Side-Channel Attacks | Essential
A comprehensive 7-course program covering the full side-channel analysis workflow, from signal acquisition to key recovery. Designed for security engineers building practical SCA expertise on real hardware targets.
Module Overview
Covers the language features and open-source libraries most relevant to side-channel analysis, including data science, statistics, and machine learning tools. Participants with no prior Python experience get up to speed quickly, with a focus on practical application throughout the module.
Build a solid foundation in side-channel attack principles and methodology. You'll learn the core concepts needed to run your first analysis, then put them into practice on basic examples before progressing to real-world use cases.
Get hands-on with side-channel measurement on real hardware, working in a dedicated side-channel laboratory. You'll learn to identify a usable signal, set up triggers, and run trace collections, then analyze the results you've captured. Note: This course requires onsite delivery due to the need for a side-channel bench. It can be held at your premises only if you have access to an eShard side-channel bench.
Learn the signal processing techniques needed to observe and align side-channel traces. Working with misaligned trace sets, you'll practice until you can reliably realign data and run successful attacks across multiple use cases.
Learn to identify and characterize leakages in side-channel traces using techniques such as Welch's T-Test and Chi-squared analysis. You'll also learn how to make use of metadata when available, gaining valuable insight into trace behavior, leakage models, and potential information leaks.
Learn how to recover secret keys from symmetric algorithm implementations. Starting with the principles behind first and second-order analyses, you'll work through real-world examples and progressively move toward higher-order analyses, learning how masking protections can be defeated.
Apply everything you've learned to a real-world target: the Hisilicon Kirin 620 SoC (8x Cortex-A53 @ 1.2 GHz). With guidance from your trainer, you'll lead a complete investigation from bench setup to secret key recovery using the ARMv8 AES instruction set, while also exploring advanced techniques such as EM cartography on a realistic smartphone-grade target.
Over 10 Years of Hands-On Expertise.
Effective security testing comes from the combination of the right tools, deep technical knowledge, and the people who know how to apply them. eShard has spent over 10 years developing all three, and our coaching programs put that same expertise directly in your hands.
Frequently Asked Questions
Most courses can be delivered online. Some modules, particularly those involving lab equipment, require onsite presence. Onsite training can be held at eShard's headquarters in Bordeaux, France, or at your own premises. The delivery format can be discussed and agreed upon before the final proposal.
Prerequisites vary by module. Some courses include introductory content for participants new to a topic, while others assume prior knowledge of cryptography or security testing. Each module page indicates the expected background.
Most programs accommodate 3 trainees per coach. Based on our experience, this ratio ensures everyone progresses at the same pace and gets the most out of the session. Contact us to discuss larger groups or custom arrangements.
Yes. Training programs are tailored to each team's technical level and objectives. If your team works on specific targets or protocols, this can be factored into the program before the session begins.
