August 12, 2022 Alina Open to a fault: On the passive compromise of TLS keys via transient errors [pdf]