> Ещё нюанс - все тайминг атаки на ECDSA, AES (Rinjael) локальные.

Увы, не все.

Remote Timing Attacks are Practical
https://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf

Remote Timing Attacks are Still Practical
https://eprint.iacr.org/2011/232.pdf
"We use this vulnerability to steal the private key of a TLS server where the server authenticates with ECDSA signatures."

Cache-timing attacks on AES
http://cr.yp.to/antiforgery/cachetiming-20050414.pdf

Cache Based Remote Timing Attack on the AES
http://cs.ucsb.edu/~koc/docs/c38.pdf

Remote cache-timing attacks against AES
http://dl.acm.org/citation.cfm?doid=2556315.2556322

Countermeasures against Bernstein's remote cache timing attack
http://arxiv.org/abs/1403.7297

https://twitter.com/hyperelliptic/status/523950094656487425
"the thing about cache timing attacks is that they work remotely"