To run the demo, use following steps.
- Obtain a certificate for the domain on which you want to run the demo
- Place
fullchain.pemandprivkey.pemin thedemo/certsfolder. Also place assl-dhparams.pemfile there (generate via e.g.openssl dhparam -out ssl-dhparams.pem 4096) - In
demo, rundocker-compose up --build
The attack can then be run by first updating demo-attack/attack.py with the targeted server, and then simply running python attack.py (with Python version 3.7.x or higher, with hyper-h2 installed: pip install h2).
The h2time.py file originates from the original Timeless Timing Attack repository.