When Constant-Time Source Yields Variable-Time Binary: Exploiting Curve25519-donna Built with MSVC 2015. - Thierry Kaufmann; Hervé Pelletier; Serge Vaudenay; Karine Villegas (CANS, 2016)