No longer maintained. Timing attacks on a browsers cache to try to predict websites/subreddits that have been viewed

Timing attack proof-of-concept in Go

Demo of API key cracking using a timing attack

An Apigee custom policy implemented in Java that introduces a delay in processing.

🔐 Isomorphic constant-time string and buffer comparison to prevent timing attacks.

Spectre attack variant 1 is used here to extract an image data buffer from a program. The output image data is then decoded and median filters are applied to remove the hot pixels in the output image. Here I have included files for RGB and base64 format.

Time Trial - A tool for performing feasibility analyses of timing attacks

Timing attack for pin

Browser-based timing side-channel attack demo — string comparison leakage, HMAC verification timing, RSA private key bit leakage, and cache-timing attacks with real performance.now() measurements and constant-time defenses. No backends. No simulated timing.

Browser-based bcrypt deep-dive — anatomy, cost factor benchmarking, timing-safe verification, and a real-world breach simulation. Part of the crypto-lab suite.

Implementation of timing and power analysis side-channel attacks on AES encryption with effective countermeasures and security analysis.

Browser-based lattice PQC implementation attack demo — NTT power analysis (ML-KEM CPA), rejection sampling fault bypass (ML-DSA key recovery), KyberSlash timing side-channel, faulty KECCAK seed injection. Mathematical security ≠ implementation security. No backends. Simulated attacks.

Detect timing attacks, cache timing, and branch prediction vulnerabilities

Browser-based MAC demo — HMAC, CMAC, Poly1305, and GHASH compared with live length extension attack, timing attack, and nonce reuse demonstrations. Real WebCrypto operations. No backends. No simulated math.

Constant-time ChaCha20-Poly1305 AEAD in C99 with a timing side-channel validator

Detect firmware rootkits by measuring time. CPU cycle-accurate timing attestation for x86 and ARM — no hardware required.

Browser-based educational simulation of the KyberSlash timing attacks on ML-KEM (Kyber) — secret-dependent division in poly_tomsg and poly_compress. Based on the CHES 2025 Best Paper. Vulnerable code, Barrett-reduction fix, and live attack simulation.