Timing Attack
A side-channel attack that exploits time differences in cryptographic comparisons to guess secret values.
How it works
A side-channel attack that exploits time differences in cryptographic comparisons to guess secret values.
In WordPress
Use hash_equals() or timing-safe comparison for token/password verification. WordPress nonce verification is timing-safe.
Related terms
WP HealthKit checks for Timing Attack-related vulnerabilities automatically
Run a Free Audit