multiversx-constant-time

SKILL.md

Verify that cryptographic secrets are handled in constant time to prevent timing attacks. This skill is essential when reviewing any code that processes sensitive data where execution time could leak information.

The Threat Model An attacker measures how long operations take to infer secret values:

Use VM Cryptographic Functions BEST PRACTICE: Always prefer built-in VM crypto operations:

Überprüfen Sie, ob kryptografische Vorgänge in konstanter Zeit ausgeführt werden, um Timing-Angriffe zu verhindern. Zur Prüfung benutzerdefinierter Krypto-Implementierungen, geheimer Vergleiche oder sicherheitsrelevanter Algorithmen in Smart Contracts. Quelle: multiversx/mx-ai-skills.

Original anzeigen