Break IC, Recover MCU, Microcontroller Reverse Engineering

Posts Tagged ‘mcu program clone’

Clone IC Program from memory which include flash and eeprom memory, reset the status of Microcontroller Chip from locked to open one;

Clone IC Program from memory which include flash and eeprom memory,

One of the most effective ways of IC Clone is by Brute force MCU cracking, can be also applied to a hardware design implemented into an ASIC or a CPLD. In this case the IC attacker tries to apply all possible logic combinations to the input of the device while observing all its outputs. That kind of ic break could be also called black-box analysis because the ic decryption expert does not have to know anything about the design of the device under test.

He only tries to understand the function of the device by trying all possible combinations of signals. This approach works well only for relatively small logic devices. Another problem when extracting program from IC memory will face is that designs implemented in CPLDs or ASICs have flip-flops, so the output will probably be function of both the previous state and the input. But the search space can be significantly reduced if the signals are observed and analysed beforehand. For example, clock inputs, data buses and some control signals could be easily identified, significantly reducing the area of search.