ChipWhisperer

The ChipWhisperer® ecosystem presents the first open-source, low-cost solution to expose weaknesses that exist in embedded systems all around us.

conduct side-channel power analysis and fault injection attacks

Computer Processor

uncover vulnerabilities

in your own

embedded systems

Computer Processor

implement

robust security

countermeasure

Featured White Paper

Power Analysis on FPGA Implementation of AES Using CW305 & ChipWhisperer

 

side-channel power analysis

NAE-CWLITE.jpg

MSRP

$250 US

ChipWhisperer-Lite 32-Bit

The ChipWhisperer-Lite, changed to use a 32-bit Cortex-M4 target.

Sample Rate

105 MS/s

VCC Glitching

Crowbar, < 1 nS resolution

Gain Setting

Programmable

Clock Glitching

Yes

Buffer Size

24000

Target

Cortex-M4 32-bit

Triggering

Rising/Falling Edge, Level

NAE-CWLITE.jpg

MSRP

$250 US

ChipWhisperer-Lite XMEGA

The original ChipWhisperer-Lite, with 8-bit XMEGA target.

Sample Rate

105 MS/s

VCC Glitching

Crowbar, < 1nS resolution

Gain Setting

Programmable

Clock Glitching

Yes

Buffer Size

24000

Target

XMEGA 8-Bit

Triggering

Rising/Falling Edge, Level

NAE-CWLITE.jpg

MSRP

$50 US

ChipWhisperer-Nano

Low cost solution for simple training & demo setups.

Sample Rate

20 MS/s

VCC Glitching

Crowbar

Gain Setting

Fixed

Clock Glitching

No

Buffer Size

50000

Target

Cortex-M0 32-bit

Triggering

Rising Edge

Single Board Solutions

The original ChipWhisperer-Lite is a single board that integrates high-speed power measurement (replacing your oscilloscope), a target device, programmer for the target device, a platform for performing fault injection, and much more.

 

These boards are perfect if you want to teach yourself (or your class) all about side-channel power analysis & fault injection with minimal fuss.

 

Starter Kits

These kits contain the capture hardware (ChipWhisperer device) along with various targets and tools. You can perform almost all of the tutorials with these kits, and then extend them to start looking at real devices with the included connectivity tools.

NAE-CWLITE.jpg

ChipWhisperer-Pro Kit

MSRP

$3800 US

Our most advanced capture hardware lets you trigger on analog waveforms, and capture long power traces such as the ones asymmetric algorithms generate.

Sample Rate

105 MS/s (10 MS/s streaming)

Buffer Size

96000 (unlimited in streaming)

Targets

XMEGA 8-Bit, STM32F3 32-Bit

VCC Glitching

Crowbar, < 1nS resolution

Clock Glitching

Triggering

Yes

Waveform, SPI, UART, Rising/Falling Edge, Level

NAE-CWLITE.jpg

ChipWhisperer Level 2 Kit

MSRP

$912 US

Extend your work with probes & level shifters!

Sample Rate

105 MS/s

Buffer Size

24000

Targets

XMEGA 8-Bit, STM32F3 32-Bit

VCC Glitching

Crowbar, < 1nS resolution

Clock Glitching

Triggering

Yes

Rising/Falling Edge, Level

NAE-CWLITE.jpg

ChipWhisperer Level 1 Kit

MSRP

$552 US

Go beyond the basics with switchable target boards, see CW308 UFO Targets for all the options!

Sample Rate

105 MS/s

Buffer Size

24000

Targets

XMEGA 8-Bit, STM32F3 32-Bit

VCC Glitching

Crowbar, < 1nS resolution

Clock Glitching

Triggering

Yes

Rising/Falling Edge, Level

Target Boards

These targets were designed to be used with the ChipWhisperer capture platform, but they are flexible enough to be used with a standard oscilloscope and computer to drive the target.

NAE-CW305-7A100_web.jpg

CW305 Artix FPGA Target

MSRP

$800 - $3000 US

FPGA target for implementing custom cryptographic algorithms, includes a powerful address/data interface to FPGA, with demonstration AES core. Also possible to run soft-core processors, including Arm DesignStart Cortex-M1 & Cortex-M3 releases.

NAE-CW305-7A100_web.jpg

CW308 UFO Target Board

MSRP

$240 US

Our universal base-board that fits a variety of microcontroller targets, includes STM32F3 and XMEGA targets.

 

These target boards require the CW308 UFO base board to function. They have a variety of processor architectures to allow you to easily experiment with different devices under a (fairly) standard environment. Note that some boards may need external programmers (such as Segger J-Link or OpenOCD) to reflash the chip. Check the datasheet and documentation before purchasing if you are unsure!

training-chipwhisperer_edited.jpg

Filter UFO Targets:

Chip Architecture
Hardware Cryptography

CW308 UFO Targets

 

Results

NAE-CW308T-K82F_web.jpg
ATSAML11 Target for CW308

Arm Cortex-M23 core with hardware AES, includes DPA countermeasures outside the AES core such as Hamming-Weight balanced RAM and FLASH access modes.

Target Chip

ATSAML11E16A

Architecture

Arm Cortex-m23

HW Crypto

AES

FLASH

64 KB

SRAM

16 KB

NAE-CW308T-K82F_web.jpg
MPC5748G Target for CW308

Triple-core PowerPC target for automotive environments, with separate Hardware Security Module (HSM) core.

Target Chip

SPC5748GGK1MMJ6

Architecture

PowerPC e200Z4, e200Z2

HW Crypto

AES

FLASH

6 MB

SRAM

768 KB

NAE-CW308T-K82F_web.jpg
Spartan S6LX9 Target for CW308

Small FPGA target, Xilinx Spartan 6 LX9. Example AES implementation available.

Target Chip

XC6SLX9

Architecture

FPGA - Spartan 6

HW Crypto

User Defined

FLASH

0 KB

SRAM

1430 Slices

NAE-CW308T-K82F_web.jpg
LPC55S69 Target for CW308

Dual-Core Cortex-M33 core with PUF, AES hardware, and PRINCE memory encryption options. Supports special AES mode that reduces AES power signature.

Target Chip

LPC55S69JBD100K

Architecture

Arm Cortex-m33

HW Crypto

AES, RSA, PRINCE, SHA, SHA2

FLASH

640 KB

SRAM

320 KB