Yes, I understand your setup. I don’t understand why you need the measure port connected. It’s not used for glitching.
Hi Alex
Sure, Thank you. I have been following this lab ‘ChipWhisperer-Test-Results/tutorials/CWLITEARM/SOLN_Fault 2_2 - Voltage Glitching to Bypass Password.ipynb at main · newaetech/ChipWhisperer-Test-Results · GitHub’ where ChipWhisperer is connected with the CW308_STM32F and to glitch using the ChipShouter, keeping the below parameters
cs.hwtrig_mode = 1
cs.hwtrig_term = 1
scope.io.glitch_hp = True
scope.io.glitch_lp = True
def reboot_flush():
reset_target(scope)
target.flush()
if PLATFORM == “CWLITEXMEGA”:
scope.clock.clkgen_freq = 32E6
if SS_VER==‘SS_VER_2_1’:
target.baud = 23040032/7.37
else:
target.baud = 3840032/7.37
elif (PLATFORM == “CWLITEARM”) or (“F3” in PLATFORM):
scope.clock.clkgen_freq = 24E6
if SS_VER==‘SS_VER_2_1’:
target.baud = 23040024/7.37
else:
target.baud = 3840024/7.37
Following these settings below…
gc.set_range(“ext_offset”, 0, 150)
if scope._is_husky:
gc.set_range(“width”, 1900, 1901)
gc.set_range(“offset”, 2000, 2500)
gc.set_global_step([50])
gc.set_step(“ext_offset”, 1)
else:
if PLATFORM==“CWLITEXMEGA”:
gc.set_range(“width”, 43.5, 47.8)
gc.set_range(“offset”, -48, -10)
gc.set_range(“ext_offset”, 30, 45)
scope.glitch.repeat = 11
elif PLATFORM == “CWLITEARM”:
#should also work for the bootloader memory dump
gc.set_range(“width”, 30.7, 36)
gc.set_range(“offset”, -40, -35)
scope.glitch.repeat = 7
elif PLATFORM == “CW308_STM32F3”:
gc.set_range(“ext_offset”, 11, 31)
gc.set_range(“width”, 47.6, 49.6)
gc.set_range(“offset”, -19, -21.5)
scope.glitch.repeat = 5
gc.set_step(“ext_offset”, 1)
Every time EMFI pulse is emitted using ‘cs.pulse = 1’ per glitch attempt.
Should I need to keep any other constraints while following this lab here for the successful glitches using the ChipShouter? Please guide if I am missing anything here that needs.