As of August 2020 the site you are on (wiki.newae.com) is deprecated, and content is now at rtfm.newae.com.

Difference between revisions of "Installing ChipWhisperer"

From ChipWhisperer Wiki
Jump to: navigation, search
(Using VMWare Virtual Machine)
Line 1: Line 1:
 +
<span class="expandall">
 +
 
This page describes how to install the ChipWhisperer software.  
 
This page describes how to install the ChipWhisperer software.  
  
Line 6: Line 8:
 
* '''PyPi Package:''' <code>pip install chipwhisperer</code>. Only includes the software - doesn't come with the hardware source files.
 
* '''PyPi Package:''' <code>pip install chipwhisperer</code>. Only includes the software - doesn't come with the hardware source files.
 
* '''Git Repository:''' Get the latest, bleeding-edge features and bugs. Recommended if you're an experienced developer and you want to contribute to ChipWhisperer.
 
* '''Git Repository:''' Get the latest, bleeding-edge features and bugs. Recommended if you're an experienced developer and you want to contribute to ChipWhisperer.
 
  
 
{{CollapsibleSection
 
{{CollapsibleSection
Line 12: Line 13:
 
|content= Installing ChipWhisperer/Using VMWare Virtual Machine}}
 
|content= Installing ChipWhisperer/Using VMWare Virtual Machine}}
  
= Windows (XP or later) =
+
{{CollapsibleSection
 +
|intro= = Required Tools: Windows =
 +
|content= Installing ChipWhisperer/Required Tools: Windows}}
  
This section describes how to install the ChipWhisperer software for Windows. Note it is recommended to use the VMWare image if possible, since it includes all required tools out of the box!
+
{{CollapsibleSection
 +
|intro= = Required Tools: Linux =
 +
|content= Installing ChipWhisperer/Required Tools: Linux}}
  
== Python Setup ==
+
{{CollapsibleSection
 +
|intro= = Required Tools: Mac OS X =
 +
|content= Installing ChipWhisperer/Required Tools: Mac OS X}}
  
The first step is to install Python 2. If you already a recent version of Python installed (2.7.x), you can skip this step. Note that Python 3.x will not work with this codebase.
+
{{CollapsibleSection
 +
|intro= = Installing ChipWhisperer from Releases =
 +
|content= Installing ChipWhisperer/Installing ChipWhisperer from Releases}}
  
The recommend method of installing Python is to use a distribution called [http://winpython.github.io/ WinPython]. This setup avoids installing Python globally, and includes most of the software you will need. In addition it makes it possible to install 32-bit and 64-bit Python on the same system with minimal problems. This can be very useful as the 64-bit version is handy for doing analysis on large data sets.
+
{{CollapsibleSection
 +
|intro= = Installing ChipWhisperer from PyPi =
 +
|content= Installing ChipWhisperer/Installing ChipWhisperer from PyPi}}
  
<ol style="list-style-type: decimal;">
+
{{CollapsibleSection
<li>Install WinPython 2.7.x. Download the latest release in the 2.7.x branch from the [http://winpython.github.io/ WinPython] site. It's recommended to use the 32-bit version, but you can also use the 64-bit version. Note that certain drivers (such as the SmartCard driver) ''do not'' work on the 64-bit version. Choose a reasonable location to install this to - note the default is simply in the download directory. Instead it's recommended to find a directory such as <code>c:\WinPython32bit-2.7.10.3</code>, or into your local directory such as <code>c:\Users\yourname\WinPython-32bit-2.7.10.3</code>.</li>
+
|intro= = Installing ChipWhisperer from Git =
<li>Go to your installation directory for WinPython, and run the shortcut called '''WinPython Command Prompt.exe'''. This will give you a command prompt which is setup to run Python along with associated scripts.</li>
+
|content= Installing ChipWhisperer/Installing ChipWhisperer from Git}}
<li><p>Run the following commands to get needed packages:</p>
+
<pre>pip install pyqtgraph
+
pip install configobj</pre>
+
<p>Assuming you are planning on using the ChipWhisperer Capture Rev2 hardware, you also require [http://sourceforge.net/projects/pyusb/ PyUSB]. The easiest method is to again use pip:</p>
+
<pre>pip install pyusb</pre>
+
<p>If that command fails, you may need to specify a version. Note the latest version printed by the command, and try:</p>
+
<pre>pip install pyusb==1.0.0b1</pre></li>
+
<li><p>Optional: You can add the python.exe you just installed to your path. To do so navigate to your installation folder, and run the '''WinPython Control Panel.exe''' program. Then select ''Advanced -&gt; Register distribution...''. If you do not do this, you will have to run all commands in this document via the '''WinPython Command Prompt.exe'''.</p>
+
<p>If you plan on running both 32-bit and 64-bit Python, you should not register them. Instead explicitly call the correct Python by always running the '''WinPython Command Prompt.exe''', and then calling specific programs (such as CW Capture or Analyzer) from that command prompt.</p></li>
+
<li>Jump to [[#Getting_.26_Installing_ChipWhisperer]] to install ChipWhisperer software.</li></ol>
+
  
Note there are some optional packages you may want. Generally you can avoid them unless you have specific need of the features they enable:
+
{{CollapsibleSection
 
+
|intro= = Quick Tests =
'''FTD2XX''': [https://github.com/snmishra/ftd2xx ftd2xx] is required for SASEBO-W, SAKURA-G, and SASEBO-GII Support. To install this package, [https://github.com/snmishra/ftd2xx/archive/master.zip download a copy of the ftd2xx repository] and unzip it somewhere. Then run the following where you unzipped it:
+
|content= Installing ChipWhisperer/Quick Tests}}
 
+
<pre>python setup.py install</pre>
+
This package will also require you to install the [http://www.ftdichip.com/Drivers/D2XX.htm FTDI D2XX Drivers]. In the preceeding link simply find the correct driver for your OS Version &amp; install that.
+
 
+
'''MYSQL''': If you want to use the MySQL trace format (not used by default), you'll need to install [https://pypi.python.org/pypi/umysql umysql]:
+
 
+
<pre>pip install umysql</pre>
+
'''PYSCARD''': If planning on using a PS/SC smartcard reader (i.e. standard USB-connected reader), you will need to install [https://sourceforge.net/projects/pyscard/files/pyscard/ pyscard].
+
 
+
 
+
== Getting &amp; Installing ChipWhisperer ==
+
 
+
Assuming you've got a working Python installation, the next step is to install &amp; run ChipWhisperer itself. This requires you to get a copy of ChipWhisperer, you should download the [https://www.assembla.com/wiki/show/chipwhisperer/ChipWhisperer_Software_Firmware_Releases Latest Release]. Download &amp; unzip the file somewhere. Note if you are adventurous you can clone the GIT Repository <code>git://git.assembla.com/chipwhisperer.git</code> instead, but this '''may be broken''' so you should start with the latest release instead.
+
 
+
Generally 'somewhere' will become your ChipWhisperer working directory. These examples assume you've chosen <code>C:\chipwhisperer</code> as your working directory.
+
 
+
Once you've got the file, we run the Python install procedure again (setup.py). We slightly modify it to use the ''develop'' command to reflect that the files will probably be changing frequently. Again open a terminal and run the following, adjusting paths as needed:
+
 
+
<pre>cd c:\chipwhisperer\openadc\controlsw\python
+
python setup.py develop
+
cd c:\chipwhisperer\software
+
python setup.py develop</pre>
+
If you wish to confirm the installation worked, you can run ChipWhispererAnalyzer in the same terminal:
+
 
+
<pre>cd c:\chipwhisperer\software\chipwhisperer\
+
python CWAnalyzer.pyw</pre>
+
Alternatively you can just double-click on <code>CWAnalyzer.py</code> from Windows explorer, which should run the file using Python, ''provided you've registered Python to execute the .py extension''.
+
 
+
You can see a [http://www.youtube.com/watch?v=qd86cUD8iBs&hd=1 Video] of the Installation Procedure:
+
 
+
[[File:Youtube-win7-install.png|YouTubeWin7Install]]_
+
 
+
== Installing Hardware Drivers ==
+
 
+
Details of driver installation are on specific pages for supported hardware (such as hwcapturerev2 and naecw1173_cwlite). Drivers are available from [http://chipwhisperer.com ChipWhisperer] release section.
+
 
+
== Getting AVR Compiler Toolchain ==
+
 
+
The following section is '''NOT REQUIRED''' for your first attack - you can jump right to the tutorial if you wish. However you'll ultimately wish to modify the code of the device under test, and these instructions tell you how. You should first follow the tutorial to confirm your system is working before modifying the code however!
+
 
+
To build the code, you'll need to install WinAVR on Windows (if using the Virtual Machine, the following is ''not required'', as the VM comes setup with the AVR compiler already).
+
 
+
Note that the default codebase ''does not'' include the cryptographic code we attack. Instead you are required to add this code into the system -- if the external code changes, this may eventually be instead rolled into the main codebase. To setup the code, follow the following steps:
+
 
+
<ol style="list-style-type: decimal;">
+
<li><p><code>cd</code> to the directory with the avr-serial example, and run <code>make</code>:</p>
+
<pre>cd c:\chipwhisperer\hardware\victims\firmware\simpleserial-aes
+
make</pre>
+
<p>If this is successful, you'll see an output like the following:</p>
+
<p>[[File:Avr-build-ok.png|image]]</p>
+
<p>If instead you get an error something like <code>make: *** No rule to make target `simpleserial.elf', needed by `elf'.  Stop.</code>, this means a required file was missing.</p></li>
+
<li>Programming the target AVR is accomplished in one of two methods depending on your hardware. The ChipWhisperer Capture Rev 2 uses the external "AVR Studio" program, whereas the CW1173 and CW1200 use a programmer menu from the ChipWhisperer-Capture software. To see details refer to either [[CW1002_ChipWhisperer_Capture-Rev2#CWCR2:_Using_the_AVR_Programmer]] or [[CW1173_ChipWhisperer-Lite#CW-Lite:_Programming_AVR.2FXMEGA_Device]].</li></ol>
+
 
+
= Linux =
+
 
+
== Python Setup ==
+
 
+
On Linux, installing Python &amp; all the associated packages is much easier than on Windows. Typically you can install them from a package manager, if you are using Fedora Core or similar, just type:
+
 
+
<pre>$ sudo yum install python27 python27-devel python27-libs python-pyside numpy scipy python-configobj pyusb
+
$ sudo pip install pyqtgraph</pre>
+
On Ubuntu or similar:
+
 
+
<pre>$ sudo apt-get install python2.7 python2.7-dev python2.7-libs python-numpy python-scipy python-pyside python-configobj python-setuptools python-pip
+
$ sudo pip install pyusb
+
$ sudo pip install pyqtgraph
+
</pre>
+
 
+
== Getting ChipWhisperer ==
+
 
+
As in the Windows release, you can download a complete ChipWhisperer software release. Alternatively you can clone the ChipWhisperer repository with git, which is very simple on Linux:
+
 
+
<syntaxhighlight lang="bash">$ git clone git://git.assembla.com/chipwhisperer.git
+
$ cd chipwhisperer
+
$ git clone git://git.assembla.com/openadc.git</syntaxhighlight >
+
Be aware that the git code may be broken, although we try not to commit completely untested code to the master branch. Either way once you have the chipwhisperer directory somewhere, do the following from within that directory:
+
<syntaxhighlight lang="bash">$ cd software
+
$ sudo python setup.py develop
+
$ cd ../openadc/controlsw/python
+
$ sudo python setup.py develop</syntaxhighlight >
+
 
+
'''NB''': This assumes the python command links to Python-2.7, and not Python-3.x. You may need to specify either python2.7 or python27 as the command instead of python to force this.
+
 
+
== Hardware Drivers ==
+
 
+
The ''driver'' for Linux is built in, however you need to allow your user account to access the peripheral. To do so, you'll have to make a file called <code>/etc/udev/rules.d/99-newae.rules</code> . The contents of this file should be:
+
 
+
<pre># CW-Lite
+
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="ace2", MODE="0664", GROUP="plugdev"
+
 
+
# CW-1200
+
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="ace3", MODE="0664", GROUP="plugdev"
+
 
+
# CW-305 (Artix Target)
+
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="c305", MODE="0664", GROUP="plugdev"
+
 
+
# CW-CR2
+
SUBSYSTEM=="usb", ATTRS{idVendor}=="04b4", ATTRS{idProduct}=="8613", MODE="0664", GROUP="plugdev"
+
SUBSYSTEM=="usb", ATTRS{idVendor}=="221a", ATTRS{idProduct}=="0100", MODE="0664", GROUP="plugdev"
+
</pre>
+
Then add your username to the plugdev group:
+
 
+
<pre>$ sudo usermod -a -G plugdev YOUR-USERNAME</pre>
+
And reset the udev system:
+
 
+
<pre>$ sudo udevadm control --reload-rules</pre>
+
Finally log out &amp; in again for the group change to take effect.
+
 
+
You can always find the latest version of this file in [https://app.assembla.com/spaces/chipwhisperer/git/source/master/hardware/99-newae.rules GIT].
+
 
+
 
+
== FTDI Hardware Driver (SASEBO-W, SAKURA-G, SASEBO-GII) ==
+
 
+
'''This is only required for supporting FTDI-connected hardware''' such as the SASEBO-W, SAKURA-G, SASEBO-GII. This is NOT required for the ChipWhisperer Capture Rev2.
+
 
+
First, you need to install the D2XX drivers &amp; python module. See the section [[#Optional_Packages]].
+
 
+
Currently, there is a bit of a hack needed. You have to create (or modify if it exists) the file <code>/etc/udev/rules.d/99-libftdi.rules</code> . The following modifications will cause '''any FTDI-serial device to stop working''', so backup the existing file! The contents of this file should be:
+
 
+
<pre>SUBSYSTEM=="usb", ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", MODE="0664", GROUP="plugdev"
+
ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", RUN+="/bin/sh -c 'echo $kernel &gt; /sys/bus/usb/drivers/ftdi_sio/unbind'"</pre>
+
Then add your username to the plugdev group (if not already done):
+
 
+
<pre>$ sudo usermod -a -G plugdev YOUR-USERNAME</pre>
+
And reset the udev system:
+
 
+
<pre>$ sudo udevadm control --reload-rules</pre>
+
Finally log out &amp; in again for the group change to take effect.
+
 
+
== Getting the AVR Toolchain ==
+
Many of the tutorials use the AVR XMEGA microcontrollers as a target. In order to compile code for these targets, you'll need the AVR toolchain. This is easy to set up:
+
<pre>
+
sudo apt-get install avr-libc gcc-avr
+
</pre>
+
 
+
= MAC OS X =
+
 
+
The following have been tested on Mac OS X Yosemite (10.10) - earlier versions may not have a recent enough Python installation (recommended 2.7.6 or later). It's possible to install other Python versions on your Mac OS X via the 'homebrew' system, we will use this for installing a few additional required tools.
+
 
+
== Python Setup ==
+
 
+
<ol style="list-style-type: decimal;">
+
<li>Ensure your user account has a password. In order for the 'sudo' command to work it requires you to type your password, so if you don't have one enabled be sure to set a temporary password now.</li>
+
<li><p>Install the 'homebrew' system, see [http://brew.sh brew.sh] for details. Briefly, you can install it by pasting the following in a terminal:</p>
+
<pre>$ ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"</pre></li>
+
<li><p>Install PySide using homebrew:</p>
+
<pre>$ brew install pyside</pre>
+
<p>The install will probably print a message like this:</p>
+
<blockquote><p>[[File:Install_macosx_brewpath.png|image]]</p></blockquote>
+
<p>Note you must run that command in order to successfully import the modules, in this example it would be:</p>
+
<pre>$ mkdir -p /Users/macmini/Library/Python/2.7/lib/python/site-packages
+
$ echo 'import site; site.addsitedir("/usr/local/lib/python2.7/site-packages")' >> /Users/macmini/Library/Python/2.7/lib/python/site-packages/homebrew.pth</pre></li></ol>
+
 
+
== Working SciPy Distribution ==
+
 
+
You may need to upgrade your scipy from the base install, if you wish to do template attacks. This is not needed for other attacks, so please only proceed with the following if you receive an error that your version of scipy is too old.
+
 
+
The easiest method is to use brew again:
+
 
+
brew install scipy
+
 
+
You will also need to follow the instructions as above (inserting the link to the brew site-packages location). You will finally need to run the following:
+
 
+
brew link --overwrite numpy
+
 
+
== AVR-GCC Install ==
+
 
+
You can easily use brew to install avr-gcc, as decribed at [https://github.com/osx-cross/homebrew-avr/ OSX-Cross Project]:
+
 
+
$ brew tap osx-cross/avr
+
+
$ brew install avr-libc
+
 
+
= Making sure that everything works =
+
Try running the automated test scripts at chipwhisperer/software/chipwhisperer/tests/. Example:
+
$ python chipwhisperer/software/chipwhisperer/tests/aescpaeattackscript.py
+
$ python chipwhisperer/software/chipwhisperer/tests/descpaeattackscript.py 
+
$ python chipwhisperer/software/chipwhisperer/tests/glitchscript.py
+
$ python chipwhisperer/software/chipwhisperer/tests/templateattackscript.py
+
They should all work out of the box with the Chipwhisper Lite hardware.
+

Revision as of 09:50, 10 February 2017

This page describes how to install the ChipWhisperer software.

There are four ways to set up ChipWhisperer:

  • VMWare Virtual Machine: Get a pre-prepared virtual machine image with all of the required tools already installed. Recommended for beginners.
  • ChipWhisperer Releases: Get a zip file with the latest stable ChipWhisperer code and run it on your own environment.
  • PyPi Package: pip install chipwhisperer. Only includes the software - doesn't come with the hardware source files.
  • Git Repository: Get the latest, bleeding-edge features and bugs. Recommended if you're an experienced developer and you want to contribute to ChipWhisperer.


If this is your first time using the ChipWhisperer toolchain, the easiest way to start is to use a virtual machine with everything already set up for you.

  1. Install the VMWare Player software (free). Note that this program is available for Windows and Linux - if you're running a Mac, you're out of luck.
  2. Download a ChipWhisperer virtual machine image release. Look for the latest release (4.0.1 as of now).
  3. Unzip the VMWare image and open the file ChipWhisperer xxxxx.vmx in VMWare Player.

Once you've opened this, you may want the latest version of the ChipWhisperer software - the version packaged with the VM image could be quite old. To do this, open LXTerminal in Ubuntu and run the following commands:

cd chipwhisperer
git pull

If you ever want to switch versions, you can run

git checkout <release number>

For example, git checkout 0.11RC will move back to the 0.11 release. git checkout master will always give you the latest software.

The password for the default account cwuser is cwpassword

There's an old Youtube tutorial of this setup available online.

= Using VMWare Virtual Machine = If this is your first time using the ChipWhisperer toolchain, the easiest way to start is to use a virtual machine with everything already set up for you.

  1. Install the VMWare Player software (free). Note that this program is available for Windows and Linux - if you're running a Mac, you're out of luck.
  2. Download a ChipWhisperer virtual machine image release. Look for the latest release (4.0.1 as of now).
  3. Unzip the VMWare image and open the file ChipWhisperer xxxxx.vmx in VMWare Player.

Once you've opened this, you may want the latest version of the ChipWhisperer software - the version packaged with the VM image could be quite old. To do this, open LXTerminal in Ubuntu and run the following commands:

cd chipwhisperer
git pull

If you ever want to switch versions, you can run

git checkout <release number>

For example, git checkout 0.11RC will move back to the 0.11 release. git checkout master will always give you the latest software.

The password for the default account cwuser is cwpassword

There's an old Youtube tutorial of this setup available online.


Required Tools: Windows

Right-black-arrow.png

Python

For any of the other installation methods, you'll need to have Python 2 installed on your computer. If you already a recent version of Python installed (2.7.x), you can skip this step. Note that Python 3.x will not work with this codebase. There's also a bit of setup that's needed to get other tools and prepare other drivers.

The recommend method of installing Python is to use a distribution called WinPython. This setup avoids installing Python globally, and includes most of the software you will need. In addition it makes it possible to install 32-bit and 64-bit Python on the same system with minimal problems. This can be very useful as the 64-bit version is handy for doing analysis on large data sets.

To install WinPython 2.7.x, Download a release in the 2.7.x branch from the WinPython site. It's recommended to use the 32-bit version, but you can also use the 64-bit version. Also, note that the recent releases (like WinPython-32bit-2.7.13.0Zero) don't come with any pre-installed packages. We recommend WinPython 2.7.10.3.

Note that certain drivers (such as the SmartCard driver) do not work on the 64-bit version. Choose a reasonable location to install this to - note the default is simply in the download directory. Instead it's recommended to find a directory such as c:\WinPython32bit-2.7.10.3, or into your local directory such as c:\Users\yourname\WinPython-32bit-2.7.10.3.

Go to your installation directory for WinPython, and run the shortcut called WinPython Command Prompt.exe. This will give you a command prompt which is setup to run Python along with associated scripts.

Optional: You can add the python.exe you just installed to your PATH. To do so navigate to your installation folder, and run the WinPython Control Panel.exe program. Then select Advanced -> Register distribution.... If you do not do this, you will have to run all commands in this document via the WinPython Command Prompt.exe. If you plan on running both 32-bit and 64-bit Python, you should not register them. Instead explicitly call the correct Python by always running the WinPython Command Prompt.exe, and then calling specific programs (such as CW Capture or Analyzer) from that command prompt.

Python Packages

There are a number of packages that the ChipWhisperer project uses. You'll need to install these so that the software can run. Note that the PyPi install process should automatically install these, so you shouldn't need to manually install everything there.

Run the following commands to get the needed packages:

  • PyQTGraph: pip install pyqtgraph
  • ConfigObj: pip install configobj

You might also need some extra packages. Generally you can avoid them unless you have specific need of the features they enable:

PyUSB: if you're planning to use the ChipWhisperer Capture Rev2 hardware, this is necessary. You can install this using pip:

  • pip install pyusb
  • If that fails, try specifying the latest version, like: pip install pyusb==1.0.0b1

FTD2XX: ftd2xx is required for SASEBO-W, SAKURA-G, and SASEBO-GII Support. To install this package, download a copy of the ftd2xx repository and unzip it somewhere. Then run the following where you unzipped it:

python setup.py install

This package will also require you to install the FTDI D2XX Drivers. In the preceeding link simply find the correct driver for your OS Version and install that.

MYSQL: If you want to use the MySQL trace format (not used by default), you'll need to install umysql:

pip install umysql

PYSCARD: If planning on using a PS/SC smartcard reader (i.e. standard USB-connected reader), you will need to install pyscard.

Installing Hardware Drivers

Details of driver installation are on specific pages for supported hardware (such as cwcapturerev2 and naecw1173_cwlite). Drivers are available from ChipWhisperer release section.

Getting AVR Compiler Toolchain

The following section is not required for your first attack - you can jump right to the tutorial if you wish. However you'll ultimately wish to modify the code of the device under test, and these instructions tell you how. You should first follow the tutorial to confirm your system is working before modifying the code however!

To build the code, you'll need to install avr-gcc on Windows (if using the Virtual Machine, the following is not required, as the VM comes setup with the AVR compiler already). On Windows, you could choose to install:

To test the code build, follow these steps:

cd to the directory with the avr-serial example, and run make:

cd c:\chipwhisperer\hardware\victims\firmware\simpleserial-aes
make

If this is successful, you'll see an output like the following:

image

If instead you get an error something like make: *** No rule to make target `simpleserial.elf', needed by `elf'. Stop., this means a required file was missing.

Programming the target AVR is accomplished in one of two methods depending on your hardware. The ChipWhisperer Capture Rev 2 uses the external "AVR Studio" program, whereas the CW1173 and CW1200 use a programmer menu from the ChipWhisperer-Capture software.

For details about programming the targets, see Tutorial B1 Building a SimpleSerial Project.

WinAVR Path Settings

By default, WinAVR is added to your system path. This means you can run avr-gcc, make and other programs from your normal Windows command line. You may not want this on certain systems where you already have similar tools installed. In which case either uncheck the Add WinAVR to Path option, or edit your system path to remove the WinAVR directories.

If you do not add it to the system path, you’ll need a method of readding the WinAVR directories when you want to use WinAVR. To do so create a file called winavr.bat in C:\WinAVR-20100110 with the following contents:

set PATH=%PATH%;C:\WinAVR-20100110\bin;C:\WinAVR-20100110\utils\bin
cmd

Now when you want to run WinAVR (e.g. to continue the examples here), you can simply double-click on the winavr.bat file. This will configure the path for just that terminal, rather than every terminal you open.

Note if using WinAVR on Windows 8.1/10, you must replace the dll msys-1.0.dll with an updated version. See Windows 8.1 Fix for a link to this DLL replacement.

= Required Tools: Windows =

Python

For any of the other installation methods, you'll need to have Python 2 installed on your computer. If you already a recent version of Python installed (2.7.x), you can skip this step. Note that Python 3.x will not work with this codebase. There's also a bit of setup that's needed to get other tools and prepare other drivers.

The recommend method of installing Python is to use a distribution called WinPython. This setup avoids installing Python globally, and includes most of the software you will need. In addition it makes it possible to install 32-bit and 64-bit Python on the same system with minimal problems. This can be very useful as the 64-bit version is handy for doing analysis on large data sets.

To install WinPython 2.7.x, Download a release in the 2.7.x branch from the WinPython site. It's recommended to use the 32-bit version, but you can also use the 64-bit version. Also, note that the recent releases (like WinPython-32bit-2.7.13.0Zero) don't come with any pre-installed packages. We recommend WinPython 2.7.10.3.

Note that certain drivers (such as the SmartCard driver) do not work on the 64-bit version. Choose a reasonable location to install this to - note the default is simply in the download directory. Instead it's recommended to find a directory such as c:\WinPython32bit-2.7.10.3, or into your local directory such as c:\Users\yourname\WinPython-32bit-2.7.10.3.

Go to your installation directory for WinPython, and run the shortcut called WinPython Command Prompt.exe. This will give you a command prompt which is setup to run Python along with associated scripts.

Optional: You can add the python.exe you just installed to your PATH. To do so navigate to your installation folder, and run the WinPython Control Panel.exe program. Then select Advanced -> Register distribution.... If you do not do this, you will have to run all commands in this document via the WinPython Command Prompt.exe. If you plan on running both 32-bit and 64-bit Python, you should not register them. Instead explicitly call the correct Python by always running the WinPython Command Prompt.exe, and then calling specific programs (such as CW Capture or Analyzer) from that command prompt.

Python Packages

There are a number of packages that the ChipWhisperer project uses. You'll need to install these so that the software can run. Note that the PyPi install process should automatically install these, so you shouldn't need to manually install everything there.

Run the following commands to get the needed packages:

  • PyQTGraph: pip install pyqtgraph
  • ConfigObj: pip install configobj

You might also need some extra packages. Generally you can avoid them unless you have specific need of the features they enable:

PyUSB: if you're planning to use the ChipWhisperer Capture Rev2 hardware, this is necessary. You can install this using pip:

  • pip install pyusb
  • If that fails, try specifying the latest version, like: pip install pyusb==1.0.0b1

FTD2XX: ftd2xx is required for SASEBO-W, SAKURA-G, and SASEBO-GII Support. To install this package, download a copy of the ftd2xx repository and unzip it somewhere. Then run the following where you unzipped it:

python setup.py install

This package will also require you to install the FTDI D2XX Drivers. In the preceeding link simply find the correct driver for your OS Version and install that.

MYSQL: If you want to use the MySQL trace format (not used by default), you'll need to install umysql:

pip install umysql

PYSCARD: If planning on using a PS/SC smartcard reader (i.e. standard USB-connected reader), you will need to install pyscard.

Installing Hardware Drivers

Details of driver installation are on specific pages for supported hardware (such as cwcapturerev2 and naecw1173_cwlite). Drivers are available from ChipWhisperer release section.

Getting AVR Compiler Toolchain

The following section is not required for your first attack - you can jump right to the tutorial if you wish. However you'll ultimately wish to modify the code of the device under test, and these instructions tell you how. You should first follow the tutorial to confirm your system is working before modifying the code however!

To build the code, you'll need to install avr-gcc on Windows (if using the Virtual Machine, the following is not required, as the VM comes setup with the AVR compiler already). On Windows, you could choose to install:

To test the code build, follow these steps:

cd to the directory with the avr-serial example, and run make:

cd c:\chipwhisperer\hardware\victims\firmware\simpleserial-aes
make

If this is successful, you'll see an output like the following:

image

If instead you get an error something like make: *** No rule to make target `simpleserial.elf', needed by `elf'. Stop., this means a required file was missing.

Programming the target AVR is accomplished in one of two methods depending on your hardware. The ChipWhisperer Capture Rev 2 uses the external "AVR Studio" program, whereas the CW1173 and CW1200 use a programmer menu from the ChipWhisperer-Capture software.

For details about programming the targets, see Tutorial B1 Building a SimpleSerial Project.

WinAVR Path Settings

By default, WinAVR is added to your system path. This means you can run avr-gcc, make and other programs from your normal Windows command line. You may not want this on certain systems where you already have similar tools installed. In which case either uncheck the Add WinAVR to Path option, or edit your system path to remove the WinAVR directories.

If you do not add it to the system path, you’ll need a method of readding the WinAVR directories when you want to use WinAVR. To do so create a file called winavr.bat in C:\WinAVR-20100110 with the following contents:

set PATH=%PATH%;C:\WinAVR-20100110\bin;C:\WinAVR-20100110\utils\bin
cmd

Now when you want to run WinAVR (e.g. to continue the examples here), you can simply double-click on the winavr.bat file. This will configure the path for just that terminal, rather than every terminal you open.

Note if using WinAVR on Windows 8.1/10, you must replace the dll msys-1.0.dll with an updated version. See Windows 8.1 Fix for a link to this DLL replacement.


Required Tools: Linux

Right-black-arrow.png

Python

On Linux, installing Python & all the associated packages is straightforward. Typically you can install them from a package manager, if you are using Fedora Core or similar, just type:

$ sudo yum install python27 python27-devel python27-libs python-pyside numpy scipy python-configobj pyusb
$ sudo pip install pyqtgraph

On Ubuntu or similar:

$ sudo apt-get install python2.7 python2.7-dev python2.7-libs python-numpy python-scipy python-pyside python-configobj python-setuptools python-pip
$ sudo pip install pyusb
$ sudo pip install pyqtgraph

Getting the AVR Toolchain

Many of the tutorials use the AVR XMEGA microcontrollers as a target. In order to compile code for these targets, you'll need the AVR toolchain. This is easy to set up:

sudo apt-get install avr-libc gcc-avr

Hardware Drivers

The driver for Linux is built in, however you need to allow your user account to access the peripheral. To do so, you'll have to make a file called /etc/udev/rules.d/99-newae.rules . The contents of this file should be:

# CW-Lite
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="ace2", MODE="0664", GROUP="plugdev"

# CW-1200
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="ace3", MODE="0664", GROUP="plugdev"

# CW-305 (Artix Target)
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="c305", MODE="0664", GROUP="plugdev"

# CW-CR2
SUBSYSTEM=="usb", ATTRS{idVendor}=="04b4", ATTRS{idProduct}=="8613", MODE="0664", GROUP="plugdev"
SUBSYSTEM=="usb", ATTRS{idVendor}=="221a", ATTRS{idProduct}=="0100", MODE="0664", GROUP="plugdev"

Then add your username to the plugdev group:

$ sudo usermod -a -G plugdev YOUR-USERNAME

And reset the udev system:

$ sudo udevadm control --reload-rules

Finally log out & in again for the group change to take effect.

You can always find the latest version of this file in GIT.


FTDI Hardware Driver (SASEBO-W, SAKURA-G, SASEBO-GII)

This is only required for supporting FTDI-connected hardware such as the SASEBO-W, SAKURA-G, SASEBO-GII. This is NOT required for the ChipWhisperer Capture Rev2.

First, you need to install the D2XX drivers & python module. See the section #Optional_Packages.

Currently, there is a bit of a hack needed. You have to create (or modify if it exists) the file /etc/udev/rules.d/99-libftdi.rules . The following modifications will cause any FTDI-serial device to stop working, so backup the existing file! The contents of this file should be:

SUBSYSTEM=="usb", ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", MODE="0664", GROUP="plugdev"
ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", RUN+="/bin/sh -c 'echo $kernel > /sys/bus/usb/drivers/ftdi_sio/unbind'"

Then add your username to the plugdev group (if not already done):

$ sudo usermod -a -G plugdev YOUR-USERNAME

And reset the udev system:

$ sudo udevadm control --reload-rules

Finally log out & in again for the group change to take effect.

= Required Tools: Linux =

Python

On Linux, installing Python & all the associated packages is straightforward. Typically you can install them from a package manager, if you are using Fedora Core or similar, just type:

$ sudo yum install python27 python27-devel python27-libs python-pyside numpy scipy python-configobj pyusb
$ sudo pip install pyqtgraph

On Ubuntu or similar:

$ sudo apt-get install python2.7 python2.7-dev python2.7-libs python-numpy python-scipy python-pyside python-configobj python-setuptools python-pip
$ sudo pip install pyusb
$ sudo pip install pyqtgraph

Getting the AVR Toolchain

Many of the tutorials use the AVR XMEGA microcontrollers as a target. In order to compile code for these targets, you'll need the AVR toolchain. This is easy to set up:

sudo apt-get install avr-libc gcc-avr

Hardware Drivers

The driver for Linux is built in, however you need to allow your user account to access the peripheral. To do so, you'll have to make a file called /etc/udev/rules.d/99-newae.rules . The contents of this file should be:

# CW-Lite
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="ace2", MODE="0664", GROUP="plugdev"

# CW-1200
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="ace3", MODE="0664", GROUP="plugdev"

# CW-305 (Artix Target)
SUBSYSTEM=="usb", ATTRS{idVendor}=="2b3e", ATTRS{idProduct}=="c305", MODE="0664", GROUP="plugdev"

# CW-CR2
SUBSYSTEM=="usb", ATTRS{idVendor}=="04b4", ATTRS{idProduct}=="8613", MODE="0664", GROUP="plugdev"
SUBSYSTEM=="usb", ATTRS{idVendor}=="221a", ATTRS{idProduct}=="0100", MODE="0664", GROUP="plugdev"

Then add your username to the plugdev group:

$ sudo usermod -a -G plugdev YOUR-USERNAME

And reset the udev system:

$ sudo udevadm control --reload-rules

Finally log out & in again for the group change to take effect.

You can always find the latest version of this file in GIT.


FTDI Hardware Driver (SASEBO-W, SAKURA-G, SASEBO-GII)

This is only required for supporting FTDI-connected hardware such as the SASEBO-W, SAKURA-G, SASEBO-GII. This is NOT required for the ChipWhisperer Capture Rev2.

First, you need to install the D2XX drivers & python module. See the section #Optional_Packages.

Currently, there is a bit of a hack needed. You have to create (or modify if it exists) the file /etc/udev/rules.d/99-libftdi.rules . The following modifications will cause any FTDI-serial device to stop working, so backup the existing file! The contents of this file should be:

SUBSYSTEM=="usb", ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", MODE="0664", GROUP="plugdev"
ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", RUN+="/bin/sh -c 'echo $kernel > /sys/bus/usb/drivers/ftdi_sio/unbind'"

Then add your username to the plugdev group (if not already done):

$ sudo usermod -a -G plugdev YOUR-USERNAME

And reset the udev system:

$ sudo udevadm control --reload-rules

Finally log out & in again for the group change to take effect.


Required Tools: Mac OS X

Right-black-arrow.png

Python

The following have been tested on Mac OS X Yosemite (10.10) - earlier versions may not have a recent enough Python installation (recommended 2.7.6 or later). It's possible to install other Python versions on your Mac OS X via the 'homebrew' system, we will use this for installing a few additional required tools.

  1. Ensure your user account has a password. In order for the 'sudo' command to work it requires you to type your password, so if you don't have one enabled be sure to set a temporary password now.
  2. Install the 'homebrew' system, see brew.sh for details. Briefly, you can install it by pasting the following in a terminal:

    $ ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"
  3. As PySide is based on Qt 4, which is not officially supported by Homebrew, you will need to load the homebrew-qt4 tap:

    $ brew tap cartr/qt4
  4. Install PySide using homebrew:

    $ brew install pyside

    If you recieve an error saying that no such package exists, you can also install PySide using the pip installer

    pip install -U PySide

    The install will probably print a message like this:

    image

    Note you must run that command in order to successfully import the modules, in this example it would be:

    $ mkdir -p /Users/macmini/Library/Python/2.7/lib/python/site-packages
    $ echo 'import site; site.addsitedir("/usr/local/lib/python2.7/site-packages")' >> /Users/macmini/Library/Python/2.7/lib/python/site-packages/homebrew.pth

SciPy

You may need to upgrade your SciPy from the base install if you wish to do template attacks. This is not needed for other attacks, so please only proceed with the following if you receive an error that your version of scipy is too old.

The easiest method is to use brew again:

brew install scipy

You will also need to follow the instructions as above (inserting the link to the brew site-packages location). You will finally need to run the following:

brew link --overwrite numpy

libusb

libusb is needed for the ChipWhisperer software to communicate with the board.

Again, use brew:

brew install libusb

AVR-GCC

You can easily use brew to install avr-gcc, as decribed at OSX-Cross Project:

$ brew tap osx-cross/avr

$ brew install avr-gcc
= Required Tools: Mac OS X =

Python

The following have been tested on Mac OS X Yosemite (10.10) - earlier versions may not have a recent enough Python installation (recommended 2.7.6 or later). It's possible to install other Python versions on your Mac OS X via the 'homebrew' system, we will use this for installing a few additional required tools.

  1. Ensure your user account has a password. In order for the 'sudo' command to work it requires you to type your password, so if you don't have one enabled be sure to set a temporary password now.
  2. Install the 'homebrew' system, see brew.sh for details. Briefly, you can install it by pasting the following in a terminal:

    $ ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"
  3. As PySide is based on Qt 4, which is not officially supported by Homebrew, you will need to load the homebrew-qt4 tap:

    $ brew tap cartr/qt4
  4. Install PySide using homebrew:

    $ brew install pyside

    If you recieve an error saying that no such package exists, you can also install PySide using the pip installer

    pip install -U PySide

    The install will probably print a message like this:

    image

    Note you must run that command in order to successfully import the modules, in this example it would be:

    $ mkdir -p /Users/macmini/Library/Python/2.7/lib/python/site-packages
    $ echo 'import site; site.addsitedir("/usr/local/lib/python2.7/site-packages")' >> /Users/macmini/Library/Python/2.7/lib/python/site-packages/homebrew.pth

SciPy

You may need to upgrade your SciPy from the base install if you wish to do template attacks. This is not needed for other attacks, so please only proceed with the following if you receive an error that your version of scipy is too old.

The easiest method is to use brew again:

brew install scipy

You will also need to follow the instructions as above (inserting the link to the brew site-packages location). You will finally need to run the following:

brew link --overwrite numpy

libusb

libusb is needed for the ChipWhisperer software to communicate with the board.

Again, use brew:

brew install libusb

AVR-GCC

You can easily use brew to install avr-gcc, as decribed at OSX-Cross Project:

$ brew tap osx-cross/avr

$ brew install avr-gcc


Installing ChipWhisperer from Releases

Right-black-arrow.png

Once you have a working Python installation, you're ready to install and run ChipWhisperer.

First, download a ChipWhisperer release. You can get these from the Releases page. Generally, the latest release is a good choice, but you might need an older version for various reasons. You want the source code in .zip or .tar.gz format - not a VMWare image.

Next, uncompress your downloaded source code somewhere. Generally, 'somewhere' will become your ChipWhisperer working directory. For example, on Windows, you might want to use C:\chipwhisperer\.

Once you've got the file, run the Python install procedure (setup.py). Use the develop command to indicate that the files will probably be changing frequently. to do this, open a terminal and run the following, adjusting paths as needed:

cd c:\chipwhisperer\software
python setup.py develop

NB: This assumes the python command links to Python-2.7, and not Python-3.x. You may need to specify either python2.7 or python27 as the command instead of python to force this.

In Linux, you might need to run this as root: sudo python setup.py develop

The installation is now finished. To confirm the installation worked, you can run ChipWhispererAnalyzer in the same terminal:

cd c:\chipwhisperer\software\chipwhisperer\
python CWAnalyzer.pyw

Alternatively you can just double-click on CWAnalyzer.py, which should run the file using Python, provided you've registered Python to execute the .py extension.

You can see a Video of the installation procedure:

Youtube-win7-install.png

= Installing ChipWhisperer from Releases = Once you have a working Python installation, you're ready to install and run ChipWhisperer.

First, download a ChipWhisperer release. You can get these from the Releases page. Generally, the latest release is a good choice, but you might need an older version for various reasons. You want the source code in .zip or .tar.gz format - not a VMWare image.

Next, uncompress your downloaded source code somewhere. Generally, 'somewhere' will become your ChipWhisperer working directory. For example, on Windows, you might want to use C:\chipwhisperer\.

Once you've got the file, run the Python install procedure (setup.py). Use the develop command to indicate that the files will probably be changing frequently. to do this, open a terminal and run the following, adjusting paths as needed:

cd c:\chipwhisperer\software
python setup.py develop

NB: This assumes the python command links to Python-2.7, and not Python-3.x. You may need to specify either python2.7 or python27 as the command instead of python to force this.

In Linux, you might need to run this as root: sudo python setup.py develop

The installation is now finished. To confirm the installation worked, you can run ChipWhispererAnalyzer in the same terminal:

cd c:\chipwhisperer\software\chipwhisperer\
python CWAnalyzer.pyw

Alternatively you can just double-click on CWAnalyzer.py, which should run the file using Python, provided you've registered Python to execute the .py extension.

You can see a Video of the installation procedure:

Youtube-win7-install.png


Installing ChipWhisperer from PyPi

Right-black-arrow.png

An alternative install method is to get ChipWhisperer directly from the Python Package Index. To do this, run the command

pip install chipwhisperer

Note that this package doesn't include anything except the software. The hardware pieces (including schematics, gerbers, and firmware for victims/scopes) isn't included here. However, if you need a couple of the utilities from the software, this is a quick and lightweight way to install them.

= Installing ChipWhisperer from PyPi = An alternative install method is to get ChipWhisperer directly from the Python Package Index. To do this, run the command

pip install chipwhisperer

Note that this package doesn't include anything except the software. The hardware pieces (including schematics, gerbers, and firmware for victims/scopes) isn't included here. However, if you need a couple of the utilities from the software, this is a quick and lightweight way to install them.


Installing ChipWhisperer from Git

Right-black-arrow.png

If you want the cutting-edge version of ChipWhisperer, you can clone the repository. If you have Git already set up, this is easy to do:

git clone https://github.com/newaetech/chipwhisperer.git
cd chipwhisperer
git checkout develop
cd software
python setup.py develop --user

The user flag installs ChipWhisperer in the user's local python site-packages directory. Note bleeding-edge development is done on the "develop" branch, which you probably want if you are trying GIT.

You may also want the OpenADC software, which is necessary to build new firmware for the ChipWhisperer FPGA. This is unnecessary for most users. If you need it:

cd ..
git submodule init
git submodule update
cd openadc/controlsw/python
python setup.py develop --user

= Installing ChipWhisperer from Git = If you want the cutting-edge version of ChipWhisperer, you can clone the repository. If you have Git already set up, this is easy to do:

git clone https://github.com/newaetech/chipwhisperer.git
cd chipwhisperer
git checkout develop
cd software
python setup.py develop --user

The user flag installs ChipWhisperer in the user's local python site-packages directory. Note bleeding-edge development is done on the "develop" branch, which you probably want if you are trying GIT.

You may also want the OpenADC software, which is necessary to build new firmware for the ChipWhisperer FPGA. This is unnecessary for most users. If you need it:

cd ..
git submodule init
git submodule update
cd openadc/controlsw/python
python setup.py develop --user


Quick Tests

Right-black-arrow.png

Try running the automated test scripts at chipwhisperer/software/chipwhisperer/tests/. Example:

$ python chipwhisperer/software/chipwhisperer/tests/aescpaeattackscript.py
$ python chipwhisperer/software/chipwhisperer/tests/descpaeattackscript.py 
$ python chipwhisperer/software/chipwhisperer/tests/glitchscript.py
$ python chipwhisperer/software/chipwhisperer/tests/templateattackscript.py

They should all work out of the box with the Chipwhisper Lite hardware.

= Quick Tests = Try running the automated test scripts at chipwhisperer/software/chipwhisperer/tests/. Example:

$ python chipwhisperer/software/chipwhisperer/tests/aescpaeattackscript.py
$ python chipwhisperer/software/chipwhisperer/tests/descpaeattackscript.py 
$ python chipwhisperer/software/chipwhisperer/tests/glitchscript.py
$ python chipwhisperer/software/chipwhisperer/tests/templateattackscript.py

They should all work out of the box with the Chipwhisper Lite hardware.