X-Git-Url: http://git.rot13.org/?p=goodfet;a=blobdiff_plain;f=client%2FGoodFETGlitch.py;h=56f30754290675c0b5390b420235d451837a4e8f;hp=637b2d1564c65d2b93df357d9d456d0deb8137b2;hb=a2de4ca441a02031e56fc8d14f8a476c644049e0;hpb=500045b9c7757d4bf0fea912f4acdef5ee47c6f6 diff --git a/client/GoodFETGlitch.py b/client/GoodFETGlitch.py index 637b2d1..56f3075 100644 --- a/client/GoodFETGlitch.py +++ b/client/GoodFETGlitch.py @@ -38,7 +38,7 @@ title "Success", \ class GoodFETGlitch(GoodFET): def __init__(self, *args, **kargs): - print "Initializing GoodFET Glitcher." + print "# Initializing GoodFET Glitcher." #Database connection w/ 30 second timeout. self.db=sqlite3.connect("glitch.db",30000); @@ -82,17 +82,38 @@ class GoodFETGlitch(GoodFET): sys.stdout.flush(); self.db.execute("drop table if exists glitchrange;"); self.db.execute("create table glitchrange(time integer primary key asc,max,min);"); - self.db.execute("insert into glitchrange(time,max,min) select distinct time, 0, 0 from glitches;"); self.db.commit(); - print "Maximums..."; + print "Calculating ranges..."; sys.stdout.flush(); - self.db.execute("update glitchrange set max=(select max(vcc) from glitches where glitches.time=glitchrange.time and count=0);"); - self.db.commit(); - print "Minimums..."; - sys.stdout.flush(); - self.db.execute("update glitchrange set min=(select min(vcc) from glitches where glitches.time=glitchrange.time and count>0);"); + + maxes={}; + mins={}; + + c=self.db.cursor(); + c.execute("select time,vcc,count from glitches;"); #Limit 10000 for testing. + progress=0; + for r in c: + progress=progress+1; + if progress % 1000000==0: print "%09i rows crunched." % progress; + t=r[0]; + v=r[1]; + count=r[2]; + if count==0: + try: oldmax=maxes[t]; + except: oldmax=-1; + if v>oldmax: maxes[t]=v; + elif count==1: + try: oldmin=mins[t]; + except: oldmin=0x10000; + if v0;"); + print "time vcc gnd glitchcount count"; + for r in c: + print "%i %i %i %i %i" % r; + def npoints(self): + c=self.db.cursor(); + c.execute("select time,vcc,gnd,glitchcount,count from glitches where lock=0 and count=0;"); + print "time vcc gnd glitchcount count"; + for r in c: + print "%i %i %i %i %i" % r; + #GnuPlot sucks for large sets. Switch to viewpoints soon. + # sqlite3 glitch.db "select time,vcc,count from glitches where count=0" | vp -l -d "|" -I + + def explore(self,tstart=0,tstop=-1, trials=1): """Exploration phase. Uses thresholds to find exploitable points.""" gnd=0; self.scansetup(1); #Lock the chip, place key in eeprom. @@ -142,6 +176,8 @@ class GoodFETGlitch(GoodFET): c=self.db.cursor(); c.execute("select time,min,max from glitchrange where max-min>0;"); rows=c.fetchall(); + c.close(); + random.shuffle(rows); for r in rows: t=r[0]; min=r[1]; @@ -215,10 +251,10 @@ class GoodFETGlitch(GoodFET): rows=c.fetchall(); for a in rows: return True; + c.close(); return False; def scanat(self,lock,trials,vcc,gnd,time): client=self.client; - db=self.db; client.glitchRate(time); client.glitchVoltages(gnd, vcc); #drop voltage target gcount=0; @@ -243,11 +279,13 @@ class GoodFETGlitch(GoodFET): scount+=1; #print "values (%i,%i,%i,%i,%i);" % ( # time,vcc,gnd,gcount,scount); - if(lock>0): + if(lock==0): self.db.execute("insert into glitches(time,vcc,gnd,trials,glitchcount,count,lock)" "values (%i,%i,%i,%i,%i,%i,%i);" % ( time,vcc,gnd,trials,gcount,scount,lock)); - else: + elif scount>0: + print "INSERTING AN EXPLOIT point, t=%i and vcc=%i" % (time,vcc); self.db.execute("insert into exploits(time,vcc,gnd,trials,count)" "values (%i,%i,%i,%i,%i);" % ( time,vcc,gnd,trials,scount)); + self.db.commit(); #Don't leave a lock open.