SlideShare a Scribd company logo
HackRF
A Low Cost Software
Defined Radio Platform
Hackito Ergo Sum 2013
Benjamin
Vernoux
Youssef
Touil
2
Software Defined Radio
(SDR)
Radio by
Digital Signal Processing
(DSP)
3
Digital signals
A digital signal is a physical signal that is a
representation of a sequence of discrete
values like a digitized analog signal.
4
ADC / DAC
http://upload.wikimedia.org/wikipedia/commons/0/04/Digital.signal.d
iscret.svg
5
Analog Audio
●
Phonograph
(Thomas Edison 1877)
●
Gramophone / Vinyl records
●
Magnetophon / Tape
●
Old Telephone
6
Digital Audio
●
DECT (Phone)
●
CD/DVD/Blu-Ray
●
DAT
●
Hard Disk Recorder
The world of analog radio...
Synopsis of a single conversion
radio
ADC
DemodMixerAmplifier BPF
Oscillator
(PLL)
The Software Defined Radio
Synopsis of a radio implemented by
software components
Perfect Software
Radio Components
SDR# Software
HackRF
DemodBPFMixerAmplifier
Oscillator
(CORDIC)
9
Fexibility
Many Radios in one
(with the right
antenna)
10
Right Antenna
like cheap (less than 30USD)
Log Periodic PCB Antennas
http://www.wa5vjb.com/products1.html
400 to 1000
MHz
850 to 6500
MHz
11
Reconfigurability
Software
Modification
12
The Future
All radios
will be software
radios
13
Target Operating
Frequencies
●
0 - 1 GHz : NFC, CB/FM radio,
Car/Door Key Fob, TI CC
subGHz ...
●
1 - 2 GHz: DECT, GPS, GSM
●
2.4 GHz: 802.11, Bluetooth,
Zigbee
●
5.9 GHz: DSRC, WAVE, 802.11
14
Target Bandwidth
●
0 - 1 MHz : Lot of stuff
●
1 MHz: Bluetooth
●
2 MHz: Zigbee, DECT
●
5 MHz: LTE
●
20MHz: 802.11/WLAN
15
ISM band for unlicensed use
Frequency range Bandwidth Center frequency
6.765 MHz 6.795 MHz 30 kHz 6.780 MHz
13.553 MHz 13.567 MHz 14 kHz 13.560 MHz
26.957 MHz 27.283 MHz 326 kHz 27.120 MHz
40.660 MHz 40.700 MHz 40 kHz 40.680 MHz
433.050 MHz 434.790 MHz 1.84 MHz 433.920 MHz
902.000 MHz 928.000 MHz 26 MHz 915.000 MHz
2.400 GHz 2.500 GHz 100 MHz 2.450 GHz
5.725 GHz 5.875 GHz 150 MHz 5.800 GHz
24.000 GHz 24.250 GHz 250 MHz 24.125 GHz
61.000 GHz 61.500 GHz 500 MHz 61.250 GHz
122.000 GHz 123.000 GHz 1 GHz 122.500 GHz
244.000 GHz 246.000 GHz 2 GHz 245.000 GHz
Respect laws of your country regarding EMI and
the maximum TX power allowed per band
16
RECEIVE
OR
TRANSMIT
Half Duplex
(Limited by
MCU / USB 2.0HS)
17
We can live without
●
High dynamic range
●
Fast DSP/FPGA
●
Full-Duplex
18
COST
High quality
analog
components
Cheap analog
components
+ CPU/MCU
(HackRF)
OR
19
COST
Single device any
laptop owner can
afford.
For a price estimated
to 300 USD.
20
OPEN SOURCE
Hardware
and Software
(mainly GPL)
21
HackRF Use Cases
●
RFID (Radio Freq Identification)
●
Cellular GSM base station
●
GPS receiver
●
AM/FM Radio TX/RX, APCO-25
(USA) / TETRA (EU) Digital Radio
●
Digital Television (ATSC/DVB-T)
●
Passive radar
●
And lot of others ...
22
Hardware Design
Process
Michael
Designer
Jared
Consultant
23
Retrospective
HackRF HW
●
1st Board
MCU/CPLD
Jellybean
16 Apr 2012
24
C
P
L
D
LPC4330
Restrospective
Jellybean
Digital
25
●
2nd Board
Lemondrop
6 May 2012
Retrospective
HackRF HW
26
Restrospective
Lemondrop
ADC/DACRF TX/RX
Base Band
2.3 -
2.7 GHz
27
JellyBean & LemonDrop
28
●
3rd Board
Lollipop
23 Jun 2012
Retrospective
HackRF HW
29
Restrospective
Lollipop
RFFC5071
SYNTHESIZER
WB
30MHz-6GHz
MIXER GHz
30
●
4th Board
Bubblegum
24 July 2012
Retrospective
HackRF HW
31
Restrospective
Bubblegum
TRF3765
SYNTHESIZER
WB
300MHz-4.8GHz
MIXER GHz
32
●
5th Board
Licorice
27 Aug 2012
Retrospective
HackRF HW
33
Restrospective
Licorice
RFFC5072SYNTHESIZER
WB
30MHz-6GHz
MIXER GHz
34
Restrospective
All in one
35
●
6th Board
Jawbreaker
6 Dec 2012
HackRF HW
36
HackRF Beta Board
Jawbreaker
37
Jawbreaker HW
●
More than 300 components
●
Majority of components are
0.4mm×0.2mm (0402 R&C)
●
More than 25 IC
●
About 2 days of manual
assembly and testing for
one board
38
RFFC5071/2
SYNTHESIZER
WB
30MHz-6GHz
MIXER
MAX2837
2.3GHz-2.7GHz
Wireless
Broadband RF
Transceiver
MAX5864
ADC/DAC
Up to 22MHz
HackRF Frontend/BaseBand
RF Frontend BaseBand / IF (Intermediate Freq)
RF Frontend: Generic term for all the
circuitry between the antenna and the
first intermediate frequency (IF) stage
http://en.wikipedia.org/wiki/RF_front_end
Baseband refers to the original frequency
range of a transmission signal before it is
converted, or modulated, to a different
frequency range
http://www.techterms.com/definition/baseband
LP Filter -> F [30MHz;2.3GHz[
ByPass → F [2.3GHz;2.7GHz[
HP Filter -> F [2.7GHz;6.0GHz]
39
HackRF Digital Stage
MAX5864
ADC/DAC
Up to 22MHz
NXP
LPC43xx
Maximum 20MHz ADC/DAC
limited by USB2 HS
(about 40MiB/s)
40
HackRF Clock
Flexible clock generation
Si5351
CLK0: MAX5864/CPLD
CLK1: CPLD (2*CLK0)
CLK2: MCU SGPIO (2*CLK0)
CLK4: 50MHz RFFC5071/2
CLK5: 40MHz MAX2837
41
HackRF Jawbreaker
HS USB 2.0
(40MiB/s)
30MHz to
6GHz OpFreq
20MHz Max
BW
BusPowered
(max 500mA)
Half-Duplex
Transceiver
Open Source
HW & SW
42
Defense Advanced
Research Projects
Agency
(DARPA)
Cyber Fast Track
(CFT)
43
This is a big
project for us.
This isn't a big
project for DOD.
44
The World
needs
Open Source
Hardware for
SDR
45
Public Process
github.com/mossmann/hackrf
46
Public Process
github.com/mossmann/libopencm3
See us also on IRC
Freenode channel #hackrf
47
Volunteers !
Everyone is
welcome to help
us developping
SDR tools
48
TOOLS
Kicad
GCC
Gnu Radio
SDR#
49
100%
NDA
Free !
50
NXP LPC43xx
ARM Cortex
DualCore
M4F + M0 @ 204 MHz
SGPIO + FPU(32bits)
HS USB 2.0
libopencm3
51
Thank you !
DARPA CFT
BIT Systems
Michael Ossmann
Jared Boone
Youssef
Touil
Hackito
52
HackRF links
http:/greatscott
gadgets.com/ha
ckrf
53
HackRF beta
https://greatscott
gadgets.com/for
ms/hackrf-beta-
reg.html
54
And Now
DEMO !!
55
HackRF Host Tools
Windows/Linux
●
hackrf_info (board info/ident)
●
hackrf_cpldjtag (update CPLD)
●
hackrf_max2837 / rffc5071 /
si5351c (R/W registers)
●
hackrf_spiflash (update fw)
●
hackrf_transfer (RX/TX)
56
HackRF SDR#
FM DEMO
57
HackRF SDR#
Talkies DEMO
58
HackRF SDR#
DECT Phone DEMO
59
BONUS
60
NXP
LPC4330
µUSB
2.0HS
SPIFI
BOOT
MODE
NXP LPC4330
●Dual Core MCU M4+FPU & M0
●204 MHz, 264KB SRAM
●High Speed USB 2.0
●SGPIO (used for ADC/DAC up to 40MHz IQ with 20MHz ADC/DAC)
●Open Source development using libopencm3 (LGPL v3)
SPIFI
●1MB SPIFI boot
●Code => SRAM
BOOT MODE
●SPIFI Boot
●USB0 (Recovery mode)
61
XILINX
CPLD
XC2C64A
MAX
5864
MAX
2837
SI
5351C
RFFC
5072
MAX 5864
●ADC / DAC up to 22MHz
●8 bits ADC and 10bits DAC
XILINX CPLD
●Mainly used for synchro
with SGPIO & MAX5864
MAX 2837
2.3GHz to 2.7GHz Wireless
Broadband RF Transceiver
SI5351C
●Clock generator and VCXO
●Up to 8 independant Clocks
RFFC5072
●Wideband synthesizer/vco
withintegrated 6GHz mixer

More Related Content

PDF
Getting started with sdr
PPTX
Software Defined Radio Engineering course sampler
PDF
Software Defined Radio
PPTX
Software defined radio
PPTX
Introduction to 5G NR
PDF
Intermediate: The 5G Icon Story
PPTX
Cognitive radio networks
PPT
Rf receiver design case studies
Getting started with sdr
Software Defined Radio Engineering course sampler
Software Defined Radio
Software defined radio
Introduction to 5G NR
Intermediate: The 5G Icon Story
Cognitive radio networks
Rf receiver design case studies

What's hot (20)

PPT
Comparison between 2g, 2.5g, 3g, lte and lte a
PDF
Radio network planning for 4G LTE
PPTX
Software defined radio
PPTX
Sdr seminar
PDF
Software defined radio
PDF
Understanding RF Fundamentals and the Radio Design of Wireless Networks
PPT
Sdr the future of radio
PPTX
GSM. Global System for Mobile Communication.
PPT
Spectrum Analyzer Fundamentals/Advanced Spectrum Analysis
PPTX
Unit 1 introduction to software defined radios
PDF
Understanding olt, onu, ont and odn full
PDF
Lte optimization
PPTX
4G Handovers || LTE Handovers ||
PPTX
Receiver design
PPTX
PDF
Beginners: M2M, MTC & IoT
PPT
Abhinav End Sem Presentation Software Defined Radio
PPTX
Global System for Mobile (GSM)
PPTX
Placement
PDF
Ttalteoverview 100923032416 Phpapp01 (1)
Comparison between 2g, 2.5g, 3g, lte and lte a
Radio network planning for 4G LTE
Software defined radio
Sdr seminar
Software defined radio
Understanding RF Fundamentals and the Radio Design of Wireless Networks
Sdr the future of radio
GSM. Global System for Mobile Communication.
Spectrum Analyzer Fundamentals/Advanced Spectrum Analysis
Unit 1 introduction to software defined radios
Understanding olt, onu, ont and odn full
Lte optimization
4G Handovers || LTE Handovers ||
Receiver design
Beginners: M2M, MTC & IoT
Abhinav End Sem Presentation Software Defined Radio
Global System for Mobile (GSM)
Placement
Ttalteoverview 100923032416 Phpapp01 (1)

Viewers also liked (12)

PDF
GNU Radio for space research
KEY
Gnu Radio and the Universal Software Radio Peripheral
PDF
Spring Roo Internals Javaday IV
PPTX
A SOFTWARE DEFINED RADIO BASED
PPT
ISM Band Sub-GHz RF Transceiver
PPTX
Software defined radio and the hacker
PDF
Kablosuz İletişim ve Güvenlik
PDF
Rf basics
PPTX
GNU Radio
PDF
射頻電子 - [實驗第三章] 濾波器設計
PPT
十倍速記憶! 考試必背252字根 001~010
PPT
十倍速252字根 2016年新版 241-252
GNU Radio for space research
Gnu Radio and the Universal Software Radio Peripheral
Spring Roo Internals Javaday IV
A SOFTWARE DEFINED RADIO BASED
ISM Band Sub-GHz RF Transceiver
Software defined radio and the hacker
Kablosuz İletişim ve Güvenlik
Rf basics
GNU Radio
射頻電子 - [實驗第三章] 濾波器設計
十倍速記憶! 考試必背252字根 001~010
十倍速252字根 2016年新版 241-252

Similar to [HES2014] HackRF A Low Cost Software Defined Radio Platform by Benjamin Vernoux (20)

PDF
Software Defined Radio (SDR)
PPTX
Software Defined Radio Workshop
PPSX
Getting started with digital modes
PPT
Fujitsu Iccad Presentation--Enable 100G
PDF
A CMOS 79GHz PMCW radar SOC
PPT
3D-DRESD ASIDA
PDF
GNU Radio & digitaal vliegtuig spotten
PDF
N5AC 2014-10-11 Pacificon SDR Advances
PPTX
Software defined radio....
PDF
Whitebox Handheld Software Radio Kit
PDF
Multiband Transceivers - [Chapter 5] Software-Defined Radios
PDF
PPTX
RF Experiments in Raspberry Pi
PDF
Sil dgcis themis_n_specifications_v1.0_beta
PPTX
MCube_slides_20min.pptx
PPT
Mag Layers Products
PDF
Webinar Keysight: Soluções de Teste para Tecnologias Emergentes 5G-NR e IoT-L...
PDF
Poster digital-070624
PDF
Tablet in 2012
PDF
Software Defined Radio (SDR)
Software Defined Radio Workshop
Getting started with digital modes
Fujitsu Iccad Presentation--Enable 100G
A CMOS 79GHz PMCW radar SOC
3D-DRESD ASIDA
GNU Radio & digitaal vliegtuig spotten
N5AC 2014-10-11 Pacificon SDR Advances
Software defined radio....
Whitebox Handheld Software Radio Kit
Multiband Transceivers - [Chapter 5] Software-Defined Radios
RF Experiments in Raspberry Pi
Sil dgcis themis_n_specifications_v1.0_beta
MCube_slides_20min.pptx
Mag Layers Products
Webinar Keysight: Soluções de Teste para Tecnologias Emergentes 5G-NR e IoT-L...
Poster digital-070624
Tablet in 2012

More from Hackito Ergo Sum (6)

PDF
[HES2013] Hacking apple accessories to pown iDevices – Wake up Neo! Your phon...
PDF
[HES2013] Nifty stuff that you can still do with android by Xavier Martin
PDF
[HES2013] Frida IRE – a tool for scriptable dynamic instrumentation in userla...
PDF
[HES2013] Paparazzi over ip by Daniel Mende
PDF
[HES2013] Information Warfare: mistakes from the MoDs by Raoul “Nobody” Chiesa
PDF
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
[HES2013] Hacking apple accessories to pown iDevices – Wake up Neo! Your phon...
[HES2013] Nifty stuff that you can still do with android by Xavier Martin
[HES2013] Frida IRE – a tool for scriptable dynamic instrumentation in userla...
[HES2013] Paparazzi over ip by Daniel Mende
[HES2013] Information Warfare: mistakes from the MoDs by Raoul “Nobody” Chiesa
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...

Recently uploaded (20)

PDF
medical staffing services at VALiNTRY
PPTX
L1 - Introduction to python Backend.pptx
PPTX
Lecture 3: Operating Systems Introduction to Computer Hardware Systems
PDF
Raksha Bandhan Grocery Pricing Trends in India 2025.pdf
PDF
Odoo Companies in India – Driving Business Transformation.pdf
PDF
Navsoft: AI-Powered Business Solutions & Custom Software Development
PPTX
history of c programming in notes for students .pptx
PDF
Design an Analysis of Algorithms I-SECS-1021-03
PPTX
Operating system designcfffgfgggggggvggggggggg
PDF
Audit Checklist Design Aligning with ISO, IATF, and Industry Standards — Omne...
PPTX
CHAPTER 2 - PM Management and IT Context
PPTX
Introduction to Artificial Intelligence
PDF
PTS Company Brochure 2025 (1).pdf.......
PDF
Internet Downloader Manager (IDM) Crack 6.42 Build 41
PPTX
Oracle E-Business Suite: A Comprehensive Guide for Modern Enterprises
PDF
SAP S4 Hana Brochure 3 (PTS SYSTEMS AND SOLUTIONS)
PDF
Softaken Excel to vCard Converter Software.pdf
PDF
EN-Survey-Report-SAP-LeanIX-EA-Insights-2025.pdf
PPTX
Agentic AI Use Case- Contract Lifecycle Management (CLM).pptx
PPTX
Essential Infomation Tech presentation.pptx
medical staffing services at VALiNTRY
L1 - Introduction to python Backend.pptx
Lecture 3: Operating Systems Introduction to Computer Hardware Systems
Raksha Bandhan Grocery Pricing Trends in India 2025.pdf
Odoo Companies in India – Driving Business Transformation.pdf
Navsoft: AI-Powered Business Solutions & Custom Software Development
history of c programming in notes for students .pptx
Design an Analysis of Algorithms I-SECS-1021-03
Operating system designcfffgfgggggggvggggggggg
Audit Checklist Design Aligning with ISO, IATF, and Industry Standards — Omne...
CHAPTER 2 - PM Management and IT Context
Introduction to Artificial Intelligence
PTS Company Brochure 2025 (1).pdf.......
Internet Downloader Manager (IDM) Crack 6.42 Build 41
Oracle E-Business Suite: A Comprehensive Guide for Modern Enterprises
SAP S4 Hana Brochure 3 (PTS SYSTEMS AND SOLUTIONS)
Softaken Excel to vCard Converter Software.pdf
EN-Survey-Report-SAP-LeanIX-EA-Insights-2025.pdf
Agentic AI Use Case- Contract Lifecycle Management (CLM).pptx
Essential Infomation Tech presentation.pptx

[HES2014] HackRF A Low Cost Software Defined Radio Platform by Benjamin Vernoux