Differential Cache-Collision Timing Attacks on AES with Applications to Embedded CPUs