This is cool:
eprint.iacr.org/2004/101.pdf. Apparently the kind of thing extremely-high security cryptosystems use which need to be provably immune to side-channel attacks (e.g. hardware critical for "national security"). I wonder how many COTS HSMs or crypto accelerator ICs use that technique.