Paper on certified robustness for ViTs, showing PixelDP after patch embedding can drop to chance before patching it with spectral norms.

Off-the-shelf LLMs apparently work as masked AES side-channel distinguishers, with low trace counts and weird robustness.