Author Topic: WIP: Reverse engineering the programming protocol for SiTime SiT8008  (Read 1930 times)

0 Members and 1 Guest are viewing this topic.

Offline lty1993Topic starter

  • Supporter
  • ****
  • Posts: 37
  • Country: us
    • LTY's Space
Hello,

I got a SiTime Time Machine 2 and few blank SiT8008BI chips few days ago.

Since I cannot find any information about programming protocol online, I would like to reverse it myself.

It is been busy recently, the progress maybe slow.

==============================================================================
[Dec 8, 2018]

I managed to capture the programming waveform using a scope. (The model number I am programming to the blank device is SiT8008BI-21-XXN-8.000000)



The channel 1 is OE/ST/NC, channel 2 is OUT, channel 3 is VDD.

Here is hdf5 file I captured:
CH1.h5
CH2.h5
CH3.h5

==============================================================================
« Last Edit: December 10, 2018, 10:22:26 am by lty1993 »
 

Offline Rerouter

  • Super Contributor
  • ***
  • Posts: 4700
  • Country: au
  • Question Everything... Except This Statement
Re: WIP: Reverse engineering the programming protocol for SiTime SiT8008
« Reply #1 on: December 10, 2018, 09:02:03 am »
It really looks like you have a serious amount of crosstalk.

at a glance it looks almost like CH3 is used as a chip select,
CH2 / CH1 as data pair, possibly SPI,

Any chance you can clean up your crosstalk issue, and zoom in a bit on the waveform to get an idea of how the 3 pairs are transistioning,

My best guess is the OE is used as MOSI, and the OUT as MISO,
 

Offline lty1993Topic starter

  • Supporter
  • ****
  • Posts: 37
  • Country: us
    • LTY's Space
Re: WIP: Reverse engineering the programming protocol for SiTime SiT8008
« Reply #2 on: December 10, 2018, 10:09:04 am »
It is really hard to probe the signal right without making a custom jig.



Anyway, I do not think the cross talk will affect much on interpreting the signal.

The OE is a three level signal as shown in next screenshot.



I posted the hdf5 files for each channel in the original post. You can use matlab, infiniium offline, or something similar to analyze them.
« Last Edit: December 10, 2018, 10:13:09 am by lty1993 »
 

Offline Rerouter

  • Super Contributor
  • ***
  • Posts: 4700
  • Country: au
  • Question Everything... Except This Statement
Re: WIP: Reverse engineering the programming protocol for SiTime SiT8008
« Reply #3 on: December 10, 2018, 10:57:12 am »
The image is a much easier thing to analyse than 1GB of files that I cannot open without specialized software,

So far, CH1, is a clock, don't know what the positive bits are, but clearly 800,000 Hz

To me its exactly like SPI, maybe a 1 wire variation on it, looks like update on falling clock, and read on rising.
 
The following users thanked this post: lty1993

Offline amyk

  • Super Contributor
  • ***
  • Posts: 8380
Re: WIP: Reverse engineering the programming protocol for SiTime SiT8008
« Reply #4 on: December 10, 2018, 12:50:45 pm »
I suspect that it's not just a frequency that's directly programmed into the device, but dividers, drive strengths, and other parameters that the programmer tunes in order to get the right frequency output.
 

Offline Bassman59

  • Super Contributor
  • ***
  • Posts: 2501
  • Country: us
  • Yes, I do this for a living
Re: WIP: Reverse engineering the programming protocol for SiTime SiT8008
« Reply #5 on: December 11, 2018, 07:35:28 pm »
Hello,

I got a SiTime Time Machine 2 and few blank SiT8008BI chips few days ago.

Since I cannot find any information about programming protocol online, I would like to reverse it myself.

Or you could see what Silicon Labs has to offer. Their timing products are well-documented and well-supported.
 

Offline lty1993Topic starter

  • Supporter
  • ****
  • Posts: 37
  • Country: us
    • LTY's Space
Re: WIP: Reverse engineering the programming protocol for SiTime SiT8008
« Reply #6 on: December 12, 2018, 07:18:47 am »
Silicon Labs provides either fixed factory programmed oscillator or serial user programmable parts. However, they do not have any one time user programmable oscillator.

It is great to get few one time user programmable oscillator lay around for prototyping, and order factory pre-programmed parts in same form factor for production.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf