Cache-timing attacks on AES

by Ferguson, Whiting, Schneier, Kelsey, Lucks, and Kohno in [11]; and my new Salsa20. These cryptographic functions are built from a few simple operations that take constant time on common general-purpose CPUs: 32-bit additions, constant-distancerotations, etc. There is no apparent incentive for implementors

Timing, Attacks, Kohno, Timing attacks