ChipSHOUTER Electromagnetic Fault Injection (EMFI) Platform

ChipSHOUTER® is an Electromagnetic Fault Injection (EMFI) platform. This repository contains the Python API, examples, and related tools.

To interact with the platform programmatically, use the Python API (licensed under MIT). For detailed technical guidance, refer to the following documentation sources:

• API Documentation (HTML): https://chipshouter.readthedocs.io/en/latest/
• User Manual (PDF): Includes the full serial command list. Download PDF

Several open-source tools are available to complement the ChipSHOUTER® platform or other EMFI systems:

• Ballistic Gel: A SRAM-based calibration board used to measure the impact of EM fault injection. It is useful for comparing different probe tip types.
• Simple EMFI Target: A standalone, simple target designed for quickly verifying that an EMFI system is operational without risking damage to connected devices.
• ChipShover: A XYZ table and controller. The controller features fully open-source firmware, enabling the development of custom platform extensions.

The ChipSHOUTER 3D Mount is designed for use with an XY table, but can be modified to mount the ChipSHOUTER onto a 3D printer or gantry. The mount consists of a Top Side and a Bottom Side which must be joined together.

Download the files in various formats from the following links:

• Top Side: https://a360.co/2vIFLQQ
• Bottom Side: https://a360.co/37BaIUu

If you must use a firmware version older than 1.8.7, you must minimize EEPROM writes to prevent rapid wear.

Strategy: Modify your automation scripts to avoid changing settings frequently. For example, do not change the voltage setting every time a script runs (e.g., avoid selecting a new random voltage every second).

To update your device, you must first download the appropriate .fup firmware file. The download URL follows a specific pattern where you must substitute the XXXXXX placeholder with your specific board ID.

URL Pattern: https://media.newae.com/cw520fw/all_devices/cw520_XXXXXX_2-0-3_firmware.fup

Note: You can find your board ID by observing the serial port output when the device is in bootloader mode.

If your ChipSHOUTER is in bootloader mode (it is currently printing its board ID over the serial port), you cannot use an instance method. Instead, call the class method ChipSHOUTER.update_firmware() directly.

1. Identify the serial port.
2. Call ChipSHOUTER.update_firmware() providing None for the instance, the path to the .fup file, and the comport argument.

from chipshouter import ChipSHOUTER
ChipSHOUTER.update_firmware(None, "/path/to/firmware.fup", comport="<SERIAL_PORT>")

A failed output resistor cannot be repaired by the user. The repair requires removing a 2-stage coating from the high-voltage portions of the board, replacing the resistor, and reapplying/heat-curing the coating.

Repaired and new units use an improved part with better pulse power ratings compared to the original substituted parts (which may have a datecode 2027).

To update your ChipSHOUTER® device, refer to the official firmware update guide which provides the latest firmware versions and step-by-step instructions on how to perform the update.

https://github.com/newaetech/ChipSHOUTER/blob/master/documentation/Firmware%20Update.md

To resolve EEPROM wear issues and restore full reliability, upgrade your ChipSHOUTER to firmware 1.8.7 or later.

In firmware 1.8.7 and onward, the affected EEPROM page is mapped out of use. This means a physical hardware replacement is not required to fix the reliability issues caused by the errata.

If your ChipSHOUTER is already programmed and running normally, use the update_firmware() method on an instance of the ChipSHOUTER class to reprogram the device.

1. Connect to the device via its serial port.
2. Call update_firmware() passing the path to the downloaded .fup file.

from chipshouter import ChipSHOUTER
cs = ChipSHOUTER('<SERIAL_PORT>')
cs.update_firmware('/path/to/firmware.fup')