Documentation and implementations of labs from the Embedded Systems Security course — exploring hardware, firmware, and IoT security concepts through hands-on attacks, defenses, and analysis on real embedded platforms.

This repository contains the complete lab work for the Embedded Systems Security module, part of the International Master's in Embedded Systems Security at Grenoble INP - École Supérieure d'Ingénieurs en Systèmes Avancés et Réseaux (ESISAR), Valence, France.

Objective: Recover cryptographic keys using power consumption and electromagnetic emissions.

• Target: AES-128.
• Techniques:
  • Simple Power Analysis (SPA)
  • Correlation Power Analysis (CPA)
  • Electromagnetic Analysis (EMA)
• Tools: ChipWhisperer-Lite, Python (NumPy, SciPy), Oscilloscope
• Key Results: Full key recovery in < 5,000 traces using CPA

“Power traces don’t lie — they whisper the secret.”

Objective: Inject faults during AES execution to recover the key via differential analysis.

• Target: AES-128 software implementation.
• Fault Injection:
  • Voltage glitching (Crowbar circuit)
  • Clock glitching (using FPGA)
• Analysis: Fault model validation, faulty ciphertext collection, key recovery via DFA equations
• Tools: Arduino Uno, Saleae Logic Pro, Custom glitcher board
• Key Results: Key recovered with 2–3 faulty ciphertexts

“One bit flipped, one key revealed.”