Pseudo Constant Time Implementations of TLS Are Only Pseudo Secure.

Eyal Ronen, Kenneth G. Paterson, Adi Shamir

Browse the full CCS paper archive.