Атаки по времени

The "Stop-Early" Leak

In many languages, string comparison "abc" == "abd" stops at the first mismatch. While efficient, this leaks information. Comparing "p" vs "x" is faster than comparing "pass" vs "pasx". An attacker can use these micro-millisecond differences to guess secrets character by character.