Timing Attack
A side-channel attack in which an attacker infers the contents of keys or signatures by measuring minute differences in the execution time of cryptographic operations, typically exploiting vulnerabilities in non-constant-time comparison functions.
Timeline (last 90 days)
Standard string equality comparison (===) checks character by character and returns false immediately upon finding a mismatch, so an attacker can guess the correct signature character by character by measuring tiny differences in response time (on the microsecond level).
A timing attack is a side-channel attack that infers sensitive information by measuring the time consumed by operations.
All Facts (2)
Standard string equality comparison (===) checks character by character and returns false immediately upon finding a mismatch, so an attacker can guess the correct signature character by character by measuring tiny differences in response time (on the microsecond level).
50%UnverifiedA timing attack is a side-channel attack that infers sensitive information by measuring the time consumed by operations.
50%