The algorithms have been resistant, the implementations not so much. We discovered pretty quickly that side channel free implementations are very hard, and thus

The algorithms have been resistant, the implementations not so much. We discovered pretty quickly that side channel free implementations are very hard, and thus most attacks have been on implementations and not the algorithms themselves. And for practical attacks on real world systems, key lifecycle is usually what you want to look at first.