tokens: Also , suggested using a residual number system ( RNS ) and leak resistant arithmetic ( LRA ) to prevent both differential faults ( comparing the difference between correct and fault results ) and m safe - error ( using block memory errors ) that are intended to retrieve bits from ephemeral .