Flipping read-protect bits: Altera EP900 | Kibotronics
kibotronics.net · 2,613 words · saved by 1 readers
Techniques used to locate and erase on-silicon security bits via nitric acid decapsulation, uv masking and binary search.
Introduction Code Protection is a feature offered by microcontrollers to disable storage readout. A developer would typically enable it before the programmed chip lands on customer hands; in principle, disabling code protection would require full erasure of the stored firmware. Typically, code protection state is stored as a bit in on-board storage, in a dedicated area that can be programmed along with the firmware. The code protection machinery itself is established in bootrom or by a dedicated circuit, or sometimes both.1 The Altera EP900 is an old chip, so it seemed like a reasonable…
saved by
related reading
- Semi-invasive attacks - A new approach to hardware security analysiscl.cam.ac.uk
- On solving the Jane Street Reverse Engineering Challengejestoph.com
- Ken Shirriff's blogrighto.com
- Layman's Guide to IC Reverse Engineeringsiliconzoo.org
- bunnie's blogbunniestudios.com
- bunnie's blogbunniestudios.com
- Basic Bit Manipulation - HackMDhackmd.io
- Blitter - Wikipediaen.wikipedia.org
- Reading privileged memory with a side-channel - Project Zerogoogleprojectzero.blogspot.com
- How Silicon Wafers Are Made for use in microprocessor chips and integrated circuitsyoutube.com
- Blog: Zen and the Art of Microcode Hackingbughunters.google.com
- Banned Book Library | Rick's Blogrichardosgood.com