Christian Cornesse
ENFR

Doc. NH-01 · Rev. 2026.10

Hardware security engineer

France · remote preferred

← All projects

Beta

SimuSCA

A side-channel leakage simulator for Cortex-M. It runs real firmware and produces power traces, so attacks and countermeasures can be tested without a lab bench.

Tools

SimuSCA simulates the leakage of a Cortex-M while it runs real firmware. You mark the code to study with two breakpoints, choose the inputs, outputs and leakage model, then run measurement campaigns that produce traces, as a probe would on a lab bench.

The beta already covers the full loop: ready-to-run examples (AES-128, RSA), live campaigns, labelled campaigns that can be searched, and the link from a peak in a trace back to the instruction in the source.

The case study will compare SimuSCA with other simulators on public test programs, with reproducible measurements.

Demo

Two breakpoints mark the code to measure, and the firmware is rebuilt to match.
A campaign runs on the simulated Cortex-M and its traces appear live.
From a leakage peak in a trace back to the instruction that caused it.
Checking a countermeasure: square-and-multiply takes a time that depends on the key, the Montgomery ladder takes the same time for every key.

Case study coming soon