Diploma in Cryptography Validation in Defence
Online postgraduate diploma of 800 hours in cryptography validation in defence. 8 modules covering applied cryptography, cryptographic modules, algorithm validation, side-channel attacks, security evaluation and certification, cryptography in defence systems, and ethics, law and governance, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply the main standardised cryptographic algorithms.
Analyse the architecture of cryptographic modules.
Validate implementations with test vectors.
Assess resistance to side-channel attacks.
Prepare products for security certification.
Plan the transition to post-quantum cryptography.
Manage validation in line with ethical and legal criteria.
Who it's for
- Product security evaluators working in evaluation laboratories or industry.
- Cryptographic engineers implementing algorithms in hardware or software.
- Side-channel analysts assessing the physical security of devices.
- Communications security managers in defence or public administration.
- Security certification consultants preparing products for FIPS 140-3 or Common Criteria.
- Auditors of encryption systems.
- Engineering or science graduates seeking to enter the defence sector.
What you'll work with
- FIPS 140-3 (security requirements for cryptographic modules)
- ISO/IEC 19790 (security requirements for cryptographic modules)
- ISO/IEC 15408 (Common Criteria for IT security evaluation)
- NIST SP 800-90B (entropy sources for random bit generation)
- ISO/IEC 17825 (testing methods for non-invasive attack mitigation)
- FIPS 203 (ML-KEM post-quantum key encapsulation)
- ISO/IEC 24759 (test requirements for cryptographic modules)
- NIST ACVP
- OpenSSL
- ChipWhisperer
- SageMath
- Wireshark
8 modules
1.1AES symmetric encryption and modes of operation1.2SHA-2 and SHA-3 hash functions1.3RSA public-key cryptography1.4ECDSA and ECDH elliptic curves1.5Message authentication codes1.6Random number generation1.7Key life-cycle management1.8TLS and IPsec protocols1.9Post-quantum cryptography1.10Practical exercise: implementation of AES-GCM
2.1Architecture of a cryptographic module2.2Cryptographic boundaries and ports2.3Roles, services and authentication2.4Physical security and tamper detection2.5Power-up and conditional self-tests2.6Hardware security modules (HSM)2.7Secure elements and smart cards2.8Cryptographic firmware and secure boot2.9Zeroisation of critical security parameters2.10Workshop: analysis of an HSM's documentation
3.1Algorithm validation programmes3.2Known-answer test vectors3.3Monte Carlo tests3.4Automated validation through ACVP3.5Validation of DRBG generators3.6Assessment of entropy sources3.7Validation of key derivation3.8Common implementation errors3.9Interoperability testing3.10Laboratory: validation with test vectors
4.1Simple power analysis4.2Differential and correlation power analysis4.3Electromagnetic emanations4.4Timing attacks4.5Voltage and clock fault injection4.6Laser fault injection4.7Masking countermeasures4.8TVLA assessment4.9TEMPEST protection of equipment4.10Laboratory: DPA attack on a microcontroller
5.1Common Criteria and EAL levels5.2Protection profiles5.3Product security target5.4The Spanish certification scheme5.5Catalogue of security products5.6Accredited evaluation laboratories5.7LINCE methodology5.8Encryption products for classified information5.9Mutual recognition of certificates5.10Case study: security target for an encryptor
6.1Encrypted tactical communications6.2Data links and link encryption6.3Network key management6.4Encryption in software-defined radios6.5Protection of data at rest6.6Interoperability in coalitions6.7Resilience against key compromise6.8Transition to post-quantum algorithms6.9Cryptographic agility6.10Case study: post-quantum transition plan
7.1Export control of encryption products7.2Protection of classified information7.3Responsible vulnerability disclosure7.4Backdoors and public debate7.5Privacy and fundamental rights7.6Evaluator responsibility7.7Trusted supply chain7.8Independent auditing7.9Institutional cryptographic governance7.10Practical exercise: vulnerability disclosure policy
8.1Description of the product under evaluation8.2Algorithms and parameters8.3Algorithm validation plan8.4Side-channel analysis8.5Applicable certification requirements8.6Results and non-conformities8.7Improvement recommendations8.8Governance and legal aspects8.9Report and presentation8.10Final project: final review with your tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme fits around your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is NIST ACVP, OpenSSL, ChipWhisperer, SageMath and Wireshark, in free, academic or evaluation versions. Practical work is based on real procedures for algorithm validation with test vectors, power analysis on microcontrollers and assessment of entropy sources. Assessment is continuous by module, plus the final project.
Standards covered: FIPS 140-3, ISO/IEC 19790, ISO/IEC 15408, NIST SP 800-90B, ISO/IEC 17825, FIPS 203 and ISO/IEC 24759.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- An internet connection and a computer capable of running the programme's software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with NIST ACVP, OpenSSL, ChipWhisperer, SageMath and Wireshark, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector (no university degree required), a computer able to run the software, and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Diploma in Uranium Mining and Conversion
Online postgraduate diploma of 800 hours in uranium mining and conversion. 8 modules covering uranium geology and resources, mining methods, ore processing, refining and conversion, radiation…
Diploma in Distributed Multi-Agent Communications
Online postgraduate diploma of 800 hours in distributed multi-agent communications, structured in 8 modules covering multi-agent systems, ad hoc wireless networks, DDS and ROS 2 middleware,…
Diploma in Defence Platform Integration
Online postgraduate diploma of 800 hours in defence platform integration. 8 modules covering systems engineering in defence, platform architectures, interface management, modelling and simulation, physical integration,…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships