chosen-ciphertext-attack

Python implementation of RSA cryptosystem showing the encryption and decryption algorithms as well as the possible attacks.

A separator oracle can be used to decrypt a ciphertext encrypted with AES in CTR mode (adaptive chosen ciphertext attack).

A testing tool for attacks against cryptography usage in implementations of OPC UA (GNU GPLv3-licensed)

Browser-based authenticated key exchange lab — Boneh–Shoup AKE1, AKE2eg, AKE4eg and AKE5 over ristretto255, Ed25519 and AES-GCM side by side, with six removable protections each broken by a live wire attack that fails once restored, and an authenticated AKE1 session that a later long-term key leak still decrypts

Browser-based quadratic-residue lab — Tonelli–Shanks roots, Goldwasser–Micali bit encryption, and four-root Rabin side by side, with a CRT square-or-pseudosquare game, XOR malleability, a real 2048-bit modulus, and a root oracle that gives up N's factors from a single answer