https://wiki.sha2017.org/index.php?action=history&feed=atom&title=Session%3ACheap_SCA_with_Open_Source_tools 2026-04-26T08:13:59Z Revision history for this page on the wiki MediaWiki 1.27.3 https://wiki.sha2017.org/index.php?title=Session:Cheap_SCA_with_Open_Source_tools&diff=10576&oldid=prev 2017-08-05T11:49:26Z

<p>Learn SCA with open source tools &amp; cheap equpiment from experts!</p> <p><b>New page</b></p><div>{{Session<br /> |Has session tag=sca, open source, cheap<br /> |Is for kids=No<br /> |Has description=During this workshop in the Riscufefe village, security analysts from Riscure will show how Side Channel Analysis techniques work (DPA) with super cheap equipment (less than 60 euro the full setup) and Open Source SCA tools (jlSCA).<br /> <br /> IMPORTANT: You will get a VM which you can practice what you learned; please bring your own laptop with &gt;15GB of free disk space and VirtualBox installed (with extension package)!!<br /> |Has website=www.riscure.com/training<br /> |Has session type=Workshop<br /> |Has session keywords=hardware, software, embedded, hacking, security<br /> |Processed by village=Village:Riscufefe<br /> |Held in language=en - English<br /> |Has orga contact=boixcarpi@riscure.com<br /> }}<br /> {{Event<br /> |Has subtitle=Saturday edition<br /> |Has start time=2017/08/04<br /> |Has duration=90<br /> |Has session location=Village:Riscufefe<br /> }}<br /> {{Event<br /> |Has subtitle=Sunday edition<br /> |Has start time=2017/08/04<br /> |Has duration=90<br /> |Has session location=Village:Riscufefe<br /> }}<br /> Workshop description <br /> (Important: bring your own laptop with Virtualbox and 15GB free disk space!)<br /> <br /> Implementing security on embedded systems can be a difficult task. This is especially true when you write your own implementation of a crypto algorithm (either public or your own). During this workshop we perform attacks on cryptographic functions (encryption with AES, if time maybe signatures with ECDSA) using the popular Riscure HackMe platform. &quot;We perform attacks&quot; in this context means you, as all the exercises are hands-on! You will learn that the requirements for executing some of the attacks (e.g. cost of hardware required for SCA) are much less than you thought, and if with the right knowledge they can be straightforward. Don't worry: we will have a theoretical introduction to the attacks, but in an easy to grasp format.<br /> <br /> For the exercises we will use a real device (the RHme board, based on an Arduino Nano board) and the challenges available on the RHme2 contest so that you can perform these attacks with your own laptop. Note that we will change the flags of the challenges, so that you can enjoy them if you attempted/solved some of them. We will also provide a Virtual Machine already pre-configured so you will be good to go from the start of the workshop. And after the workshop, if you liked these attacks, you have the chance to practice your skills with the board with the publicly available challenges for the board.<br /> <br /> Proposed workshop program<br /> Intro to workshop and bootstrap laptops/embedded boards for the exercises<br /> <br /> Side Channel Analysis on private key encryption (AES) challenge<br /> - Theory<br /> - Exercise: Piece of SCAke<br /> <br /> If time: public Key signature (ECDSA) challenge<br /> - Theory<br /> - Exercise: Secure Filesystem v1.92r1<br /> <br /> <br /> Should I attend this workshop or not?<br /> <br /> You should attend if:<br /> - You have little to zero practical experience on doing hands-on attacks on crypto/security implementations<br /> - You think that performing implementation attacks on cryptography require very specialized tooling<br /> - You enjoy participating in CTF-like contests<br /> - You heard of terms like SCA, DPA, ECDSA or timing attacks but have never done them yourself<br /> <br /> You should not attend if:<br /> - Terms like SCA, DPA, ECDSA, timing attacks have no mystery for you, and you know how to perform them<br /> - You are not interested in practical attacks on cryptography<br /> - You participated in the RHme contest and you beat all these challenges</div>

Lukasz.chmielewski