The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.