SlideShare a Scribd company logo
HackRF
A Low Cost Software
Defined Radio Platform
Hackito Ergo Sum 2013
Benjamin
Vernoux
Youssef
Touil
2
Software Defined Radio
(SDR)
Radio by
Digital Signal Processing
(DSP)
3
Digital signals
A digital signal is a physical signal that is a
representation of a sequence of discrete
values like a digitized analog signal.
4
ADC / DAC
http://upload.wikimedia.org/wikipedia/commons/0/04/Digital.signal.d
iscret.svg
5
Analog Audio
●
Phonograph
(Thomas Edison 1877)
●
Gramophone / Vinyl records
●
Magnetophon / Tape
●
Old Telephone
6
Digital Audio
●
DECT (Phone)
●
CD/DVD/Blu-Ray
●
DAT
●
Hard Disk Recorder
The world of analog radio...
Synopsis of a single conversion
radio
ADC
DemodMixerAmplifier BPF
Oscillator
(PLL)
The Software Defined Radio
Synopsis of a radio implemented by
software components
Perfect Software
Radio Components
SDR# Software
HackRF
DemodBPFMixerAmplifier
Oscillator
(CORDIC)
9
Fexibility
Many Radios in one
(with the right
antenna)
10
Right Antenna
like cheap (less than 30USD)
Log Periodic PCB Antennas
http://www.wa5vjb.com/products1.html
400 to 1000
MHz
850 to 6500
MHz
11
Reconfigurability
Software
Modification
12
The Future
All radios
will be software
radios
13
Target Operating
Frequencies
●
0 - 1 GHz : NFC, CB/FM radio,
Car/Door Key Fob, TI CC
subGHz ...
●
1 - 2 GHz: DECT, GPS, GSM
●
2.4 GHz: 802.11, Bluetooth,
Zigbee
●
5.9 GHz: DSRC, WAVE, 802.11
14
Target Bandwidth
●
0 - 1 MHz : Lot of stuff
●
1 MHz: Bluetooth
●
2 MHz: Zigbee, DECT
●
5 MHz: LTE
●
20MHz: 802.11/WLAN
15
ISM band for unlicensed use
Frequency range Bandwidth Center frequency
6.765 MHz 6.795 MHz 30 kHz 6.780 MHz
13.553 MHz 13.567 MHz 14 kHz 13.560 MHz
26.957 MHz 27.283 MHz 326 kHz 27.120 MHz
40.660 MHz 40.700 MHz 40 kHz 40.680 MHz
433.050 MHz 434.790 MHz 1.84 MHz 433.920 MHz
902.000 MHz 928.000 MHz 26 MHz 915.000 MHz
2.400 GHz 2.500 GHz 100 MHz 2.450 GHz
5.725 GHz 5.875 GHz 150 MHz 5.800 GHz
24.000 GHz 24.250 GHz 250 MHz 24.125 GHz
61.000 GHz 61.500 GHz 500 MHz 61.250 GHz
122.000 GHz 123.000 GHz 1 GHz 122.500 GHz
244.000 GHz 246.000 GHz 2 GHz 245.000 GHz
Respect laws of your country regarding EMI and
the maximum TX power allowed per band
16
RECEIVE
OR
TRANSMIT
Half Duplex
(Limited by
MCU / USB 2.0HS)
17
We can live without
●
High dynamic range
●
Fast DSP/FPGA
●
Full-Duplex
18
COST
High quality
analog
components
Cheap analog
components
+ CPU/MCU
(HackRF)
OR
19
COST
Single device any
laptop owner can
afford.
For a price estimated
to 300 USD.
20
OPEN SOURCE
Hardware
and Software
(mainly GPL)
21
HackRF Use Cases
●
RFID (Radio Freq Identification)
●
Cellular GSM base station
●
GPS receiver
●
AM/FM Radio TX/RX, APCO-25
(USA) / TETRA (EU) Digital Radio
●
Digital Television (ATSC/DVB-T)
●
Passive radar
●
And lot of others ...
22
Hardware Design
Process
Michael
Designer
Jared
Consultant
23
Retrospective
HackRF HW
●
1st Board
MCU/CPLD
Jellybean
16 Apr 2012
24
C
P
L
D
LPC4330
Restrospective
Jellybean
Digital
25
●
2nd Board
Lemondrop
6 May 2012
Retrospective
HackRF HW
26
Restrospective
Lemondrop
ADC/DACRF TX/RX
Base Band
2.3 -
2.7 GHz
27
JellyBean & LemonDrop
28
●
3rd Board
Lollipop
23 Jun 2012
Retrospective
HackRF HW
29
Restrospective
Lollipop
RFFC5071
SYNTHESIZER
WB
30MHz-6GHz
MIXER GHz
30
●
4th Board
Bubblegum
24 July 2012
Retrospective
HackRF HW
31
Restrospective
Bubblegum
TRF3765
SYNTHESIZER
WB
300MHz-4.8GHz
MIXER GHz
32
●
5th Board
Licorice
27 Aug 2012
Retrospective
HackRF HW
33
Restrospective
Licorice
RFFC5072SYNTHESIZER
WB
30MHz-6GHz
MIXER GHz
34
Restrospective
All in one
35
●
6th Board
Jawbreaker
6 Dec 2012
HackRF HW
36
HackRF Beta Board
Jawbreaker
37
Jawbreaker HW
●
More than 300 components
●
Majority of components are
0.4mm×0.2mm (0402 R&C)
●
More than 25 IC
●
About 2 days of manual
assembly and testing for
one board
38
RFFC5071/2
SYNTHESIZER
WB
30MHz-6GHz
MIXER
MAX2837
2.3GHz-2.7GHz
Wireless
Broadband RF
Transceiver
MAX5864
ADC/DAC
Up to 22MHz
HackRF Frontend/BaseBand
RF Frontend BaseBand / IF (Intermediate Freq)
RF Frontend: Generic term for all the
circuitry between the antenna and the
first intermediate frequency (IF) stage
http://en.wikipedia.org/wiki/RF_front_end
Baseband refers to the original frequency
range of a transmission signal before it is
converted, or modulated, to a different
frequency range
http://www.techterms.com/definition/baseband
LP Filter -> F [30MHz;2.3GHz[
ByPass → F [2.3GHz;2.7GHz[
HP Filter -> F [2.7GHz;6.0GHz]
39
HackRF Digital Stage
MAX5864
ADC/DAC
Up to 22MHz
NXP
LPC43xx
Maximum 20MHz ADC/DAC
limited by USB2 HS
(about 40MiB/s)
40
HackRF Clock
Flexible clock generation
Si5351
CLK0: MAX5864/CPLD
CLK1: CPLD (2*CLK0)
CLK2: MCU SGPIO (2*CLK0)
CLK4: 50MHz RFFC5071/2
CLK5: 40MHz MAX2837
41
HackRF Jawbreaker
HS USB 2.0
(40MiB/s)
30MHz to
6GHz OpFreq
20MHz Max
BW
BusPowered
(max 500mA)
Half-Duplex
Transceiver
Open Source
HW & SW
42
Defense Advanced
Research Projects
Agency
(DARPA)
Cyber Fast Track
(CFT)
43
This is a big
project for us.
This isn't a big
project for DOD.
44
The World
needs
Open Source
Hardware for
SDR
45
Public Process
github.com/mossmann/hackrf
46
Public Process
github.com/mossmann/libopencm3
See us also on IRC
Freenode channel #hackrf
47
Volunteers !
Everyone is
welcome to help
us developping
SDR tools
48
TOOLS
Kicad
GCC
Gnu Radio
SDR#
49
100%
NDA
Free !
50
NXP LPC43xx
ARM Cortex
DualCore
M4F + M0 @ 204 MHz
SGPIO + FPU(32bits)
HS USB 2.0
libopencm3
51
Thank you !
DARPA CFT
BIT Systems
Michael Ossmann
Jared Boone
Youssef
Touil
Hackito
52
HackRF links
http:/greatscott
gadgets.com/ha
ckrf
53
HackRF beta
https://greatscott
gadgets.com/for
ms/hackrf-beta-
reg.html
54
And Now
DEMO !!
55
HackRF Host Tools
Windows/Linux
●
hackrf_info (board info/ident)
●
hackrf_cpldjtag (update CPLD)
●
hackrf_max2837 / rffc5071 /
si5351c (R/W registers)
●
hackrf_spiflash (update fw)
●
hackrf_transfer (RX/TX)
56
HackRF SDR#
FM DEMO
57
HackRF SDR#
Talkies DEMO
58
HackRF SDR#
DECT Phone DEMO
59
BONUS
60
NXP
LPC4330
µUSB
2.0HS
SPIFI
BOOT
MODE
NXP LPC4330
●Dual Core MCU M4+FPU & M0
●204 MHz, 264KB SRAM
●High Speed USB 2.0
●SGPIO (used for ADC/DAC up to 40MHz IQ with 20MHz ADC/DAC)
●Open Source development using libopencm3 (LGPL v3)
SPIFI
●1MB SPIFI boot
●Code => SRAM
BOOT MODE
●SPIFI Boot
●USB0 (Recovery mode)
61
XILINX
CPLD
XC2C64A
MAX
5864
MAX
2837
SI
5351C
RFFC
5072
MAX 5864
●ADC / DAC up to 22MHz
●8 bits ADC and 10bits DAC
XILINX CPLD
●Mainly used for synchro
with SGPIO & MAX5864
MAX 2837
2.3GHz to 2.7GHz Wireless
Broadband RF Transceiver
SI5351C
●Clock generator and VCXO
●Up to 8 independant Clocks
RFFC5072
●Wideband synthesizer/vco
withintegrated 6GHz mixer

More Related Content

What's hot (20)

PPTX
Reed solomon codes
Samreen Reyaz Ansari
 
PDF
Ofdm for wireless
sunil raj kumar
 
PDF
5 g communication systems
Akash R
 
PPTX
5G technology
Taha Baig
 
PDF
Software defined radio
Sandesh Poovaiah
 
PDF
5G TECHNOLOGY project report
PDEA's college of engineering, Pune
 
PDF
10. types of small scale fading
JAIGANESH SEKAR
 
PPTX
Lte Presentation.Ppt
vaimalik
 
PPTX
Pcs ch1
Avinash C
 
PPTX
5G technology
Vishal Rathee
 
PPTX
Pstn (Public Switched Telephone Networks)
rahuldaredia21
 
PPTX
TDMA, FDMA, and CDMA
Najeeb Khan
 
PPT
TDMA, FDMA, CDMA
Keerthana Nambiar
 
PPTX
3G & 4G : Advantages and disadvantages
Junaid Iqbal
 
PPTX
CNN Dataflow Implementation on FPGAs
NECST Lab @ Politecnico di Milano
 
PPT
Ieee 802.11overview
Object-Frontier Software Pvt. Ltd
 
PPTX
Next Generation V2X Technology
Malik Saad
 
PDF
Artificial Intelligence in the Network
Michelle Holley
 
PPTX
Wireless Sensor Networks
juno susi
 
PDF
SOC System Design Approach
Dr. A. B. Shinde
 
Reed solomon codes
Samreen Reyaz Ansari
 
Ofdm for wireless
sunil raj kumar
 
5 g communication systems
Akash R
 
5G technology
Taha Baig
 
Software defined radio
Sandesh Poovaiah
 
5G TECHNOLOGY project report
PDEA's college of engineering, Pune
 
10. types of small scale fading
JAIGANESH SEKAR
 
Lte Presentation.Ppt
vaimalik
 
Pcs ch1
Avinash C
 
5G technology
Vishal Rathee
 
Pstn (Public Switched Telephone Networks)
rahuldaredia21
 
TDMA, FDMA, and CDMA
Najeeb Khan
 
TDMA, FDMA, CDMA
Keerthana Nambiar
 
3G & 4G : Advantages and disadvantages
Junaid Iqbal
 
CNN Dataflow Implementation on FPGAs
NECST Lab @ Politecnico di Milano
 
Next Generation V2X Technology
Malik Saad
 
Artificial Intelligence in the Network
Michelle Holley
 
Wireless Sensor Networks
juno susi
 
SOC System Design Approach
Dr. A. B. Shinde
 

Viewers also liked (14)

PDF
GNU Radio for space research
Rustam Akhtyamov
 
KEY
Gnu Radio and the Universal Software Radio Peripheral
Alexandru Csete
 
PDF
Spring Roo Internals Javaday IV
Massimiliano Dessì
 
PPT
Abhinav End Sem Presentation Software Defined Radio
guestad4734
 
PPTX
A SOFTWARE DEFINED RADIO BASED
ANGELIN JOHN
 
PPT
ISM Band Sub-GHz RF Transceiver
Premier Farnell
 
PPTX
Software defined radio and the hacker
Rob Gillen
 
PDF
Kablosuz İletişim ve Güvenlik
Siber Güvenlik Toplululuğu
 
PDF
Rf basics
Saif Ullah Khan
 
PPTX
GNU Radio
milowenwen
 
PDF
射頻電子 - [實驗第三章] 濾波器設計
Simen Li
 
PPT
十倍速記憶! 考試必背252字根 001~010
gary wang
 
PPT
十倍速252字根 2016年新版 241-252
gary wang
 
PPTX
Software defined radio
Devesh Samaiya
 
GNU Radio for space research
Rustam Akhtyamov
 
Gnu Radio and the Universal Software Radio Peripheral
Alexandru Csete
 
Spring Roo Internals Javaday IV
Massimiliano Dessì
 
Abhinav End Sem Presentation Software Defined Radio
guestad4734
 
A SOFTWARE DEFINED RADIO BASED
ANGELIN JOHN
 
ISM Band Sub-GHz RF Transceiver
Premier Farnell
 
Software defined radio and the hacker
Rob Gillen
 
Kablosuz İletişim ve Güvenlik
Siber Güvenlik Toplululuğu
 
Rf basics
Saif Ullah Khan
 
GNU Radio
milowenwen
 
射頻電子 - [實驗第三章] 濾波器設計
Simen Li
 
十倍速記憶! 考試必背252字根 001~010
gary wang
 
十倍速252字根 2016年新版 241-252
gary wang
 
Software defined radio
Devesh Samaiya
 

Similar to [HES2014] HackRF A Low Cost Software Defined Radio Platform by Benjamin Vernoux (20)

PDF
Software Defined Radio (SDR)
Drew Fustini
 
PPTX
Software Defined Radio Workshop
Radiojitter Concepts Lab LLP
 
PPTX
RF Experiments in Raspberry Pi
Radiojitter Concepts Lab LLP
 
PDF
BSidesMSP 2017 - SDR101 workshop
Mike Saunders
 
PPTX
Design And Simulation of Modulation Schemes used for FPGA Based Software Defi...
Sucharita Saha
 
PDF
SDR Basestation with Raspberry Pi
Jonathan Singer
 
PPT
Universal software defined radio development platform
Bertalan EGED
 
PDF
Usrp family-09-open
Weslley Assis
 
PPTX
Software Defined Radio Engineering course sampler
Jim Jenkins
 
PDF
Multiband Transceivers - [Chapter 5] Software-Defined Radios
Simen Li
 
PDF
SDR101-presentation-distro
Mike Saunders
 
PDF
OSINT RF Reverse Engineering by Marc Newlin
EC-Council
 
PDF
SDR 101 - NDSU CyberSecurity 2017
Mike Saunders
 
PDF
Whitebox Handheld Software Radio Kit
Chris Testa
 
PDF
N5AC 2014-10-11 Pacificon SDR Advances
N5AC
 
PPTX
final presentation
shalinigowda12
 
PDF
RF Basics, RF for Non-RF Engineers.pdf
atsnoida3
 
DOCX
SOFTWARE DEFINED RADIO
KartikeyPatwal
 
PDF
Architecture of a novel configurable
VLSICS Design
 
PDF
Final_Report
Connor Delaosa
 
Software Defined Radio (SDR)
Drew Fustini
 
Software Defined Radio Workshop
Radiojitter Concepts Lab LLP
 
RF Experiments in Raspberry Pi
Radiojitter Concepts Lab LLP
 
BSidesMSP 2017 - SDR101 workshop
Mike Saunders
 
Design And Simulation of Modulation Schemes used for FPGA Based Software Defi...
Sucharita Saha
 
SDR Basestation with Raspberry Pi
Jonathan Singer
 
Universal software defined radio development platform
Bertalan EGED
 
Usrp family-09-open
Weslley Assis
 
Software Defined Radio Engineering course sampler
Jim Jenkins
 
Multiband Transceivers - [Chapter 5] Software-Defined Radios
Simen Li
 
SDR101-presentation-distro
Mike Saunders
 
OSINT RF Reverse Engineering by Marc Newlin
EC-Council
 
SDR 101 - NDSU CyberSecurity 2017
Mike Saunders
 
Whitebox Handheld Software Radio Kit
Chris Testa
 
N5AC 2014-10-11 Pacificon SDR Advances
N5AC
 
final presentation
shalinigowda12
 
RF Basics, RF for Non-RF Engineers.pdf
atsnoida3
 
SOFTWARE DEFINED RADIO
KartikeyPatwal
 
Architecture of a novel configurable
VLSICS Design
 
Final_Report
Connor Delaosa
 

More from Hackito Ergo Sum (6)

PDF
[HES2013] Hacking apple accessories to pown iDevices – Wake up Neo! Your phon...
Hackito Ergo Sum
 
PDF
[HES2013] Nifty stuff that you can still do with android by Xavier Martin
Hackito Ergo Sum
 
PDF
[HES2013] Frida IRE – a tool for scriptable dynamic instrumentation in userla...
Hackito Ergo Sum
 
PDF
[HES2013] Paparazzi over ip by Daniel Mende
Hackito Ergo Sum
 
PDF
[HES2013] Information Warfare: mistakes from the MoDs by Raoul “Nobody” Chiesa
Hackito Ergo Sum
 
PDF
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
Hackito Ergo Sum
 
[HES2013] Hacking apple accessories to pown iDevices – Wake up Neo! Your phon...
Hackito Ergo Sum
 
[HES2013] Nifty stuff that you can still do with android by Xavier Martin
Hackito Ergo Sum
 
[HES2013] Frida IRE – a tool for scriptable dynamic instrumentation in userla...
Hackito Ergo Sum
 
[HES2013] Paparazzi over ip by Daniel Mende
Hackito Ergo Sum
 
[HES2013] Information Warfare: mistakes from the MoDs by Raoul “Nobody” Chiesa
Hackito Ergo Sum
 
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
Hackito Ergo Sum
 

Recently uploaded (20)

PDF
Troubleshooting Virtual Threads in Java!
Tier1 app
 
PDF
chapter 5.pdf cyber security and Internet of things
PalakSharma980227
 
PDF
Introduction to Apache Iceberg™ & Tableflow
Alluxio, Inc.
 
PDF
Code and No-Code Journeys: The Maintenance Shortcut
Applitools
 
PDF
Top 10 AI Use Cases Every Business Should Know.pdf
nicogonzalez1075
 
PDF
Dialora AI Voice Agent for Customer Support
Dialora. Ai
 
PDF
ESUG 2025: Pharo 13 and Beyond (Stephane Ducasse)
ESUG
 
PPTX
Transforming Lending with IntelliGrow – Advanced Loan Software Solutions
Intelli grow
 
PDF
Ready Layer One: Intro to the Model Context Protocol
mmckenna1
 
PDF
Meet in the Middle: Solving the Low-Latency Challenge for Agentic AI
Alluxio, Inc.
 
PPTX
MiniTool Partition Wizard Crack 12.8 + Serial Key Download Latest [2025]
filmoracrack9001
 
PPTX
Operations Profile SPDX_Update_20250711_Example_05_03.pptx
Shane Coughlan
 
PDF
Notification System for Construction Logistics Application
Safe Software
 
PDF
Show Which Projects Support Your Strategy and Deliver Results with OnePlan df
OnePlan Solutions
 
PDF
Australian Enterprises Need Project Service Automation
Navision India
 
PPT
Brief History of Python by Learning Python in three hours
adanechb21
 
PDF
SAP GUI Installation Guide for Windows | Step-by-Step Setup for SAP Access
SAP Vista, an A L T Z E N Company
 
PDF
Step-by-Step Guide to Install SAP HANA Studio | Complete Installation Tutoria...
SAP Vista, an A L T Z E N Company
 
PDF
How AI in Healthcare Apps Can Help You Enhance Patient Care?
Lilly Gracia
 
PPTX
Smart Doctor Appointment Booking option in odoo.pptx
AxisTechnolabs
 
Troubleshooting Virtual Threads in Java!
Tier1 app
 
chapter 5.pdf cyber security and Internet of things
PalakSharma980227
 
Introduction to Apache Iceberg™ & Tableflow
Alluxio, Inc.
 
Code and No-Code Journeys: The Maintenance Shortcut
Applitools
 
Top 10 AI Use Cases Every Business Should Know.pdf
nicogonzalez1075
 
Dialora AI Voice Agent for Customer Support
Dialora. Ai
 
ESUG 2025: Pharo 13 and Beyond (Stephane Ducasse)
ESUG
 
Transforming Lending with IntelliGrow – Advanced Loan Software Solutions
Intelli grow
 
Ready Layer One: Intro to the Model Context Protocol
mmckenna1
 
Meet in the Middle: Solving the Low-Latency Challenge for Agentic AI
Alluxio, Inc.
 
MiniTool Partition Wizard Crack 12.8 + Serial Key Download Latest [2025]
filmoracrack9001
 
Operations Profile SPDX_Update_20250711_Example_05_03.pptx
Shane Coughlan
 
Notification System for Construction Logistics Application
Safe Software
 
Show Which Projects Support Your Strategy and Deliver Results with OnePlan df
OnePlan Solutions
 
Australian Enterprises Need Project Service Automation
Navision India
 
Brief History of Python by Learning Python in three hours
adanechb21
 
SAP GUI Installation Guide for Windows | Step-by-Step Setup for SAP Access
SAP Vista, an A L T Z E N Company
 
Step-by-Step Guide to Install SAP HANA Studio | Complete Installation Tutoria...
SAP Vista, an A L T Z E N Company
 
How AI in Healthcare Apps Can Help You Enhance Patient Care?
Lilly Gracia
 
Smart Doctor Appointment Booking option in odoo.pptx
AxisTechnolabs
 

[HES2014] HackRF A Low Cost Software Defined Radio Platform by Benjamin Vernoux