Start verifying that code which should be constant-time really is.