System-Level Non-interference of Constant-Time Cryptography. Part I: Model
Wait a Minute! A fast, Cross-VM Attack on AES