timing-attack

No longer maintained. Timing attacks on a browsers cache to try to predict websites/subreddits that have been viewed

Timing attack proof-of-concept in Go

Demo of API key cracking using a timing attack

An Apigee custom policy implemented in Java that introduces a delay in processing.

🔐 Isomorphic constant-time string and buffer comparison to prevent timing attacks.

Spectre attack variant 1 is used here to extract an image data buffer from a program. The output image data is then decoded and median filters are applied to remove the hot pixels in the output image. Here I have included files for RGB and base64 format.

Time Trial - A tool for performing feasibility analyses of timing attacks

Timing attack for pin

RSA timing side-channel CTF challenge — Kocher-style Montgomery-reduction leak, teaching-scale (16-bit). Solution included, encrypted with the recovered secret as passphrase.

Deliberately vulnerable HTTP server with ARM64 stack exploitation, return address hijacking, and timing side-channel attack — Shenkar security engineering course

Implementation of timing and power analysis side-channel attacks on AES encryption with effective countermeasures and security analysis.

Verificación de webhooks entrantes en tiempo constante: secreto en claro o firma HMAC-SHA256. Cero dependencias.

Constant-time secret equality over any length or encoding, with an explicit report of what still leaks

Research collection of side-channel analysis: timing and resource consumption simulations.

Constant-time ChaCha20-Poly1305 AEAD in C99 with a timing side-channel validator

Detect firmware rootkits by measuring time. CPU cycle-accurate timing attestation for x86 and ARM — no hardware required.

Browser-based educational simulation of the KyberSlash timing attacks on ML-KEM (Kyber) — secret-dependent division in poly_tomsg and poly_compress. Based on the CHES 2025 Best Paper. Vulnerable code, Barrett-reduction fix, and live attack simulation.

Browser-based timing side-channel demo — recover a hidden secret one byte at a time from an early-exit comparison, then watch a constant-time compare flatten the leak. Real timing measurements. No backend.

Browser-based HQC timing side-channel — non-constant-time BCH decoder leaks the error weight, a chosen-ciphertext timing oracle recovers the key, constant-time decoding shuts it down. Faithful to the documented 2020 attack.