Are timing vulnerabilities discoverable by formal verification?