458
edits
| As of August 2020 the site you are on (wiki.newae.com) is deprecated, and content is now at rtfm.newae.com. |
Changes
no edit summary
=== Using ChipWhisperer-Lite / ChipWhisperer-Pro ===
# 20-Pin Header connects Multi-Target to Capture Hardware
# VOUT Connects to SMA Cable
# SMA Cable connects to 'LNA' on CHA input
Jumpers on the Multi-Target Victim board are as follows:
[[File:xmegajumpers_cwlite.jpg]]
# NO jumpers mounted in AVR Portion (JP1,JP4-6,JP28) or SmartCard Portion. Note if your multi-target board does not have JP28, the TRIG jumper for the AVR, you will have to remove the AVR from the socket.
# 3.3V IO Level (JP20 set to INT.)
# FPGAOUT is routed to XTAL1 pin of XMEGA (requires jumper wire to JP4/JP15).
# The 7.37 MHz oscillator is not connected (JP18)
# The TXD & RXD jumpers are set on the XMEGA portion (JP5, JP6)
# The TRIG jumper is set on the XMEGA portion (JP13)
# The PWR jumper is set on the XMEGA portion (JP14)
# Power measurement taken from VCC shunt (JP12)
=== Using Capture Rev 2 ===
# SMA Cable connects to 'LNA' on CHA input
# USB-Mini connects to side (NB: Confirm jumper settings in next section first)
# NO jumpers mounted in AVR Portion (JP1,JP4-6,JP28) or SmartCard Portion. Note if your multi-target board does not have JP28, the TRIG jumper for the AVR, you will have to remove the AVR from the socket.
The following are specific instructions only for the ChipWhisperer-Lite or -Pro:
#From the Project menu select the Example Scripts and then ChipWhisperer-Lite: AES SimpleSerial on XMEGA# This should connect to the target board & run a few encryptions. You should check the "Encryption Status Manager" along with viewing the resulting power measurement.# Jump to the generic instructions (skip the CWC-Rev2 instructions next).
==== CW-Capture Rev2 Specific Setup ====
==== Trace Capture Instructions ====
#Switch from software to hardware crypto. To do this you'll have to change the <code>makefile<\/code> for the project.#: In the makefile, add a define for <code>HWCRYPTO=1</code>:<pre>#Multi-Target Board, XMEGA DevicePLATFORM = CW301_XMEGA#Optional - use hardware cryptoCDEFS += -DHWCRYPTO=1</pre>#Build a new hex-file, and program the file in.#Run a few 'capture 1' traces, and confirm (using the Encryption Status Manager) that the encryption was successful.
#Finally, set the offset to 1500, and number of samples to only 1000:
#:[[File:slength.png|image]]
== Appendix B-1: Full Attack Script for older (< 3.1.x) ==
Here is the full attack script for older releases:- '''DO NOT attempt to use with a current release (3.1.8 or later)'''.
<pre># Based on Ilya Kizhvatov's work, published as "Side Channel Analysis of AVR XMEGA Crypto Engine"
== Appendix B-2: Full Attack Script for 0.09 or Older Releases ==
Here is the full attack scriptfor VERY old releases:
<pre># Based on Ilya Kizhvatov's work, published as "Side Channel Analysis of AVR XMEGA Crypto Engine"
Atmel and XMEGA are registered trademarks or trademarks of Atmel Corporation or its subsidiaries, in the US and/or other countries.
== Links ==
{{Template:Tutorials}}
[[Category:Tutorials]]
