X-Git-Url: http://git.rot13.org/?p=goodfet;a=blobdiff_plain;f=client%2FGoodFETGlitch.py;h=06bb511eb98fffcc3ef4867163a750591597930f;hp=ce82d0d7a6df66253094a8f54f9bcaf897441fa0;hb=0b92a77db417a3f3b0482a5c5444c50042674fda;hpb=89029e6edf48e5f1385f9b25d7cdbed2a4780140 diff --git a/client/GoodFETGlitch.py b/client/GoodFETGlitch.py index ce82d0d..06bb511 100644 --- a/client/GoodFETGlitch.py +++ b/client/GoodFETGlitch.py @@ -90,19 +90,21 @@ class GoodFETGlitch(GoodFET): mins={}; c=self.db.cursor(); - c.execute("select time,vcc,count from glitches;"); #Limit 10000 for testing. + c.execute("select time,vcc,glitchcount,count from glitches;"); #Limit 10000 for testing. progress=0; for r in c: progress=progress+1; if progress % 1000000==0: print "%09i rows crunched." % progress; t=r[0]; v=r[1]; - count=r[2]; - if count==0: + glitchcount=r[2]; + count=r[3]; + # FIXME: Threse thresholds suck. + if count<2: try: oldmax=maxes[t]; except: oldmax=-1; if v>oldmax: maxes[t]=v; - elif count==1: + elif glitchcount<2: try: oldmin=mins[t]; except: oldmin=0x10000; if v0;"); + c.execute("select time,vcc,gnd,glitchcount,count from glitches where lock=0 and glitchcount>0;"); print "time vcc gnd glitchcount count"; for r in c: print "%i %i %i %i %i" % r; - def npoints(self): + def rpoints(self): c=self.db.cursor(); - c.execute("select time,vcc,gnd,glitchcount,count from glitches where lock=0 and count=0;"); + c.execute("select time,vcc,gnd,glitchcount,count from glitches where lock=0 and glitchcount>0;"); print "time vcc gnd glitchcount count"; for r in c: print "%i %i %i %i %i" % r; #GnuPlot sucks for large sets. Switch to viewpoints soon. # sqlite3 glitch.db "select time,vcc,count from glitches where count=0" | vp -l -d "|" -I - def explore(self,tstart=0,tstop=-1, trials=1): + def explore(self,times=None, trials=10): """Exploration phase. Uses thresholds to find exploitable points.""" gnd=0; self.scansetup(1); #Lock the chip, place key in eeprom. - if tstop<0: + if times==None: + tstart=0; tstop=self.client.glitchstarttime(); - times=range(tstart,tstop); + times=range(tstart,tstop); random.shuffle(times); #self.crunch(); count=0.0; @@ -178,10 +181,16 @@ class GoodFETGlitch(GoodFET): rows=c.fetchall(); c.close(); random.shuffle(rows); + print "Exploring %i times." % len(times); + mins={}; + maxes={}; for r in rows: t=r[0]; - min=r[1]; - max=r[2]; + mins[t]=r[1]; + maxes[t]=r[2]; + for t in times: + min=mins[t]; + max=maxes[t]; voltages=range(min,max,1); count=count+1.0; print "%02.02f Exploring %04i points in t=%04i." % (count/total,len(voltages),t); @@ -190,7 +199,7 @@ class GoodFETGlitch(GoodFET): self.scanat(1,trials,vcc,gnd,t); def learn(self): """Learning phase. Finds thresholds at which the chip screws up.""" - trials=1; + trials=30; lock=0; #1 locks, 0 unlocked vstart=0; vstop=1024; #Could be as high as 0xFFF, but upper range is useless