Add comment about timing attacks.