This wrapper aims on prevention of microarchitectural attacks. This code was originally a part of ChromeZero.
The wrappers support the following behaviour:
- Polyfill: Completely eliminates the paralelism.
- Randomly slow messages: Add noise to the
postMessage
method execution.
See also: Lipp, M., Gruss, D., Schwarz, M., Bidner, D., Maurice, C. et al. Practical Keystroke Timing Attacks in Sandboxed JavaScript. In:. August 2017, s. 191–209. ISBN 978-3-319-66398-2.
See also: Schwarz, M., Lipp, M. a Gruss, D. JavaScript Zero: Real JavaScript and Zero Side-Channel Attacks. NDSS'18.
See also: https://www.fit.vut.cz/study/thesis/22374/?year=0&sup=Pol%C4%8D%C3%A1k