.png)
The ChipSHOUTER® (CW520) is a fully-featured Electromagnetic Fault Injection (EMFI) platform that can be used to discover and characterize vulnerabilities in embedded systems. ChipSHOUTER makes EMFI available to test labs, engineering development firms, educators, and embedded enthusiasts. With a flexible API and bundled practice targets, the system is a platform for experimentation and education right out of the box. Paired with an X-Y table and basic python scripting the ChipSHOUTER becomes a fully automatable EMFI platform capable of precision testing and fault characterization. This kit is designed for conducting attacks and testing in-situ, without the need to use special development boards or to modify the target board.
ChipSHOUTER uses low-ESR capacitors to dump up to 500V through various E.M. probes. Digital control of charge voltage and fast response times provide you with the E.M. fault injection tool to simplify your fault investigations. Electromagnetic Fault Injection is a powerful attack method that requires careful consideration of how it might apply to your products.
ChipSHOUTER® Kit
- The ChipSHOUTER CW520 main unit is the EMFI fault injection platform itself.
- The 19V power supply provides DC power to the Chip-SHOUTER.
- The injection probe tips must be added onto the end of the ChipSHOUTER before using the device. Do not touch the probes during operation. (x4 included: x2 1mm, and x2 4mm).
- The Isolated USB adapter provides a computer inter-face to the ChipSHOUTER.
- The SMA Saver is a sacrificial SMA male to female adapter. It is added onto the ChipSHOUTER to save wear and tear on the ChipSHOUTER SMA connector. The SMA Saver can easily be replaced in case it is damaged.
- The SMA right angle adapter is used in combination with a horizontal mount XY table.
- The oscilloscope probe adapter allows monitoring of the pulse inserted at the tip of the ChipSHOUTER itself (x2 included)
- The SMB to SMA adapter allows interfacing the exter-nal trigger input with the ChipWhisperer trigger outputs, or other equipment with logic-level SMA outputs.
- The SMB to BNC adapter allows interfacing the exter-nal trigger input with regular lab equipment.
- The SMB cable is used to connect the external trig-ger.
- The Ballistic Gel SRAM target provides detailed in-formation about the effectiveness of a fault injection pattern.
- The Simple EMFI target allows quick validation that a fault injection probe is working.
- The cooling air adapter allows you to insert dry air into the ChipSHOUTER for cooling. The adapter may look different or be of different material than shown here.