EM Fault Injection Training
A three-course program covering EM fault injection fundamentals on an eShard EMFI bench, differential fault analysis on AES-128 and AES-256, and a hands-on crack-me challenge on real hardware.
Module Overview
Get a comprehensive introduction to near-field EM fault injection principles and practical application. Using an eShard EMFI bench, you'll learn the equipment setup, safety procedures, and campaign design, then gain hands-on experience setting up the bench, running campaigns on a device under test, and analyzing results. The course also covers troubleshooting and bench maintenance for real-world testing conditions.
Learn key differential fault analysis methodologies, including the Piret & Quisquater attack on the AES final rounds and the Kim & Quisquater attack on the AES key schedule. Through hands-on exercises, you'll compute differentials, characterize faults, and recover secret keys from faulty AES outputs, extending these techniques to AES-256.
Apply your skills to a real hardware challenge: inducing faults on an STM32 chip with a hardware AES-128 accelerator using EM fault injection. You'll identify sensitive areas of the chip, develop an attack strategy, generate faulty ciphertexts, and apply DFA techniques to recover the full secret key.
Over 10 Years of Hands-On Expertise.
Effective security testing comes from the combination of the right tools, deep technical knowledge, and the people who know how to apply them. eShard has spent over 10 years developing all three, and our coaching programs put that same expertise directly in your hands.
Frequently Asked Questions
Most courses can be delivered online. Some modules, particularly those involving lab equipment, require onsite presence. Onsite training can be held at eShard's headquarters in Bordeaux, France, or at your own premises. The delivery format can be discussed and agreed upon before the final proposal.
Prerequisites vary by module. Some courses include introductory content for participants new to a topic, while others assume prior knowledge of cryptography or security testing. Each module page indicates the expected background.
Most programs accommodate 3 trainees per coach. Based on our experience, this ratio ensures everyone progresses at the same pace and gets the most out of the session. Contact us to discuss larger groups or custom arrangements.
Yes. Training programs are tailored to each team's technical level and objectives. If your team works on specific targets or protocols, this can be factored into the program before the session begins.
