Yeah. And that's just passive attacks. It gets even scarier when people start creating faults with precisely-timed laser pulses (this equipment is commercially

Yeah. And that's just passive attacks. It gets even scarier when people start creating faults with precisely-timed laser pulses (this equipment is commercially available). Etcetera. Theoretical cryptographers have recently begun studying this kind of problem (in fact, that's what my PhD is about). That may help. Or not. But throwing the problem "over the wall" to the engineers hasn't worked that well, and I hope that some theory can be helpful here.