Example: We all know why we should protect against timing attacks. How to get it right is the harder part.