https://github.com/systemslibrarian/crypto-lab-hqc-timing-break
Browser demo of the first cache-timing full-decryption oracle attack on post-quantum HQC (Dong & Guo, IACR 2026/693) — showing how Clang -O3 silently rewrites constant-time Reed-Muller decoding into secret-dependent branches. Real HQC math, deterministic leak model, Soft-ISD key recovery.
https://github.com/systemslibrarian/crypto-lab-hqc-timing-break
cache-timing-attack code-based-cryptography compiler-vulnerability constant-time cryptanalysis crypto-lab cryptography flush-reload hqc information-set-decoding kem nist-pqc post-quantum-cryptography reed-muller-code side-channel-attack soft-isd
Last synced: 17 days ago
JSON representation
Browser demo of the first cache-timing full-decryption oracle attack on post-quantum HQC (Dong & Guo, IACR 2026/693) — showing how Clang -O3 silently rewrites constant-time Reed-Muller decoding into secret-dependent branches. Real HQC math, deterministic leak model, Soft-ISD key recovery.
- Host: GitHub
- URL: https://github.com/systemslibrarian/crypto-lab-hqc-timing-break
- Owner: systemslibrarian
- Created: 2026-04-19T03:28:10.000Z (2 months ago)
- Default Branch: main
- Last Pushed: 2026-04-19T04:06:27.000Z (2 months ago)
- Last Synced: 2026-04-19T06:13:33.039Z (2 months ago)
- Topics: cache-timing-attack, code-based-cryptography, compiler-vulnerability, constant-time, cryptanalysis, crypto-lab, cryptography, flush-reload, hqc, information-set-decoding, kem, nist-pqc, post-quantum-cryptography, reed-muller-code, side-channel-attack, soft-isd
- Language: TypeScript
- Homepage: https://systemslibrarian.github.io/crypto-lab-hqc-timing-break/
- Size: 92.8 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# crypto-lab-hqc-timing-break
## What It Is
This demo is a browser implementation of the Paillier cryptosystem with additive homomorphism, implemented with BigInt arithmetic in TypeScript. It demonstrates public-key encryption and decryption, ciphertext addition, public plaintext addition, public scalar multiplication, and re-randomization without decrypting intermediate values. The core problem it solves is private summation: computing totals while keeping individual inputs hidden. Its security model is asymmetric cryptography based on the decisional composite residuosity assumption, with toy-size parameters included only for education.
## When to Use It
- Private vote tallying where each vote is encrypted as 0/1 and only the final sum is decrypted, because Paillier supports ciphertext aggregation by multiplication.
- Multi-party count aggregation across organizations, because each contributor can encrypt locally and share only ciphertexts.
- Public weighted sum workflows in analytics, because ciphertexts can be raised to public weights and combined homomorphically.
- Teaching additive-only homomorphism in applied cryptography courses, because the demo exposes both cryptographic operations and verification outputs.
- Do not use this scheme for bulk file encryption, because Paillier ciphertexts are large and the primitive is designed for small numeric messages and aggregation.
## Live Demo
https://systemslibrarian.github.io/crypto-lab-hqc-timing-break/
In the live page you can generate keypairs at multiple key sizes, then encrypt and decrypt values directly in the browser. You can also run homomorphic operations to verify that decrypted results match expected sums and scalar products. Controls include key size selection, message input, homomorphic operation inputs, voting inputs, and hospital aggregation inputs.
## How to Run Locally
```bash
git clone https://github.com/systemslibrarian/crypto-lab-hqc-timing-break
cd crypto-lab-hqc-timing-break
npm install
npm run dev
```
No environment variables are required.
## Part of the Crypto-Lab Suite
One of 60+ live browser demos at [systemslibrarian.github.io/crypto-lab](https://systemslibrarian.github.io/crypto-lab/) — spanning Atbash (600 BCE) through NIST FIPS 203/204/205 (2024).
---
*"Whether you eat or drink, or whatever you do, do all to the glory of God." — 1 Corinthians 10:31*