Text this: On timing side channels in “constant-time implementations”