When Constant-Time Source Yields Variable-Time Binary: Exploiting Curve25519-donna Built with MSVC 2015
ECDSA Key Extraction from Mobile Devices via Nonintrusive Physical Side Channels