Timing Attacks on NTRUEncrypt Via Variation in the Number of Hash Calls.

Joseph H. Silverman William Whyte Timing Attacks on NTRUEncrypt Via Variation in the Number of Hash Calls. 208-224 2007 conf/ctrsa/2007 CT-RSA http://dx.doi.org/10.1007/11967668_14 db/conf/ctrsa/ctrsa2007.html#SilvermanW07