preventing side channel attacks is really fucking hard