PhyWhisperer-USB Python Controlled USB 2.0 Sniffer Enables USB Security Testing (Crowdfunding)

PhyWhisperer-USB is a hardware USB sniffer & triggering platform that allows users to test the security of USB devices using side-channel power analysis and fault injection using a Python 3 interface, beside simply capturing packets.

This has become especially important now as some USB devices include Bitcoin Wallets, FIDO2 keys, and encrypted drives with valuable data.

PhyWhisperer-USB

PhyWhisperer-USB hardware specifications:

  • FPGA – Xilinx Spartan 7S15 with 12,800 logic cells
  • USB
    • USB 2.0 Low/Full/High Speed mode
    • PC connection – Micro-USB 2.0 HS port
    • Host connection – Micro-USB port
    • Target connection – USB-A female connector
    • Trigger pattern – 1 – 64 bytes with mask
    • Trigger delay – 0 – 1048576‬ cycles of 240 MHz internal clock derived from USB clock
    • USB sniffer FIFO – 8192 bytes (FPGA block RAM, adjustable depending on FPGA utilization)
  • Expansion – Spare digital I/O: 8 data pins, 1 clock pin routed to FPGA (on front panel)
  • Clock output – 60 MHz
  • Target Power Source – Selectable: Host USB or Control PC

PhyWhisperer-USB Board

PhyWhisperer-USB HW Block Diagram
HW Block Diagram

The equipment is controlled with PC software written in Python 3 that works in Windows, Mac, and Linux.

Some of the highlights of PhyWhisperer-USB include:

  • Hardware-level Sniffing – PhyWhisperer-USB can watch the USB bus to monitor errors and other events that won’t make it into a software-only sniffer. It also generates a clock synchronized to the USB bus itself, giving perfect cycle-accurate timing and allowing very repeatable power measurements.
  • Portable and Extendable – The box also connects nicely to other tools (ChipWhisperer, ChipSHOUTER, GreatFET, oscilloscope) to provide extended features all controlled by one Python script.
  • Open Source – It’s open source with spare FPGA room and a built-in programmer to reload the FPGA bitstream. You’ll find the hardware, firmware, and software on Github.

USB Sniffer ComparisonThe table above compares PhyWhisperer-USB to various commercially available tools, as well as Rhododendron which adds hardware sniffing to GreatFET. For even more USB tools and details, you can check out a recent presentation by Kate Temkin and Mikaela Szekely at Teardown 2019.

PhyWhisperer-USB has launched on Crowd Supply with a symbolic $1 funding target. Rewards start at $225 for the PhyWhisperer-USB kit which comes with a PhyWhisperer-USB in an enclosure, an MCX to SMA cable, an MCX to BNC cable, and two micro-USB cables. Other perks are also available in different quantities. Shipping is free to the US but adds $12 to the rest of the world. Backers should expect their reward(s) to ship around December 2019.

Support CNX Software - Donate via PayPal or become a Patron on Patreon

Leave a Reply

avatar
  Subscribe  
Notify of