A security researcher demonstrates that they can recover a smart card's private encryption key without exploiting any software flaw or intercepting network traffic. Instead, they measure tiny fluctuations in the card's power consumption and the precise time it takes to perform cryptographic operations, then correlate these physical measurements to deduce the key bits. Which type of attack does this describe?