Faster and Timing-Attack Resistant AES-GCM
Cryptanalysis of DES implemented on computers with cache