Struct TimingValidator 

pub struct TimingValidator { /* private fields */ }

Timing attack prevention validator

This validator provides utilities to prevent timing attacks by ensuring constant-time operations where necessary.

Implementations

impl TimingValidator

pub fn new() -> Result<Self>

Create a new timing validator

Returns

A new instance of TimingValidator with timing attack prevention enabled.

Errors

Returns an error if the validator fails to initialize.

pub fn constant_time_compare(&self, a: &[u8], b: &[u8]) -> bool

Perform constant-time comparison of two byte slices

This function performs a constant-time comparison to prevent timing attacks. It returns true if the slices are equal, false otherwise.

Arguments

• a - First byte slice
• b - Second byte slice

Returns

Returns true if the slices are equal, false otherwise. The comparison is performed in constant time to prevent timing attacks.

pub fn constant_time_select<T: ConditionallySelectable>( &self, choice: bool, a: T, b: T, ) -> T

Constant-time selection between two values

Returns a if choice is true, b if choice is false. Selection is branchless: a full-width mask is derived from choice via subtle::ConditionallySelectable (no secret-dependent branch). Callers must derive choice itself in constant time.

Arguments

• choice - Boolean choice
• a - First value
• b - Second value

Returns

Returns the selected value in constant time.

pub fn constant_time_assign<T: ConditionallySelectable>( &self, choice: bool, dst: &mut T, src: T, )

Constant-time conditional assignment

Assigns src to dst if choice is true, otherwise leaves dst unchanged. Branchless: dispatches to subtle::ConditionallySelectable::conditional_assign, deriving a full-width mask from choice instead of branching. Callers must derive choice itself in constant time.

Arguments

• choice - Boolean choice
• dst - Destination to potentially assign to
• src - Source value to assign

pub fn constant_time_copy(&self, choice: bool, dst: &mut [u8], src: &[u8])

Constant-time conditional copy

Copies src to dst if choice is true, otherwise leaves dst unchanged. Branchless: each byte is assigned via subtle::ConditionallySelectable::conditional_assign, deriving a full-width mask from choice instead of branching. Callers must derive choice itself in constant time.

Arguments

• choice - Boolean choice
• dst - Destination slice
• src - Source slice

Panics

Panics if the slices have different lengths.

pub fn validate_timing_safety(&self, operation: &str) -> Result<()>

Validate that an operation is timing-safe

This function can be used to validate that operations are performed in constant time to prevent timing attacks.

Arguments

• operation - Name of the operation being validated

Returns

Returns Ok(()) if timing validation is enabled and the operation is considered safe, or an error if timing validation fails.

pub fn set_timing_validation(&mut self, enabled: bool)

Enable or disable timing validation

Arguments

• enabled - Whether to enable timing validation

pub fn is_timing_validation_enabled(&self) -> bool

Check if timing validation is enabled

Returns

Returns true if timing validation is enabled, false otherwise.

Trait Implementations

impl Clone for TimingValidator

fn clone(&self) -> TimingValidator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.