When Constant-Time Source Yields Variable-Time Binary: Exploiting Curve25519-donna Built with MSVC 2015.

Thierry Kaufmann, Herv Pelletier, Serge Vaudenay, Karine Villegas

Browse the full CANS paper archive.