As of August 2020 the site you are on (wiki.newae.com) is deprecated, and content is now at rtfm.newae.com.

CW308T-MPC5748G

From ChipWhisperer Wiki
Revision as of 05:40, 14 March 2018 by Coflynn (Talk | contribs)

Jump to: navigation, search

This requires a programmer for the MPC5748G to reload code.

CW308T-MPC5748G
Mpc5748g web.jpg
Target Device NXP MPC5748G
Target Architecture PowerPC, Triple-Core
Hardware Crypto Possible

The MPC5748G target uses the NXP MPC5748G device, which is a triple-core PowerPC microcontroller for automotive applications. This target board has a number of interesting features including:

  • Two CAN interfaces, with with DB9.
  • Two serial ports (usable as LIN).
  • Various solder jumpers for variety of power analysis options.

Intended Usage

Overview of Features

Demo Application

The demo application provides examples of:

  • Using serial interface (implements Simple-Serial).
  • Using CAN interface.
  • Enabling all three cores, and communicating between cores with shared memory.
  • Running software AES on main core.
  • Running password-check (XOR) on main core.
  • Setup of clock network for using external clock from ChipWhisperer.

Offered Variants

The product is available in two variants.

  • The "NORMAL" variant. This variant has the following setup:
    • HSM is not programmed. We cannot provide details on this usage without a NDA.
    • The four OTP password groups have been programmed with 4 known passwords you can use for experimentation.
    • Device lifecycle is progressed to the "OEM Production" stage. This will prevent you from doing certain updates to the memory, but for most "normal" uses will not prevent reloading of code etc.
    • The demo application is loaded which includes ability to execute code loaded over the serial port (but is NOT a full bootloader).
    • Device censorship is disabled (this can be turned on using an external programmer).
    • The JTAG port has a known password, but is not locked (this can be turned on using an external programmer).


  • The "RAW" variant. This variant has the following setup:
    • HSM is not programmed. We cannot provide details on this usage without a NDA.
    • The demo application is loaded.
    • This devices will REQUIRE export documentation which entails an additional cost per order + a 1-6 week delay (dependent on Canadian processing time, normally it's faster). You may have additional restrictions at import but we cannot assist with those.

Most users are suggested to use the "NORMAL" variant. This variant allows you to get running immediately with our demo applications, and also program your own code into the device.

Programming

The device is designed to use an external programmer. It does not include a bootloader.

Random Useful Tips

Disassembling Source

If you are having trouble debugging, it can be useful to read out a memory segment and dissassemble it. This is possible with the included S32DS tools. The following shows the required command line:

 E:\nxp\S32DS_Power_v2017.R1\Cross_Tools\powerpc-eabivle-4_9\bin>powerpc-eabivle-objdump.exe -mpowerpc -Me200z4 -D -b srec -EB MPC5748G.s19 > MPC5748G.txt