Browser-based Boolean masking demo — first-order masked AES-128 with S-box table recomputation, attacked by CPA and a second-order centered-product distinguisher (Brier-Clavier-Olivier 2004). Unprotected AES falls in a few hundred traces, masking flattens first-order CPA, and the second order pulls the byte back out.
cryptography aes-128 dpa power-analysis hamming-weight cpa crypto-lab masked-aes countermeasures side-channel-attack boolean-masking second-order-attack
-
Updated
Aug 22, 2026 - TypeScript