[JoachimSchipper]

That gives the correct flavour, but note that we use a different side-channel than timing - this is really a hardware attack, so we e.g. pick up 0->1 transitions in the address bus.

[buu700]

Ah, thanks for clarifying that; I'd just assumed it was timing from a quick skim.