Heres one: http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf which is rumored to have been used a couple of times "in the wild".

(edited to have the link i meant).