When Constant-Time Source Yields Variable-Time Binary: Exploiting Curve25519-donna Built with MSVC 2015
Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems