This assumes that implementation diversity stymies an attacker, which isn't really true in cryptography. Cryptographic errors have well-understood "shapes," fre

This assumes that implementation diversity stymies an attacker, which isn't really true in cryptography. Cryptographic errors have well-understood "shapes," frequently present even when the raw algebra of the implementation is correct; adversaries are delighted when they discover yet another hand-rolled RSA implementation that's susceptible to BB'98 or BB'06.