An implementation of the second-order Differential Power Analysis (DPA) attack, suited for microcontrollers running AES-128 on microcontrollers leaking Hamming Weight power models.