Absolutely, the performance would be terrible, but under circumstances where you need to be sure there's no side channels (like in a secure element kind of chip

Absolutely, the performance would be terrible, but under circumstances where you need to be sure there's no side channels (like in a secure element kind of chip) maybe that's acceptable.