on secret data, branches that depend on a key, and early exits in comparisons. It checks sign, verify, encrypt, decrypt and key derivation functions first, and for each flagged spot explains why it leaks and offers a constant-time fix. It does not apply to ordinary business code or to high-level library calls that already handle timing.
You give it
- Your cryptographic source code
- The language and compiler
- Which values are secret
- Target platform (optional)
You get
- A list of risky operations
- Why each one leaks
- Constant-time rewrites
- Functions marked safe
Use it when
- You wrote your own signing or encryption routine and want a review.
- You use division or modulo on secret numbers.
- Someone mentioned KyberSlash or side-channel attacks.
- You compare tokens or hashes and worry about early exit.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can run code and read your project files.