{"id":"https://openalex.org/W7155041838","doi":"https://doi.org/10.48550/arxiv.2604.16832","title":"DALC-CT: Dynamic Analysis of Low-Level Code Traces for Constant-Time Verification","display_name":"DALC-CT: Dynamic Analysis of Low-Level Code Traces for Constant-Time Verification","publication_year":2026,"publication_date":"2026-04-18","ids":{"openalex":"https://openalex.org/W7155041838","doi":"https://doi.org/10.48550/arxiv.2604.16832"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.16832","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.16832","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.16832","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114654076","display_name":"Nges Brian Njungle","orcid":"https://orcid.org/0009-0006-3393-6851"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Njungle, Nges Brian","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5118138789","display_name":"Edwin P. Kayang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kayang, Edwin P.","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134167622","display_name":"Mishel J. Paul","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Paul, Mishel J.","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5069200437","display_name":"Michel A. Kinsy","orcid":"https://orcid.org/0000-0002-1432-6939"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kinsy, Michel A.","raw_affiliation_strings":[],"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5114654076"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6518999934196472,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6518999934196472,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.30059999227523804,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.018300000578165054,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.6233999729156494},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5446000099182129},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.5246999859809875},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.46070000529289246},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.43939998745918274},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4381999969482422},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.4172999858856201},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4090999960899353},{"id":"https://openalex.org/keywords/modular-exponentiation","display_name":"Modular exponentiation","score":0.4090000092983246},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.40799999237060547}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8733999729156494},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.6233999729156494},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5446000099182129},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.5246999859809875},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.46070000529289246},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.43939998745918274},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4381999969482422},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.4172999858856201},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4090999960899353},{"id":"https://openalex.org/C152763109","wikidata":"https://www.wikidata.org/wiki/Q1228841","display_name":"Modular exponentiation","level":4,"score":0.4090000092983246},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.40799999237060547},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3953999876976013},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.3937999904155731},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.38940000534057617},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.38909998536109924},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.37380000948905945},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3707999885082245},{"id":"https://openalex.org/C81539297","wikidata":"https://www.wikidata.org/wiki/Q33456","display_name":"Exponentiation","level":2,"score":0.3569999933242798},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.34700000286102295},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.3131999969482422},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3001999855041504},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.29600000381469727},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.2955000102519989},{"id":"https://openalex.org/C2777168461","wikidata":"https://www.wikidata.org/wiki/Q42196253","display_name":"Set operations","level":3,"score":0.2847999930381775},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.28349998593330383},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.27790001034736633},{"id":"https://openalex.org/C195701839","wikidata":"https://www.wikidata.org/wiki/Q4008398","display_name":"Partial evaluation","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.27160000801086426},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.26820001006126404},{"id":"https://openalex.org/C2989134064","wikidata":"https://www.wikidata.org/wiki/Q288510","display_name":"Execution time","level":2,"score":0.2635999917984009},{"id":"https://openalex.org/C62460635","wikidata":"https://www.wikidata.org/wiki/Q5508853","display_name":"Functional verification","level":3,"score":0.2597000002861023},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.2590999901294708},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.2567000091075897},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.16832","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.16832","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.16832","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.16832","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5430024266242981}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Timing":[0],"side-channel":[1],"attacks":[2],"exploit":[3],"variations":[4,161],"in":[5,26,87,162],"program":[6],"execution":[7,68,106,142,223],"time":[8],"to":[9,18,38,61,63,93,103,115,236],"recover":[10],"sensitive":[11,41,56,114],"information.":[12],"Cryptographic":[13],"implementations":[14,51,96],"are":[15,58,112],"especially":[16],"vulnerable":[17],"these":[19],"attacks,":[20],"since":[21],"even":[22,121],"small":[23],"timing":[24],"differences":[25],"operations":[27],"such":[28,43],"as":[29,44],"modular":[30],"exponentiation":[31],"or":[32],"key":[33],"comparisons":[34,229],"can":[35],"be":[36],"exploited":[37],"extract":[39],"highly":[40,113],"information,":[42],"secret":[45,74],"keys.":[46],"To":[47],"mitigate":[48],"this":[49,125,196],"threat,":[50],"of":[52,81,140,171,193,204,214,224,241],"programs":[53,82,119,135,194,225],"that":[54,67,100,219],"handle":[55],"information":[57],"often":[59,101],"expected":[60],"adhere":[62],"constant-time":[64,79,95,134,178,191,206,239],"principles,":[65],"ensuring":[66],"behavior":[69],"does":[70],"not":[71],"depend":[72],"on":[73,98,137,201],"inputs.":[75],"However,":[76],"validating":[77],"the":[78,163,177,190,221,238],"property":[80,240],"remains":[83],"a":[84,129,174,202,211,231],"major":[85],"challenge":[86],"cryptography":[88],"development.":[89],"Formal":[90],"method":[91,145],"approaches":[92],"verify":[94,237],"rely":[97],"abstractions":[99],"fail":[102],"capture":[104],"real":[105],"behavior,":[107],"while":[108],"timing-based":[109],"measurement":[110],"techniques":[111],"noise":[116],"from":[117,176],"other":[118],"and":[120,157,180,207,233],"hardware":[122],"environments.":[123],"In":[124],"work,":[126],"we":[127],"propose":[128],"novel":[130],"approach":[131],"for":[132,153,167,189],"verifying":[133],"based":[136],"dynamic":[138],"analysis":[139],"low-level":[141],"traces.":[143],"Our":[144,216],"measures":[146],"instruction":[147,164,227],"sequences":[148],"across":[149],"multiple":[150],"input":[151],"values":[152],"any":[154,168],"given":[155,169],"binary":[156],"targeted":[158],"function.":[159],"Any":[160],"mix":[165],"distribution":[166],"pair":[170],"traces":[172],"indicate":[173],"deviation":[175],"principle":[179],"behavior.":[181],"We":[182,198],"developed":[183],"an":[184],"open-source":[185],"tool":[186],"called":[187],"DALC-CT,":[188],"verification":[192],"using":[195],"approach.":[197],"evaluated":[199],"it":[200],"set":[203],"well-known":[205],"non-constant-time":[208],"examples,":[209],"achieving":[210],"perfect":[212],"detection":[213],"issues.":[215],"results":[217],"demonstrate":[218],"analyzing":[220],"logical":[222],"via":[226],"trace":[228],"provides":[230],"lightweight":[232],"reliable":[234],"way":[235],"programs.":[242]},"counts_by_year":[],"updated_date":"2026-04-22T06:07:44.442478","created_date":"2026-04-22T00:00:00"}