fixed attacks and timing