Welcome to the Hardware Security course as taught at University Padeborn. It consists of 15 lectures and 5 hands-on tutorials using hardware: cryptographic smartcards, card readers, and the ChipWhisperer-Nano. The course also included 3 homework assignments which are not published here. Two guest lectures that happened during the course are also not published here.
All of the content listed here is published under the CC BY-SA license, unless stated otherwise. Feel free to get inspired and use these materials in your teaching. If you have any questions about the content, feel free to reach out to me.
| Document | Size | |
|---|---|---|
| 1. Intro
Introduces and motivates the course: secure hardware, side-channel attacks, and cryptography. |
35.7M | |
| 1. Intro (tutorial)
Hands-on experience with cryptographic code: AES, RSA, and ECC. |
152.4K | |
| 2. Smartcards
Smartcards: ISO 7816, JavaCard, protocols, and applications (EMV, eID, eMRTD). |
3.0M | |
| 3. Authenticators
Authenticators: The need for them, from U2F to FIDO2, and evil-maid attacks. |
4.9M | |
| 4. TPMs
TPMs: API, principles, applications (boot integrity, remote attestation), and attacks. |
12.2M | |
| 5. HSMs,TEEs
HSMs: Properties, tamper resistance, applications. TEEs: threat model, applications, and attacks. |
16.9M | |
| 5. Smartcards (tutorial)
Hands-on experience breaking and reverse-engineering MIFARE Classic. |
1.1M | |
| 6. Timing and cache attacks
Timing attacks: Principles, remote/local, noise. Cache attacks: Caches, Evict+Time, Flush+Reload, Prime+Probe. |
997.1K | |
| 7. Microarchitectural attacks
Microarchitecture: state, speculation, branch prediction, SMT, pre-fetching. Microarchitectural attacks: transient execution, Meltdown, Spectre, and defences. |
792.8K | |
| 8. Physical side channel attacks 1
Invasive attacks: Micro-probing, circuit editing, and reverse-engineering. Non-invasive passive attacks: dynamic/static, vertical/horizontal. Side-channels: power, EM, leakage models. SPA and DPA. |
10.3M | |
| 8. SCA (tutorial)
Hands-on experience breaking and fixing a password check with ChipWhisperer-Nano. |
2.4M | |
| 9. Physical side channel attack defences 1
Hands-on experience breaking and reverse-engineering MIFARE Classic. |
668.9K | |
| 10. Physical side channel attacks 2 | 1.8M | |
| 11. Physical side channel attacks 3 | 503.3K | |
| 12. Physical side channel attack defences 2 | 341.3K | |
| 12. FA (tutorial) | 1.9M | |
| 13. Guest lecture (Thomas Roche) | (not available) | |
| 14. Guest lecture (Lukasz Chmielewski) | (not available) | |
| 15. Certifications and recap | 540.3KK | |
| 15. Exam questions (tutorial) | 186.7K | |
| All presentations zip | tar.gz | 93.1M / 93.1M |