Cache-timing attacks on AES
The Security and Performance of the Galois/Counter Mode (GCM) of Operation