On the specific case of RSA (or rather, CRT-RSA), I've mostly studied fault-injection attacks, which can be considered a kind of side-channel attack. And I agre

On the specific case of RSA (or rather, CRT-RSA), I've mostly studied fault-injection attacks, which can be considered a kind of side-channel attack. And I agree with you that it is possible to protect RSA (see my most recent paper [1] on that subject, which will be published at FDTC 2014, the day just before CHES 2014, where the paper being discussed in this HN thread will appear). I also agree with you on the fact that ECC is not immune to side-channel attacks at all: for proof this cool paper [2] by Barthe, Dupressoir, Fouque, Grégoire, and Zapalowicz, which will appear at CCS 2014 which shows working fault-injection attacks on both RSA and ECDSA. [1] http://pablo.rauzy.name/research.html#hofa http://pablo.rauzy.name/research.html#hofa [2] http://eprint.iacr.org/2014/436 http://eprint.iacr.org/2014/436 FDTC 2014: http://conferenze.dei.polimi.it/FDTC14/ http://conferenze.dei.polimi.it/FDTC14/ CHES 2014: http://www.chesworkshop.org/ches2014/start.php http://www.chesworkshop.org/ches2014/start.php CCS 2014: http://www.sigsac.org/ccs/CCS2014/ http://www.sigsac.org/ccs/CCS2014/