vestigia

Detect where execution depends on secrets.
git clone git://git.ppad.tech/vestigia.git
Log | Files | Refs | README | LICENSE

commit ec72f09361d8f1d78cb7de3dc7b203720ce544ac
parent 2e498fe4ab06c7d1b09e53c671056b5919da6ae7
Author: Jared Tobin <jared@jtobin.io>
Date:   Tue, 20 Oct 2026 13:21:12 +0400

readme: censor linked

Diffstat:
MREADME.md | 12++++++------
1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md @@ -7,13 +7,13 @@ secret, by running it. vestigia executes a harness, reports every instruction that branched on the secret or computed an address from it, and names each by -function and source line. It needs no timing statistics, is exact on -the paths executed, and judges the machine code as built. +function and source line. -A clean report is not a proof of constant-time execution. It covers -only the paths the harness drove, and the discipline rather than the -hardware: a leak through a prefetcher or a variable-latency -multiplier is for a timing instrument such as ppad's censor. +A clean report is not a proof of constant-time execution. It +covers only the paths the harness drove, and the discipline +rather than the hardware: a leak through a prefetcher or a +variable-latency multiplier is for a timing instrument such as ppad's +[censor](https://github.com/ppad-tech/censor). ## Usage