timing-attack

No longer maintained. Timing attacks on a browsers cache to try to predict websites/subreddits that have been viewed

Timing attack proof-of-concept in Go

Demo of API key cracking using a timing attack

An Apigee custom policy implemented in Java that introduces a delay in processing.

🔐 Isomorphic constant-time string and buffer comparison to prevent timing attacks.

Spectre attack variant 1 is used here to extract an image data buffer from a program. The output image data is then decoded and median filters are applied to remove the hot pixels in the output image. Here I have included files for RGB and base64 format.

Time Trial - A tool for performing feasibility analyses of timing attacks

Timing attack for pin

Deliberately vulnerable HTTP server with ARM64 stack exploitation, return address hijacking, and timing side-channel attack — Shenkar security engineering course

Verificación de webhooks entrantes en tiempo constante: secreto en claro o firma HMAC-SHA256. Cero dependencias.

Implementation of timing and power analysis side-channel attacks on AES encryption with effective countermeasures and security analysis.

Constant-time secret equality over any length or encoding, with an explicit report of what still leaks

Constant-time ChaCha20-Poly1305 AEAD in C99 with a timing side-channel validator

Browser-based bcrypt deep-dive — anatomy, cost factor benchmarking, timing-safe verification, and a real-world breach simulation. Part of the crypto-lab suite.

Browser-based timing side-channel attack demo — string comparison leakage, HMAC verification timing, RSA private key bit leakage, and cache-timing attacks with real performance.now() measurements and constant-time defenses. No backends. No simulated timing.

Browser-based HQC timing side-channel — non-constant-time BCH decoder leaks the error weight, a chosen-ciphertext timing oracle recovers the key, constant-time decoding shuts it down. Faithful to the documented 2020 attack.

Browser-based timing side-channel demo — recover a hidden secret one byte at a time from an early-exit comparison, then watch a constant-time compare flatten the leak. Real timing measurements. No backend.

Browser-based lattice PQC implementation attack demo — NTT power analysis (ML-KEM CPA), rejection sampling fault bypass (ML-DSA key recovery), KyberSlash timing side-channel, faulty KECCAK seed injection. Mathematical security ≠ implementation security. No backends. Simulated attacks.

Detect timing attacks, cache timing, and branch prediction vulnerabilities