Correlation Power analysis with a leakage model
Using Second-Order Power Analysis to Attack DPA Resistant Software