Timing Attack against protected RSA-CRT implementation used in PolarSSL
Small Solutions to Polynomial Equations, and Low Exponent RSA Vulnerabilities