Cache side channels constitute a persistent threat to crypto implementations. Implementing crypto as software evaluations of circuits avoids this threat but is very costly. RiCaSi combines program analysis and circuit compilation to support the selective hardening of regular C implementations against cache side channels.