Difference between revisions of "V3:Tutorial B10 Using with SASEBO-W CardOS or DPA Contest v4.2"

About the ATMega Card

The ATMega Card is shown below:

This card contains an Atmel ATMega163 die along with a 24C256 EEPROM. You can see the internal pinout of these cards online. It should be noted that this card is in a SmartCard form factor, but is essentially just a very old microcontroller (AtMega163). If you are unable to find this card but still wish to perform these experiments, there are two other options:

# Purchase an ATMega16, which can be programmed with the ATMega163 binary (.hex file). See an Atmel App-Note on the subject. The AtMega16 will not fit on the Multi-Target board, meaning you must build your own board. You can then connect the appropriate IO lines to the SmartCard interface.

1. Rebuild your code for the ATMega328p. This should require minimal changes to the source code, but note you cannot program a .hex file for a Mega163 into a Mega328P directly. You will need the complete source code.

Alternatively of course you can package your target algorithm into something like the demo SimpleSerial project too. There is no real need to use the SmartCard APDU format, and the interface tends to be much slower on the ChipWhisperer system.

Programming

You will need an image to program into the SmartCard. This tutorial uses the SASEBO-W Card OS. Details of this are available from the SASEBO-W Page. Download the file entitled Smartcard sample binary for ATMega 163, which is described in the document entitled SASEBO-W Smart Card OS Specification Ver. 0.4-5.

The first file will have a .hex inside it, which you must program using AVRStudio or similar. To use the built-in programmer, the following connections should be set:

# Remove all jumpers from the AVR and XMEGA sections of the MultiTarget board.

1. Remove the AtMega328p from the socket.
2. Set the oscillator for 3.579 MHz (JP18), and set the CLKOSC jumper (JP17).
3. Mount all four jumpers on the AVR-PROG section (JP8).
4. Shunt both the GND and VCC resistors, as the programming will fail with those resistors in the power lines (JP7).

The following image shows these connections:

Then use AVRStudio to program the .hex file. The instructions for doing this are as in Installing_ChipWhisperer#Getting_AVR_Compiler_Toolchain, however when selecting the AVR type select ATMega163 instead of ATMega328p. Check the Read Signature option works, if not double-check the above hardware connections.

Hardware setup for using Card Socket

The following describes the jumper settings when using the SmartCard socket on the MultiTarget Victim Board:

# NO jumpers mounted in XMEGA Portion or AVR Portion, ideally remove the AVR Chip as well

1. 3.3V IO Level (JP20 set to INT.)
2. The 3.579 MHz oscillator is selected as the CLKOSC source (JP18)
3. The CLKOSC is connected to the SmartCard Clock Network, along with connected to the FPGAIN pin (JP4)
4. #; Trigger is selected as AX2 (JP22) [NOTE: The silkscreen on the multi-target board is incorrect - this is actually the AUX1 pin. This tutorial will

   use the silkscreen notation instead of the actual pin for jumper settings]

5. Power measurement taken from VCC shunt (JP7)
6. Jumpers removed from the AVR-PROG header (JP8)
7. Connect the GPIO1 line to the RESET line. This is done with a jumper from a line labeled RXD on the AVR section to one of the pins on the AVR-PROG section. Note you can alternatively connect this line to the RST pin on the blue 8-pin smartcard connector header.

The following image shows this setup:

Connect the 20-pin cable and SMA cable if not already connected, and plug your programmed MegaCard into the SmartCard socket. This completes the hardware setup when using the card socket.

Hardware Setup using ATMega16

The AtMega16 is binary-compatible with the AtMega163, meaning a hex file for the ATMega163 can be programmed directly into the ATMega16. Assuming you have the SASEBO-W adapter, this simple schematic shows the required circuit:

image

Note that we are not using the shunt on the SASEBO-W, as we have added filtering capacitors. Due to the long ribbon cable (with a high-frequency clock), you'll end up with a lot of noise if you attempted to use the shunt on the SASEBO-W (which means no filtering caps on the AtMega16). The implementation looks like this:

image

You'll have to program the AtMega16 device, which you can do as described in the SASEBO-W Quickstart guide. The only difference is you'll need to change the device to the mega16. You'll also need to program the fuse bits, as by default the ATMega16 uses an internal oscillator, which has the wrong frequency for the SASEBO-W communications.

Here's an example of the batch file which will program the ATMega16, along with programming the fuse bytes. You only need to program the fuse bytes the first time you use this, otherwise you can just program the .hex file:

avrdude -c sasebow -p m16 -P ft0 -B 115200 -u -e -U flash:w:AES.hex:a -U lfuse:w:0xD0:m -U hfuse:w:0x99:m -v
pause

Hardware Setup using ATMega328p

See SASEBO-W_Target#Connecting_the_Multi-Target_Board_to_the_SASEBO-W for details of connecting the Multi-Target board to the SASEBO-W.

image