Timing attacks
Naive equality comparison leaks byte-by-byte match. Attacker measures response time. Fix: constant-time compare.
Advertisement
Cache timing
AES with lookup tables leaks key via cache-hit/miss timing. Modern AES-NI eliminates. Constant-time tables via bit-slicing.
Advertisement
Power analysis
Differential Power Analysis (DPA) recovers keys from measured power consumption. Smart card + IoT concern.
Spectre / Meltdown
Speculative execution leaks kernel/other-process memory via cache side channel. Massive 2018+ patch cycle.