Issues with fault101 lab 1_1

Embedded Security Glitching
1

Hi there, I’m new to the Chipwhisperer. I’ve successfully completed the SCA101 and SCA201 courses, and never had issues with capturing traces etc.
I’m struggling with the fault101 course, namely that even with using the solution code, and correct configuration, I cannot seem to get any results, the glitches have no effect, the only output in the displayed stats is “normal”.
I’m using a STM32F415 connected to a CWLITE-ARM target board. I have connected them using the 20pin, the microusb, and the coax cable to the “glitch” port.
My configuration is as follows:

SCOPETYPE = 'OPENADC'
PLATFORM = 'CW308_STM32F4'
SS_VER='SS_VER_2_1'

clk_src     = clkgen
mmcm_locked = True
width       = 10.15625
width_fine  = 0
offset      = 10.15625
offset_fine = 0
trigger_src = ext_single
arm_timing  = after_scope
ext_offset  = 0
repeat      = 1
output      = clock_xor

The setup and programming worked fine, however the glitch code itself doesn’t give me any results, it only shows

(ChipWhisperer Glitch WARNING|File ChipWhispererGlitch.py:787) Partial reconfiguration for width = 0 may not work

Things i have tried:

  • using a different system
  • using the measure pin instead of glitch
  • modifying simpleserial-glitch.c (which, as i understand, isn’t the point of the tutorial)
  • modifying offset and width (useless, as they are set according to the hardware itself)

Would it be possible to get some guidance? I have no clue what I’m doing wrong, and I feel like I’m missing something very obvious…

2

The solution involved changing the width and offset range in the program.
I’ve had success with the following:gc.set_range("width", 2, 14) gc.set_range("offset", -14, 14)

1 Like
3

Thanks for the update. For glitch attacks it can be hard to provide glitch parameters that work out-of-the-box for everyone; many things like cable length, small variations in parts (different batches), and even temperature can affect the results. But, those are all real-life glitching issues. Good job on finding parameters that work for you!

4

Hello
But does this also applies to the labs, I thought it should work out of the box, maybe can you shed some lights on how can we trouble shoot to just apply one voltage glitching lab?
I’m facing the same issue with CWNano, both labs applicable to CWNano just not working, I followed SCA101 and side channel analysis lab to bypass password is working fine, however for glitching all I’m getting is Normal count.
In CWNano I can’t change the width of the glitch, I trtied to increase offset or repeat parameters but no success, any suggestion how can I test voltage glitching with the Nano.

image
image1348×832 80.6 KB

5

Yes the nano has fewer glitching options. The hardware that lets us finely tweak glitch shapes in the other ChipWhisperers doesn’t fit into the Nano’s price point or form factor.

Parts shortages has led to some part substitutions in the Nano and these can potentially impact where successful glitch parameters can be found. I would increase the range of glitch parameters and run more iterations.

The point of the labs is not that they should work out of the box; you won’t learn very much if you can just “shift-enter” your way to success. That’s why we only have some “solution” notebooks. Most labs require you to write code and figure things out. Glitching usually involves lots of trial and error!