|
|
| Line 1: |
Line 1: |
| − | {{Warningbox|This page has not yet been updated for the v5 release. Some information may be outdated.}}
| + | == Page Moved == |
| | | | |
| − | == ChipWhisperer Nano (CWNANO) Background ==
| + | See [https://rtfm.newae.com/Capture/ChipWhisperer-Nano/ NewAE RTFM Page]. The previous content on this wiki has been moved to the above link. See wiki history if you would like to view exact older versions of this page. |
| − | | + | |
| − | [[File:CWNANO_RESIZE.png|800px]] | + | |
| − | | + | |
| − | ChipWhisperer-Nano is an ultra low-cost platform for side-channel power analysis & voltage fault injection. It has the following features:
| + | |
| − | | + | |
| − | # ADC capable of sampling up to 20 MS/s, using either external clock (synchronous to device) or internal clock (both synchronous and asynchronous).
| + | |
| − | # ADC hardware trigger uses rising-edge input and starts sampling on first device clock after trigger line going high, samples for user-configurable length.
| + | |
| − | # STM32F030 target for loading example code onto, including a programmer built into the ChipWhisperer-Nano.
| + | |
| − | # Crowbar based VCC glitching, approx 10nS resolution on glitch width and offset (glitch offset from trigger with up to 200nS jitter).
| + | |
| − | | + | |
| − | It is primarily designed for power analysis demonstrations and training programs. It is also available as a module without a target for integration onto a target board, as one option for ChipWhisperer-Enabling your development platforms.
| + | |
| − | | + | |
| − | === Examples of Tutorials you can Run ===
| + | |
| − | | + | |
| − | ChipWhisperer-Nano is a complete tutorial platform. You could run the following tutorials on it for example (using the included target):
| + | |
| − | | + | |
| − | * Perform a CPA (power analysis) attack on a textbook AES implementation.
| + | |
| − | * Perform a CPA attack on MBED-TLS AES implementation.
| + | |
| − | * Perform a DPA attack on an XOR password check.
| + | |
| − | * Perform a SPA attack on an RSA library.
| + | |
| − | * Perform a timing attack on a password check.
| + | |
| − | * Perform fault injection attacks to demonstrate corrupting a variable (NB: not as reliable due to limitations listed below).
| + | |
| − | | + | |
| − | If you were to attach an external target, you could also do the following:
| + | |
| − | | + | |
| − | * Perform a CPA attack on a hardware AES accelerator.
| + | |
| − | * Perform a power analysis attack on a FPGA target.
| + | |
| − | * Perform the LPC1114 tutorial.
| + | |
| − | * Connect to CW308 UFO Board for use with a wide variety of targets.
| + | |
| − | | + | |
| − | === Limitations compared to ChipWhisperer-Lite and Pro ===
| + | |
| − | | + | |
| − | The ChipWhisperer-Lite and Pro both use an FPGA for performing all clock routing, in addition to using better ADCs and analog front ends. Fundamentally, the design of the ChipWhisperer-Nano means it has the following major limitations:
| + | |
| − | | + | |
| − | * Sampling clock in external mode directly follows the input clock (no ability to multiply/divide/offset clock as in CW1173/CW1200).
| + | |
| − | * Sampling clock in internal mode limited to specific fixed divisions of 240 MHz PLL clock.
| + | |
| − | * Fixed analog front-end gain of approx 10dB.
| + | |
| − | * ADC limited to 20MS/s (can be overclocked slightly, up to 30MS/s but not guaranteed).
| + | |
| − | * No ADC offset to delay capture for some specific number of cycles after the trigger.
| + | |
| − | * Cannot generate clock glitching waveforms.
| + | |
| − | * VCC crowbar limited to coarse offset and width steps.
| + | |
| − | * Considerable jitter on glitch offset (due to interrupt-based source).
| + | |
| − | * Rising edge trigger only.
| + | |
| − | * Full-speed USB instead of high-speed USB.
| + | |
| − | | + | |
| − | Note that despite these limitations, ChipWhisperer-Nano can be used for attacking real devices. You can attack hardware crypto running on a microcontroller, or use power-analysis to recover a bootloader password or key. The fundamental synchronous architecture of the device (which powers all of our capture hardware tools) means it achieves considerably better performance than a regular asynchronous oscilloscope, even when that oscilloscope is running 5-20x faster.
| + | |
| − | | + | |
| − | == Connecting to External Targets ==
| + | |
| − | | + | |
| − | You have two options for connecting to external targets: to either break off the STM32F0 end, or to program it with a loop that keeps all I/O in tristate mode. Either way you will also need to add the following connectors:
| + | |
| − | | + | |
| − | * 20-pin connector (follows standard 20-pin pinout).
| + | |
| − | * Either 3-pin headers on MEASURE and GLITCH, or SMA connectors (only if end is broken off).
| + | |
| − | | + | |
| − | === Tri-State via Program ===
| + | |
| − | | + | |
| − | If using the tri-state mode, you should ensure the PDIC line is held LOW to avoid accidentally entering bootloader mode on the STM32F0.
| + | |
| − | | + | |
| − | There will be some additional noise due to the STM32F0 being on the power line. You can reduce this by opening the solder jumper that links the STM32F0 to the input stage.
| + | |
| − | | + | |
| − | === Cutting end Off ===
| + | |
| − | | + | |
| − | Similar to the ChipWhisperer-Lite, you can break off the end section. To do that, you will have to do the following:
| + | |
| − | | + | |
| − | # Use an xacto knife or similar to deeply score along the perforated holes on both top and bottom, being very careful not to cut towards or near your hand. You will need to hold the CWNANO in an appropriate jig or vice.
| + | |
| − | # Align the holes on the edge of a hard surface (suggested: block of wood), and firmly push down on the target end while pushing against down the PCB against the edge. The objective is to avoid flexing the PCB which is likely to break components or solder joints.
| + | |
| − | # With appropriate protection from the fiberglass dust, lightly sand the broken edges.
| + | |
| − | | + | |
| − | == Reprogramming ==
| + | |
| − | | + | |
| − | To reprogram the CW1101, you simply need to force the ERASE. This is done by shorting the "ERASE" jumper on the bottom side while plugging in the USB. This is easier to do by inserting the micro-USB end into the CW1101, and leaving the full-sized end not plugged into the computer. While shorting the ERASE jumper with tweezers have someone plug in the full-sized USB. The device should re-enumerate as a serial port, and the USB LED will be off or dimly lit.
| + | |
| − | | + | |
| − | == Beta Versions ==
| + | |
| − | | + | |
| − | There exist TWO beta (pre-release) versions floating around. The two versions were released at these events:
| + | |
| − | | + | |
| − | # CHES 2018 version
| + | |
| − | # arm TechCon version
| + | |
| − | | + | |
| − | These versions have some limitations. First, they have not been well tested and were not built under the normal production processes, so are not guaranteed to be as reliable w.r.t. soldering. Second, they have some specific hardware changes relative to the production units:
| + | |
| − | | + | |
| − | # arm TechCon and CHES version (-01 and -02 PCB revs): If you cut/snap the target off, the GPIO4 (trigger) pin is not connected. As this pin is required to be used for the ADC trigger, we recommend not cutting the targets off these versions. The GPIO4 trace is incorrectly routed THROUGH the target section. If you'd like to use an external target, either erase the STM32F0 or remove the IC.
| + | |
| − | # CHES version (-01 PCB rev) does not have the amplifier on the front-end. This results in poor analog performance.
| + | |
