tacoq

Timing anomalies and anomaly freedom in Coq