Joachim, I totally agree with you on the comparison of requirements for power analysis (side channel) attack vectors versus cryptanalysis attack vectors against

Joachim, I totally agree with you on the comparison of requirements for power analysis (side channel) attack vectors versus cryptanalysis attack vectors against well vetted algorithms. The difference can be staggering as you mentioned. The issues I take with calling the requirements "quite low" are two fold; (1) Most people could never succeed with this attack vector, and (2) Most people would never bother. This certainly isn't "FireSheep" which really does have "quite low" requirements, and getting free bus passes in San Francisco is certainly not worth the time, expense, and effort, so most people would ever bother to do it. BTW, I've collected some interesting papers and whatnot on side channel attacks. If you want them, email me, but knowing you, you probably already have most of them. ;)