Exploitable timing leak in the reference implementation of Kyber