Among these statements about concrete attacks (power analysis and cache attacks), which one is correct?