Constant-time source reviews

These 119 notes inspect representative reference paths for branches, variable work, and memory accesses controlled by secret data. Each note states its scope and evidence. A note with no finding is a limited review, not a constant-time certification. A source trace alone does not establish a remote timing attack or key recovery; see the linked reports for finding-specific impact and status.

Some reviews cite submission source files that are not bundled in the compact public harness. To inspect them, download the official archive with IDS=<id> ./download.sh, verify its digest against SOURCE_ARCHIVES.md, and run ./extract.sh <id> in a harness checkout.

Signatures

sign-01 sign-02 sign-03 sign-04 sign-05 sign-06 sign-07 sign-08 sign-09 sign-10 sign-11 sign-12 sign-13 sign-14 sign-15 sign-16 sign-17 sign-18 sign-19 sign-20 sign-21 sign-22 sign-23 sign-24 sign-25 sign-26 sign-27 sign-28 sign-29 sign-30 sign-31 sign-32 sign-33 sign-34

KEMs

kem-01 kem-02 kem-03 kem-04 kem-05 kem-06 kem-07 kem-08 kem-09 kem-10 kem-11 kem-12 kem-13 kem-14 kem-15 kem-16 kem-17 kem-18 kem-19 kem-20 kem-21 kem-22 kem-23 kem-24 kem-25 kem-26 kem-27 kem-28 kem-29 kem-30 kem-31 kem-32 kem-33 kem-34 kem-35 kem-36 kem-37 kem-38 kem-39 kem-40 kem-41

Key exchange

kex-01 kex-02 kex-03 kex-04 kex-05 kex-06 kex-07 kex-08 kex-09

Hash functions

hash-01 hash-02 hash-03 hash-04 hash-05 hash-06 hash-07 hash-08 hash-09 hash-10 hash-11 hash-12 hash-13 hash-14 hash-15 hash-16 hash-17 hash-18 hash-19 hash-20 hash-21 hash-22 hash-23 hash-24 hash-25 hash-26 hash-27 hash-28 hash-29 hash-30 hash-31 hash-32 hash-33 hash-34 hash-35