Gravar-mail: Verifying constant-time implementations