ChipWhisperer - the complete open-source toolchain for side-channel power analysis and glitching attacks

A practical attack framework for precise enclave execution control

BUSted!!! Microarchitectural Side-Channel Attacks on the MCU Bus Interconnect

Project contains code that demonstrates how Meltdown and Spectre V1/V4 vulnerabilities work and shows the differences between them

Radio Side-Channels in Mixed-Signal Chips

Crypto Side Channel Analysis

This repository contains several applications, demonstrating the Meltdown bug.

Introspecting cache side-channels.

Detecting L1D cache hits/misses via controlled memory race conditions.

Nemesis: Studying microarchitectural timing leaks in rudimentary CPU interrupt logic

SADDNS: Side Channel Based DNS Cache Poisoning Attack

SideLine is a novel power side-channel vector based on delay-line components widely implemented in high-end SoC.

Branchboozle exposes a hidden 3-bit PHT in modern BPUs.

Pythia is a set of RDMA-based remote side-channel attacks. USENIX Security 2019.

A bare metal environment for the Nexus 6 with implementations for several cache side-channel attacks.

Tutorial: Uncovering and mitigating side-channel leakage in Intel SGX enclaves

Tools to exercise the Linux kernel mitigation for CVE-2018-3639 (aka Variant 4) using the Speculative Store Bypass Disable (SSBD) feature of x86 processors

Telling your secrets without page faults: Stealthy page table-based attacks on enclaved execution