As of August 2020 the site you are on (wiki.newae.com) is deprecated, and content is now at rtfm.newae.com.

Difference between revisions of "Tutorial A7 Glitch Buffer Attacks"

From ChipWhisperer Wiki
Jump to: navigation, search
(Made page)
 
 
(13 intermediate revisions by 4 users not shown)
Line 1: Line 1:
−
This tutorial discusses a specific type of glitch attack. It shows how a simple printing loop can be abused, causing a target to print some otherwise private information. This attack will be used to recover a plaintext without any knowledge of the encryption scheme being used.
+
{{Warningbox|This tutorial has been updated for ChipWhisperer 5 release. If you are using 4.x.x or 3.x.x see the "V4" or "V3" link in the sidebar.}}
  
−
= Background =
+
{{Infobox tutorial
−
== Real Firmware ==
+
|name                  = A7: Glitch Buffer Attacks
−
== Bootloader Setup ==
+
|image                  =  
 +
|caption                =  
 +
|software versions      =
 +
|capture hardware      = CW-Lite
 +
|Target Device          =  
 +
|Target Architecture    = XMEGA/Arm
 +
|Hardware Crypto        = No
 +
|Purchase Hardware      =  
 +
}}
  
−
= The Attack Plan =
+
<!-- To edit this, edit Template:Tutorial_boilerplate -->
−
== The Sensitive Code ==
+
{{Tutorial boilerplate}}
−
== Disassembly ==
+
  
−
= Attack Script & Results =
+
* Jupyter file: '''Fault_3-Glitch_Buffer_Attacks.ipynb'''
  
−
= Ideas =
 
−
* Change hex file to use BRLT
 
−
* Use volatile loop variables
 
  
−
{{Template:Tutorials}}
+
== XMEGA Target ==
−
[[Category:Tutorials]]
+
 
 +
See the following for using:
 +
* ChipWhisperer-Lite Classic (XMEGA)
 +
* ChipWhisperer-Lite Capture + XMEGA Target on UFO Board (including NAE-SCAPACK-L1/L2 users)
 +
* ChipWhisperer-Pro + XMEGA Target on UFO Board
 +
 
 +
https://chipwhisperer.readthedocs.io/en/latest/tutorials/fault_3-openadc-cwlitexmega.html#tutorial-fault-3-openadc-cwlitexmega
 +
 
 +
== ChipWhisperer-Lite ARM / STM32F3 Target ==
 +
 
 +
See the following for using:
 +
* ChipWhisperer-Lite 32-bit (STM32F3 Target)
 +
* ChipWhisperer-Lite Capture + STM32F3 Target on UFO Board (including NAE-SCAPACK-L1/L2 users)
 +
* ChipWhisperer-Pro + STM32F3 Target on UFO Board
 +
 
 +
https://chipwhisperer.readthedocs.io/en/latest/tutorials/fault_3-openadc-cwlitearm.html#tutorial-fault-3-openadc-cwlitearm
 +
 
 +
== ChipWhisperer Nano Target ==
 +
 
 +
This tutorial is not available for the ChipWhisperer Nano.

Latest revision as of 06:38, 29 July 2019

This tutorial has been updated for ChipWhisperer 5 release. If you are using 4.x.x or 3.x.x see the "V4" or "V3" link in the sidebar.

A7: Glitch Buffer Attacks
Target Architecture XMEGA/Arm
Hardware Crypto No
Software Release V3 / V4 / V5

This tutorial will introduce you to measuring the power consumption of a device under attack. It will demonstrate how you can view the difference between assembly instructions. In ChipWhisperer 5 Release, the software documentation is now held outside the wiki. See links below.

To see background on the tutorials see the Tutorial Introduction on ReadTheDocs, which explains what the links below mean. These wiki pages (that you are reading right now) only hold the hardware setup required, and you have to run the Tutorial via the Jupyter notebook itself. The links below take you to the expected Jupyter output from each tutorial, so you can compare your results to the expected/known-good results.

Running the tutorial uses the referenced Jupyter notebook file.

  • Jupyter file: Fault_3-Glitch_Buffer_Attacks.ipynb


XMEGA Target

See the following for using:

  • ChipWhisperer-Lite Classic (XMEGA)
  • ChipWhisperer-Lite Capture + XMEGA Target on UFO Board (including NAE-SCAPACK-L1/L2 users)
  • ChipWhisperer-Pro + XMEGA Target on UFO Board

https://chipwhisperer.readthedocs.io/en/latest/tutorials/fault_3-openadc-cwlitexmega.html#tutorial-fault-3-openadc-cwlitexmega

ChipWhisperer-Lite ARM / STM32F3 Target

See the following for using:

  • ChipWhisperer-Lite 32-bit (STM32F3 Target)
  • ChipWhisperer-Lite Capture + STM32F3 Target on UFO Board (including NAE-SCAPACK-L1/L2 users)
  • ChipWhisperer-Pro + STM32F3 Target on UFO Board

https://chipwhisperer.readthedocs.io/en/latest/tutorials/fault_3-openadc-cwlitearm.html#tutorial-fault-3-openadc-cwlitearm

ChipWhisperer Nano Target

This tutorial is not available for the ChipWhisperer Nano.

Retrieved from "http://wiki.newae.com/index.php?title=Tutorial_A7_Glitch_Buffer_Attacks&oldid=4096"