Correlation Power analysis with a leakage model
An Implementation of DES and AES, Secure against Some Attacks