Timing Side-Channel on 4-Digit PIN
crypto · medium · +45 XP
Target
POST /api/lab/timing-pin-101/login body {pin} → {ok, elapsed_us} (compares byte-by-byte)
POST /api/lab/timing-pin-101/submit body {pin}
Goal: each correct prefix adds ~50µs. Try 0xxx, 1xxx, …, 9xxx; the slowest one's first digit is correct. Repeat for digits 2–4. Submit the recovered PIN.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/timing-pin-101/
// reuse on the cli
// submit flag
// no solves yet