Comments on: ATMEGA88 Teardown http://www.flylogic.net/blog/?p=23 Mon, 06 Sep 2010 15:28:41 -0700 hourly 1 http://wordpress.org/?v=3.0.1 By: Atmel ATMEGA2560 Analysis (Blackhat follow-up) « Flylogic's Analytical Blog http://www.flylogic.net/blog/?p=23&cpage=1#comment-1806 Atmel ATMEGA2560 Analysis (Blackhat follow-up) « Flylogic's Analytical Blog Tue, 10 Aug 2010 03:57:11 +0000 http://www.flylogic.net/blog/?p=23#comment-1806 [...] lazyness back at Atmel HQ.  All we did was look for the metal plates we detailed back in our ATMEGA88 teardown last year and quickly deduced which outputs were the proper outputs in under 20 [...] [...] lazyness back at Atmel HQ.  All we did was look for the metal plates we detailed back in our ATMEGA88 teardown last year and quickly deduced which outputs were the proper outputs in under 20 [...]

]]> By: admin http://www.flylogic.net/blog/?p=23&cpage=1#comment-1690 admin Mon, 21 Jun 2010 16:16:27 +0000 http://www.flylogic.net/blog/?p=23#comment-1690 Hah! Thanks, we see it! Hah! Thanks, we see it!

]]> By: Geordy http://www.flylogic.net/blog/?p=23&cpage=1#comment-1688 Geordy Wed, 16 Jun 2010 21:15:11 +0000 http://www.flylogic.net/blog/?p=23#comment-1688 Great breakdown! Really helps to see all the areas of the chip explained. You have a little typo in the first sentence after the third picture. Great breakdown! Really helps to see all the areas of the chip explained. You have a little typo in the first sentence after the third picture.

]]> By: mayhem http://www.flylogic.net/blog/?p=23&cpage=1#comment-1674 mayhem Mon, 05 Apr 2010 13:33:35 +0000 http://www.flylogic.net/blog/?p=23#comment-1674 Ahhh the smell of HF in the morning . . .smells like . . . geekery! Ahhh the smell of HF in the morning . . .smells like . . . geekery!

]]> By: SEE http://www.flylogic.net/blog/?p=23&cpage=1#comment-1438 SEE Tue, 12 May 2009 19:38:50 +0000 http://www.flylogic.net/blog/?p=23#comment-1438 There is a sophisticated equipment (instrument) to depackaging chip, but what it is I do not know, if you know the part number or manufacturer please post. There is a sophisticated equipment (instrument) to depackaging chip, but what it is I do not know, if you know the part number or manufacturer please post.

]]> By: Anon http://www.flylogic.net/blog/?p=23&cpage=1#comment-1306 Anon Thu, 09 Oct 2008 08:50:19 +0000 http://www.flylogic.net/blog/?p=23#comment-1306 You write: The two photos above contain two of the 30+ configuration fuses present however it makes a person wonder why did Atmel cover the floating gate of the upper fuse with a plate of metal (remember the microchip article with the plates over the floating gates?) The linked article did not make it entirely clear to me, but is this the answer? One set of structures grabbed my attention immediately: a set of metal shields over transistors, following a regular pattern that had about the right number of devices to account for all the security bits. Full metal shields covering a device is very rare in silicon, and like a big X marking the spot, it draws attention to itself as holding something very important. You write:
The two photos above contain two of the 30+ configuration fuses present however it makes a person wonder why did Atmel cover the floating gate of the upper fuse with a plate of metal (remember the microchip article with the plates over the floating gates?)

The linked article did not make it entirely clear to me, but is this the answer?
One set of structures grabbed my attention immediately: a set of metal shields over transistors, following a regular pattern that had about the right number of devices to account for all the security bits. Full metal shields covering a device is very rare in silicon, and like a big X marking the spot, it draws attention to itself as holding something very important.

]]> By: Heath http://www.flylogic.net/blog/?p=23&cpage=1#comment-1244 Heath Sat, 31 May 2008 15:16:48 +0000 http://www.flylogic.net/blog/?p=23#comment-1244 Tamper-detection sense leads? Tamper-detection sense leads?

]]> By: admin http://www.flylogic.net/blog/?p=23&cpage=1#comment-467 admin Tue, 05 Feb 2008 16:13:14 +0000 http://www.flylogic.net/blog/?p=23#comment-467 First things first- Anyone reading this can see the Material Safety DataSheet (MSDS) here: http://www.jtbaker.com/msds/englishhtml/F1060.htm Have you tried heating the solution and the part before? Is there any ceramic around the MOSFET? Perhaps a picture might be helpful of the piece. We would suggest heat but if you do so, do it very carefully. Good luck! First things first-

Anyone reading this can see the Material Safety DataSheet (MSDS) here:

http://www.jtbaker.com/msds/englishhtml/F1060.htm

Have you tried heating the solution and the part before?

Is there any ceramic around the MOSFET? Perhaps a picture might be helpful of the piece.

We would suggest heat but if you do so, do it very carefully. Good luck!

]]> By: pjp http://www.flylogic.net/blog/?p=23&cpage=1#comment-456 pjp Mon, 04 Feb 2008 08:26:42 +0000 http://www.flylogic.net/blog/?p=23#comment-456 Hi, I have a few parts (MOSFETs) that I suspect are forgeries. I'd like to take them apart and check the construction to verify. I've tried dipping the transistors in feCl3, to dissolve away the copper with some results. Now I want to get at the die from the other side. What (homebrew) approach would you recommend to remove the top plastic (or is it ceramic) ? (Obviously I can't afford your services - but looking on the bright side - I'm not American, so I can use any toxic/caustic chemicals that you wouldn't be able to recommend to a USian. ;-) Hi,
I have a few parts (MOSFETs) that I suspect are forgeries. I’d like to take them apart and check the construction to verify.
I’ve tried dipping the transistors in feCl3, to dissolve away the copper with some results. Now I want to get at the die from the other side.

What (homebrew) approach would you recommend to remove the top plastic (or is it ceramic) ?
(Obviously I can’t afford your services – but looking on the bright side – I’m not American, so I can use any toxic/caustic chemicals that you wouldn’t be able to recommend to a USian. ;-)

]]> By: admin http://www.flylogic.net/blog/?p=23&cpage=1#comment-374 admin Tue, 29 Jan 2008 01:10:18 +0000 http://www.flylogic.net/blog/?p=23#comment-374 Total of 6 bits for lock protection- 2 for programming mode program/verify (e.g. the lock bits) 4 for BSL setting (used in the application if memory has been segmented into a boot area and application area). Flylogic's wishlist: Allow Oscillator selection from internal to external via a register bit Give us a UART on the Tiny24 type 14-pin devices ;-) Total of 6 bits for lock protection-

2 for programming mode program/verify (e.g. the lock bits)
4 for BSL setting (used in the application if memory has been segmented into a boot area and application area).

Flylogic’s wishlist:

Allow Oscillator selection from internal to external via a register bit
Give us a UART on the Tiny24 type 14-pin devices

;-)

]]>