timing-attack

No longer maintained. Timing attacks on a browsers cache to try to predict websites/subreddits that have been viewed

Timing attack proof-of-concept in Go

Demo of API key cracking using a timing attack

An Apigee custom policy implemented in Java that introduces a delay in processing.

🔐 Isomorphic constant-time string and buffer comparison to prevent timing attacks.

Spectre attack variant 1 is used here to extract an image data buffer from a program. The output image data is then decoded and median filters are applied to remove the hot pixels in the output image. Here I have included files for RGB and base64 format.

Time Trial - A tool for performing feasibility analyses of timing attacks

Timing attack for pin

RSA timing side-channel CTF challenge — Kocher-style Montgomery-reduction leak, teaching-scale (16-bit). Solution included, encrypted with the recovered secret as passphrase.

Verificación de webhooks entrantes en tiempo constante: secreto en claro o firma HMAC-SHA256. Cero dependencias.

Deliberately vulnerable HTTP server with ARM64 stack exploitation, return address hijacking, and timing side-channel attack — Shenkar security engineering course

Constant-time secret equality over any length or encoding, with an explicit report of what still leaks

Implementation of timing and power analysis side-channel attacks on AES encryption with effective countermeasures and security analysis.

Educational TCP timing side-channel demo using naive byte-by-byte password comparison.

Research collection of side-channel analysis: timing and resource consumption simulations.

Constant-time ChaCha20-Poly1305 AEAD in C99 with a timing side-channel validator

Browser-based timing side-channel demo — recover a hidden secret one byte at a time from an early-exit comparison, then watch a constant-time compare flatten the leak. Real timing measurements. No backend.

Browser-based bcrypt deep-dive — anatomy, cost factor benchmarking, timing-safe verification, and a real-world breach simulation. Part of the crypto-lab suite.

Browser-based timing side-channel attack demo — string comparison leakage, HMAC verification timing, RSA private key bit leakage, and cache-timing attacks with real performance.now() measurements and constant-time defenses. No backends. No simulated timing.