Products > Test Equipment

What to buy - Dedicated Logic Analyzer vs "The new Scopes" aka. SDS824/DHO924(S)

<< < (6/7) > >>

Traceless:

--- Quote from: ebastler on November 30, 2024, 01:57:43 pm ---I agree that this may be a challenging project -- both on the analog side (picking up the potentially small power variations, which may sit on an uncorrelated background of other fluctuations), and on the digital/logic analysis side (getting from the fluctuation patterns to the actual key).

But if the planned approach involves physically opening the device and tapping into as many digital signals as you can access (outside of the chip under investigation), then it would certainly be a use case which benefits from a mixed-signal scope which captures and displays the analog and digital channels in sync.   

--- End quote ---

Challenging - definitely. I might be wrong but I think background noise might be less of a problem if you apply differential power analysis. You repeat your measurement multiple times and then correlate the signal across many experiments lets say a dozen or maybe a few hundred. This should basically eliminate your noise floor leaving mostly the common signal across all experiments intact. The tricky part is, that all your measurements need to be exactly over the same key related instruction sequence. I.e. every trace must start exactly when the crypto operation begins and stop when it ends.

tggzzz:

--- Quote from: Traceless on November 30, 2024, 02:29:26 pm ---
--- Quote from: ebastler on November 30, 2024, 01:57:43 pm ---I agree that this may be a challenging project -- both on the analog side (picking up the potentially small power variations, which may sit on an uncorrelated background of other fluctuations), and on the digital/logic analysis side (getting from the fluctuation patterns to the actual key).

But if the planned approach involves physically opening the device and tapping into as many digital signals as you can access (outside of the chip under investigation), then it would certainly be a use case which benefits from a mixed-signal scope which captures and displays the analog and digital channels in sync.   

--- End quote ---

Challenging - definitely. I might be wrong but I think background noise might be less of a problem if you apply differential power analysis. You repeat your measurement multiple times and then correlate the signal across many experiments lets say a dozen or maybe a few hundred. This should basically eliminate your noise floor leaving mostly the common signal across all experiments intact. The tricky part is, that all your measurements need to be exactly over the same key related instruction sequence. I.e. every trace must start exactly when the crypto operation begins and stop when it ends.

--- End quote ---

Well, "the solution to all signal processing problems is to integrate for longer".

Nonetheless it helps to reduce noise and increase the signal (as far as possible) before measuring it.

awakephd:

--- Quote from: Traceless on November 29, 2024, 07:18:24 pm ---BTW: As far as I can tell from the specs the SDS824 has more memory than the lower SDS8XX versions. I assume using the unofficial upgrade path 804X -> 824X will unlock the 200MHz bandwidth but the additional memory is physically missing? Has anybody tried and can confirm that?

--- End quote ---

It doesn't look like anyone has answered this bit (apologies if I just missed it).

The upgrade path not only unlocks the bandwidth, but also the additional memory. IOW, the physical memory is present in the 804, just disabled.

nctnico:
I don't think the really cheap scopes bring much to the table where it comes to logic analysis due to limitations in triggering, display abilities and memory. Same for low cost USB 'logic analysers' which offer very little in terms of triggering. If you want to dig deep into a protocol, then a real logic analyser like Tektronix TLA700 / TLA7000 series is a much better option due to having elaborate trigger sequencing. Recently some information got released for these series of logic analysers ( https://groups.io/g/logicanalyzers/topic/109776434#msg803 ) which seemingly allows to create all kinds of wild protocol decoding algorithms to run on the logic analyser itself.

But that is not where it stops. On the TLA700 you can use the TLA7AA4 module which has 125ps time resolution (albeit in a short buffer). On the TLA7012 mainframe, you can use the TLA7BB4 module which has (IIRC) 25ps time resolution (albeit in a short buffer). On top of that these modules have analog outputs which allow to pick up any signal from the probe and feed that into an oscilloscope. Using the trigger output, this allows to show an event both in the analog and digital domain with extreme resolution (assuming using a low noise 12 bit oscilloscope). And I'm not done yet... The modules can use active FET probe heads which have a bandwidth of around 2GHz and which can be fitted straight onto a circuit board using a specific footprint. So if you want to analyse a TPM module, create an interposer board for it which can connect to the logic analyser probe and you can look at the signals through an almost perfect probing system.

Last but not least: these logic analyser systems aren't even expensive. Lowball some of the sellers on Ebay and I'm sure one will bite.

Traceless:

--- Quote from: awakephd on November 30, 2024, 05:48:20 pm ---The upgrade path not only unlocks the bandwidth, but also the additional memory. IOW, the physical memory is present in the 804, just disabled.

--- End quote ---

Hey awakephd, thank you for commenting I started reading your thread , didn't get all the way through though. Thank you for clarifying that the memory is present in all models.


--- Quote from: nctnico on November 30, 2024, 06:23:41 pm ---I don't think the really cheap scopes bring much to the table where it comes to logic analysis due to limitations in triggering, display abilities and memory. Same for low cost USB 'logic analysers' which offer very little in terms of triggering. If you want to dig deep into a protocol, then a real logic analyser like Tektronix TLA700 / TLA7000 series is a much better option due to having elaborate trigger sequencing. Recently some information got released for these series of logic analysers ( https://groups.io/g/logicanalyzers/topic/109776434#msg803 ) which seemingly allows to create all kinds of wild protocol decoding algorithms to run on the logic analyser itself.

But that is not where it stops. On the TLA700 you can use the TLA7AA4 module which has 125ps time resolution (albeit in a short buffer). On the TLA7012 mainframe, you can use the TLA7BB4 module which has (IIRC) 25ps time resolution (albeit in a short buffer). On top of that these modules have analog outputs which allow to pick up any signal from the probe and feed that into an oscilloscope. Using the trigger output, this allows to show an event both in the analog and digital domain with extreme resolution (assuming using a low noise 12 bit oscilloscope). And I'm not done yet... The modules can use active FET probe heads which have a bandwidth of around 2GHz and which can be fitted straight onto a circuit board using a specific footprint. So if you want to analyse a TPM module, create an interposer board for it which can connect to the logic analyser probe and you can look at the signals through an almost perfect probing system.

Last but not least: these logic analyser systems aren't even expensive. Lowball some of the sellers on Ebay and I'm sure one will bite.

--- End quote ---

Hey nctnico, the TLAs sound tempting. I took a quick look at ebay there are tons of versions and addons there so I'd have to do some research before being able to tell them apart. But at a glance I currently see two problems. The items seem to be in the 2000-4000€ ballpark not sure low-balling @500€ will work. The 2nd and bigger problem might be - it won't fit on my bench ;D. I mean technically it will fit, but it will occupy the whole working area. A side rack/shelf on wheels would be a possible solution but that would require extremely long probe leads which I assume is gonna cause all kinds of issues at high frequencies.

Navigation

[0] Message Index

[#] Next page

[*] Previous page

There was an error while thanking
Thanking...
Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod