Timing Oracle
300 points · 0 solved
An API compares your token to the real one character by character and returns early on the first mismatch. Someone measured median response times (µs) for each hex digit at each position, with the correct prefix already in place. The flag is ss{<token>}.
pos 1: 0=1236 1=1227 2=1223 3=1231 4=1228 5=1273 6=1232 7=1225 8=1236 9=1222 a=1235 b=1233 c=1225 d=1227 e=1230 f=1226
pos 2: 0=1265 1=1276 2=1266 3=1274 4=1269 5=1277 6=1272 7=1265 8=1267 9=1265 a=1265 b=1265 c=1271 d=1265 e=1314 f=1267
pos 3: 0=1309 1=1311 2=1313 3=1313 4=1311 5=1311 6=1317 7=1309 8=1310 9=1314 a=1306 b=1308 c=1352 d=1310 e=1313 f=1307
pos 4: 0=1399 1=1349 2=1359 3=1355 4=1351 5=1354 6=1358 7=1359 8=1362 9=1359 a=1359 b=1360 c=1350 d=1348 e=1359 f=1358
pos 5: 0=1390 1=1402 2=1398 3=1390 4=1401 5=1394 6=1401 7=1404 8=1392 9=1404 a=1396 b=1391 c=1399 d=1431 e=1392 f=1403
pos 6: 0=1437 1=1435 2=1446 3=1432 4=1437 5=1437 6=1439 7=1432 8=1446 9=1446 a=1444 b=1436 c=1435 d=1441 e=1481 f=1438
pos 7: 0=1478 1=1474 2=1477 3=1483 4=1520 5=1483 6=1488 7=1474 8=1481 9=1476 a=1488 b=1478 c=1481 d=1481 e=1475 f=1481
pos 8: 0=1524 1=1516 2=1558 3=1530 4=1522 5=1522 6=1517 7=1528 8=1516 9=1525 a=1518 b=1518 c=1527 d=1516 e=1524 f=1516Hints0/2