It seems like it’d be easy enough to test whether or not something was vulnerable to timing attacks.

But maybe there’s other vulnerabilities to be considered too and hard to have a suite which reliably tests for them all.