Browser-based educational simulation of the KyberSlash timing attacks on ML-KEM (Kyber) — secret-dependent division in poly_tomsg and poly_compress. Based on the CHES 2025 Best Paper. Vulnerable code, Barrett-reduction fix, and live attack simulation.
MITTypeScriptbarrett-reductionconstant-timecryptographyiacrimplementation-securitykyberkyberslashml-kem
systemslibrarian.github.io/crypto-lab-kyberslash