Low-cost solutions for preventing simple side-channel analysis: side-channel atomicity
Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems