The present work unearths a side-channel vulnerability in the cryptographic library of Infineon Technologies, one of the most important secure element manufacturers. This vulnerability - that went unnoticed for 14 years and about 80 highest-level Common Criteria certification evaluations - is due to a non constant-time modular inversion. The attack requires physical access to the secure element (few local electromagnetic side-channel acquisitions, i.e. few minutes, are enough) in order to extract an ECDSA secret key. The attack is demonstrated on a FIDO hardware token from Yubico where it allows to create a clone of the FIDO device. Yubico acknowledged that all YubiKey 5 Series (with firmware version below 5.7) are impacted by the attack. Furthermore, strong arguments tend to indicate that all Infi-neon security microcontrollers (including TPMs) that run the Infineon cryptographic library are vulnerable to the attack.

Adaptive learning systems aim to address a learner's specific needs, considering factors such as prior knowledge, learning efficiency, learning goals and motivation. Especially in distance education, often directed to adult learners with full-time jobs, it is very important to provide assistance to counteract high dropout rates. This paper describes an approach on how to support adult learners through the adoption of personalisation and guidance in Moodle. The implementation grounds on the combination of two pedagogical theories, competence-based learning and Self-Regulated Learning (SRL). Three-phases were used to roughly frame the design of the SRL learning flow, where the individual phases are supported by competence-based guidance. In this way Moodle is extended from a teacher and course management to a learner-centric system. This work has been implemented and evaluated in the course of a European project that targets vocational training of heat pump installers.

Recent works show that a combination of perturbation and observation attacks on symmetric ciphers thwarts state-of-the-art countermeasures. In this paper, we first propose a new way - to our knowledge - to classify fault attacks against block ciphers, allowing us to exhibit their capacity to be combined with observation attacks. We then present a set of common protections against side-channel and fault attacks, namely higher-order masking schemes, detection and infection countermeasures, and how they can be combined. We show that the combination of a higher-order masking scheme and a detection countermeasure can actually be defeated by a slight variant of the combined attack of Roche et al., even if one applies their patch. Furthermore, we also demonstrate that none of the published infection countermeasures is robust against fault attacks. Finally, using randomness, we propose a set of enhanced countermeasures that thwart considered threats.

We study algorithm based fault tolerance techniques for supporting malicious errors in distributed computations based on Chinese remainder theorem. The description holds for both computations with integers or with polynomials over a field. It unifies the approaches of redundant residue number systems and redundant polynomial systems through the Reed Solomon decoding algorithm proposed by Gao. We propose several variations on the application of the extended Euclid algorithm, where the error correction rate is adaptive. Several improvements are studied, including the use of various criterions for the termination of the Euclidean Algorithm, and an acceleration using the Half-GCD techniques. When there is some redundancy in the input, a gap in the quotient sequence is stated at the step matching the error correction, which enables early termination parallel computations. Experiments are shown to compare these approaches.