Crypto over the network

ringzer0ctf

Task: remote password service that reports its own processing time ('Server take X seconds') on each wrong attempt — a timing oracle. Solution: discover the length-8 slow path, then recover the password byte-by-byte using an INVERTED timing leak (correct prefix = ~1 ms faster) by taking the MIN time over samples on a single serial connection.