Home

Offensive AI Security› Reasoning-Trace Security›Reasoning-Budget Side Channels: Token-Count and Latency as an Observable Oracle

In this series

Reasoning-Trace Security

1What a Reasoning Trace Is and Is Not: Faithfulness, Post-Hoc Rationalization, and the Monitorability AssumptionResearch
2Injecting the Scratchpad: When Retrieved or Tool-Returned Content Steers the Reasoning, Not Just the AnswerResearch
3The Trace as Exfiltration Channel: Encoded Reasoning and Steganographic ScratchpadsResearch
4Reasoning-Budget Side Channels: Token-Count and Latency as an Observable OracleResearch
5Defenses That Don't Trust the Trace: Faithfulness Testing, Trace Isolation, and Monitor LimitsResearch

HostExpert

Murali Chillakuru

Press play to begin the conversation.

0:00

16:03

Reasoning-Trace Security · 4 / 5

Reasoning-Budget Side Channels: Token-Count and Latency as an Observable Oracle