Similar Items: On timing side channels in “constant-time implementations”