I’m working on a demonstration of a Dafny proof that an operation takes constant time, or at least a fairly constant number of machine cycles. It’s the kind of thing you need when you’re trying to prevent side-channel-attacks. Here’s what I have so far: