Faster and Timing-Attack Resistant AES-GCM
Cache-timing attacks on AES