usernamefor

> but I'm not aware of a general way of proving no information leakage.

Cadence has a tool [1] to do this, but I'm not sure it would work for timing leaks.

[1] https://www.cadence.com/content/cadence-www/global/en_US/hom...