That isn't an attack on the encryption, which is a very important distinction to make. But I'm curious what exactly you have in mind - we are repeatedly performing the same xor instruction, so power analysis won't work, and there is no branching, so timing wouldn't work either.