Comment by pdubs

Some of the previous work on this involving timing attacks against SSH [1] is particularly interesting because it's so obvious in retrospect, but no one saw it when SSH was being designed.

[1]http://www.cs.berkeley.edu/~daw/papers/ssh-use01.pdf