fucken

Author: lolololol

.gitignore

@@ -3,6 +3,10 @@ lib/dist/
 lib/build/
 lib/sparkgap.egg-info/
 
+# fuck right off emu elf files
+emu/*.elf
+emu/*.hdf
+
 # go away preprocessor files
 *.hdf
 **/*.hdf

clkfriend.py

@@ -0,0 +1,20 @@
+#!/usr/bin/env python3
+
+import numpy
+import getopt
+import sys
+
+def usage():
+  print("todo: usage")
+
+if __name__ == "__main__":
+  if len(sys.argv) == 1:
+    usage()
+    sys.exit(0)
+  opts, args = getopt.getopt(sys.argv[1:],"f:t:",["from=","to="])
+  for arg, val in opts:
+    if arg in ["-f","--from"]:
+      FROM_VAL = val
+    elif arg in ["-t","--to"]:
+      TO_VAL = val
+ 

cpa.py

@@ -141,6 +141,8 @@ def usage():
     out += "%02x " % int(r[i])
   print("Done: %s" % out)
   out = ""
+  if hasattr(leakmodel,"postprocess"):
+    leakmodel.postprocess(r)
   if CONFIG_PLOT:
     resultViz.render()
     resultViz.mainloop()

dpa.py

@@ -140,7 +140,8 @@ def usage():
     out += "%02x " % int(r[i])
   print("Done: %s" % out)
   out = ""
-  out = ""
+  if hasattr(leakmodel,"postprocess"):
+    leakmodel.postprocess(r)
   if CONFIG_PLOT:
     resultViz.render()
     resultViz.mainloop()

emu/README.md

@@ -1,5 +1,5 @@
-# teacup
+# emu
 
-Camellia sinensis is a species of evergreen shrub or small tree in the flowering plant family Theaceae. Its leaves and leaf buds are used to produce the popular beverage tea. Common names include tea plant, tea shrub, and tea tree (unrelated to Melaleuca alternifolia, the source of tea tree oil, or the genus Leptospermum commonly called tea tree).
+This folder contains experiments for software-emulated side channel, using Ledger-Donjon's Rainbow framework. The example executable is DES. You can compile this with:
 
-arm-none-eabi-gcc -nostdlib -o hello.elf hello.c
+arm-none-eabi-gcc -nostdlib -o des.elf des.c

emu/aes.elf

@@ -34,15 +34,13 @@
 
 cs = None
 
-KEY_ADDR = 0x18cb8
-DATA_ADDR = 0x18cc0
-OUT_ADDR = 0x18cb0
+KEY_ADDR = 0x18ce8
+DATA_ADDR = 0x18cd0
+OUT_ADDR = 0x18ce0
 
-# DODES_END = 0x8974   # WHOLE
-DODES_END = 0x8668   # FIRSTROUND
+DODES_END = 0x8974   # WHOLE
+# DODES_END = 0x8668   # FIRSTROUND
 
-
-# rand_key = np.array([random.randint(0,0xFF) for i in range(0,8)],dtype=np.uint8)
 rand_key = np.array([0x11,0x22,0x33,0x44,0x55,0x66,0x77,0x88])
 key_str = " ".join(["%02x" % x for x in rand_key])
 
@@ -57,24 +55,22 @@
     rand_key = np.array([random.randint(0,0xFF) for i in range(0,8)],dtype=np.uint8)
     key_str = " ".join(["%02x" % x for x in rand_key])
     print("Key is %s" % key_str)
-  emu[KEY_ADDR] = bytes(rand_key[0:4])
-  emu[KEY_ADDR+4] = bytes(rand_key[4:8])
-  rand_input = np.array([random.randint(0,0xFF) for i in range(0,8)],dtype=np.uint8)
-  emu[DATA_ADDR] = bytes(rand_input[0:4])
-  emu[DATA_ADDR + 4] = bytes(rand_input[4:8])
-  emu.start(emu.functions["doDESEncrypt"] , DODES_END)
+  out_data = emu[DATA_ADDR:DATA_ADDR+8]
+  print("%s" % binascii.hexlify(out_data))
+  emu.start(0x8954 , DODES_END)
   new_trace = np.fromiter(map(lambda event: event["register"], emu.trace),dtype=np.float32)
-  rand_output = emu[OUT_ADDR:OUT_ADDR+8]
+  out_output = emu[OUT_ADDR:OUT_ADDR+8]
   if cs is None:
     cs = sparkgap.filemanager.CaptureSet(tracecount=CONFIG_COUNT,samplecount=len(new_trace),in_len=8,out_len=8)
-    cs.addTrace(new_trace,rand_input,rand_output)
+    cs.addTrace(new_trace,rand_input,out_output)
   else:
-    cs.addTrace(new_trace,rand_input,rand_output)
-  print("Run %d/%d, %s -> %s" % (i,CONFIG_COUNT,binascii.hexlify(rand_input),binascii.hexlify(rand_output)))
+    cs.addTrace(new_trace,rand_input,out_output)
+  print("Run %d/%d, %s -> %s" % (i,CONFIG_COUNT,binascii.hexlify(rand_input),binascii.hexlify(out_output)))
   del(emu)
   gc.collect()
 
-cs.save(CONFIG_OUTFILE)
+if CONFIG_OUTFILE != "q":
+  cs.save(CONFIG_OUTFILE)
 
 if CONFIG_REKEY is False:
   print("Reminder: key is %s" % key_str)

emu/des.elf

@@ -1,3 +1,5 @@
+// #include <stdio.h>
+
 /* des.c */
 /*
     This file is part of the ARM-Crypto-Lib.
@@ -398,19 +400,26 @@ void tdes_dec(void *out, void *in, const uint8_t *key){
 
 /******************************************************************************/
 
-uint8_t  in[8] = {0,0,0,0,0,0,0,0};
-uint8_t out[8] = {1,1,1,1,1,1,1,1};
-uint8_t key[8] = {2,2,2,2,2,2,2,2};
+uint8_t  in[8] = {0xaa,0xbb,0xcc,0xdd,0xaa,0xbb,0xcc,0xdd};
+uint8_t out[8] = {0x41,0x41,0x41,0x41,0x42,0x42,0x42,0x42};
+// uint8_t out[8] = {0x00,0x00,0x00,0x00,0x22,0x22,0x22,0x22};
+uint8_t key[8] = {0x11,0x22,0x33,0x44,0x55,0x66,0x77,0x88};
 
 void doDESEncrypt()
 {
-  des_enc(out,in,key);
+  des_enc(&out,&in,&key);
+  return;
 }
 
 int main(int argc, char **argv)
 {
-  doDESEncrypt();
-  while(1)
+  des_enc(&out,&in,&key);
+  /*
+  int i = 0;
+  for(i = 0;i < 8;i++)
   {
+    printf("%02x ",out[i]);
   }
+  printf("\n");
+  */
 }