home.social

#icre — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #icre, aggregated by home.social.

  1. Greetings. This is #nakeddiefriday and today I got one on a reader's request.

    I was kindly provided with the ASIC chip from the new #Lego Smart Brick. It is the one marked DA000001-04, which nobody really knows what it is and who made it. There were suggestions it was made by Dialog but no solid evidence AFAIK.

    The first image is with the die intact. You can see a ball pad array on the redistribution layer. RDL is made from polyimide with copper traces, not unlike flex PCBs. It is bonded to the silicon die pads on the perimeter. Unfortunately, RDL considerably obscures the die.

    Full-res map: infosecdj.net/map/csem/da00000 (layered)

    1/n

    #electronics #reverseengineering #icre

  2. Well hello and welcome to #nakeddiefriday -- the second one in April.

    My pleasure to introduce you the guest of today: ATSAMA5D26C by Atmel. This is a SoC with one Cortex-A5 core and a boatload of peripherals.

    Full-res map: infosecdj.net:8086/map/atmel/a

    #electronics #reverseengineering #icre #microscopy

  3. Greetings and welcome to today's #nakeddiefriday installment.

    Today's guest is a smartcard chip, for which I do not know the actual p/n -- only it's die marking: M7690-G1, by Infineon. This came from a SIM card. The chip had polyimide on top which had to be stripped off, hence the damage on some top metal.

    Unfortunately, power distribution routing and CMP dummy fill obstructs the majority of the detail. 🧵

    #electronics #reverseengineering #icre #smartcard

  4. Hello! It has been a little while, but #nakeddiefriday is back in town.

    Today's exhibit is an old PIC1650A. Yes, one of *the* PIC series of microcontrollers. Note it was designed by General Instrument in 1980. It was fabbed in a single metal layer, metal-gate NMOS process. The image is about 4.3x3.8 mm.

    No full-res link as SP is still borked.

    #electronics #reverseengineering #icre

  5. As I will be travelling starting tomorrow, I declare the #nakeddiefriday today.

    Instead of going deeper into one particular die, this will be several of them but one-pagers.

    This one is HV9911 by Supertex (now owned by Microchip). Those following me have probably seen the epic struggle with restoring a diving light; this one came from the LED driver chip in the light. Entirely undamaged, as far as I can tell. Of particular interest is an array of fuses in the top right corner.

    #electronics #reverseengineering #icre

  6. Hello and welcome to the second installment of #nakeddiefriday in this new year!

    Today's image is of a M37620E8FP, a Mitsubishi microcontroller. This should be one from "group 7620" but I did not find a datasheet for this one. Custom markings on the package likely identify the ROM and its version.

    Full-res pano: siliconprawn.org/map/mitsubish

    Many thanks to @RueNahcMohr for supplying this sample!

    #electronics #reverseengineering #icre

  7. Happy belated #nakeddiefriday to you all!

    Here is one for this week; a mask ROM with p/n MSM531001B (as marked on the die) by OKI. It stores 1 Mb and has the standard pinout. Manufactured in a 1-metal 1-poly process.

    Many thanks to @RueNahcMohr for supplying this sample!

    #electronics #reverseengineering #icre

  8. It is #nakeddiefriday if I say so, so here is another naked die for your viewing pleasure.

    This is IR2137 from International Rectifier Inc. It's a "high voltage, high speed 3-phase IGBT driver best suited for AC motor drive applications." One can clearly see a lot of circuitry triplicated on this die. Also, a very funny wheelies.

    Many thanks to @RueNahcMohr for supplying this sample!

    #electronics #reverseengineering #icre

  9. Which pad is which? #BSBACM edition.
    First we trace out the power pads...

    There are 52 bond pads and 48 pins, so 4 of those pads need to double up...

    #ICRE #ICReverseEngineering #NakedDieFriday

  10. Points available for anyone who can tell me what this chip is. #icre #nakeddiefriday

  11. Yo all, it is Friday now where I am, so might as well get the #nakeddiefriday thing going.

    Today's guest is the famous NES PPU chip, RP2C07A by Ricoh. What's interesting about this particular sample is that it's very very dead. Many thanks to @root42 for supplying it!

    As always, a short thread follows. Why not give this one a boost while you're here? :D

    SiPron page for those hi-res maps we all love: siliconpr0n.org/archive/doku.p

    Note the die is oriented the same way Visual 2C02 has it: nesdev.org/wiki/Visual_2C02

    #electronics #reverseengineering #icre #failureanalysis

  12. Yo all, it is Friday now where I am, so might as well get the #nakeddiefriday thing going.

    Today's guest is the famous NES PPU chip, RP2C07A by Ricoh. What's interesting about this particular sample is that it's very very dead. Many thanks to @root42 for supplying it!

    As always, a short thread follows. Why not give this one a boost while you're here? :D

    SiPron page for those hi-res maps we all love: siliconpr0n.org/archive/doku.p

    Note the die is oriented the same way Visual 2C02 has it: nesdev.org/wiki/Visual_2C02

    #electronics #reverseengineering #icre #failureanalysis

  13. Yo all, it is Friday now where I am, so might as well get the #nakeddiefriday thing going.

    Today's guest is the famous NES PPU chip, RP2C07A by Ricoh. What's interesting about this particular sample is that it's very very dead. Many thanks to @root42 for supplying it!

    As always, a short thread follows. Why not give this one a boost while you're here? :D

    SiPron page for those hi-res maps we all love: siliconpr0n.org/archive/doku.p

    Note the die is oriented the same way Visual 2C02 has it: nesdev.org/wiki/Visual_2C02

    #electronics #reverseengineering #icre #failureanalysis

  14. Yo all, it is Friday now where I am, so might as well get the #nakeddiefriday thing going.

    Today's guest is the famous NES PPU chip, RP2C07A by Ricoh. What's interesting about this particular sample is that it's very very dead. Many thanks to @root42 for supplying it!

    As always, a short thread follows. Why not give this one a boost while you're here? :D

    SiPron page for those hi-res maps we all love: siliconpr0n.org/archive/doku.p

    Note the die is oriented the same way Visual 2C02 has it: nesdev.org/wiki/Visual_2C02

    #electronics #reverseengineering #icre #failureanalysis

  15. Yo all, it is Friday now where I am, so might as well get the #nakeddiefriday thing going.

    Today's guest is the famous NES PPU chip, RP2C07A by Ricoh. What's interesting about this particular sample is that it's very very dead. Many thanks to @root42 for supplying it!

    As always, a short thread follows. Why not give this one a boost while you're here? :D

    SiPron page for those hi-res maps we all love: siliconpr0n.org/archive/doku.p

    Note the die is oriented the same way Visual 2C02 has it: nesdev.org/wiki/Visual_2C02

    #electronics #reverseengineering #icre #failureanalysis

  16. Great talk by Aedan Cullen (@aedancullen) at #38c3 on breaking security on the #RP2350 by glitching the OTP VDD.

    streaming.media.ccc.de/38c3/re

    I expect the bus between the state machine and OTP is like Wishbone or M68K and has a request and an acknowledge, and the data is latched on the ACK. No ACK? Guard word stays in the latch.

    #ICRE #ICReverseEngineering #FaultInjection

  17. Tonight's been interesting. @infosecdj sent 20x chip shots of the #BSBACM ASIC and OSD chip. Turns out the ASIC contains two 65C02 cores!
    Looks like one runs code from an internal ROM (which I'd love to dump and disassemble) and the other runs external code from ROM, and talks to the OSD.
    One of the functional blocks is giving me strong vibes of possibly being a DES crypto engine.

    Would love to get a discussion going!

    ASIC: siliconpr0n.org/map/general-in
    OSD: siliconpr0n.org/map/general-in
    #ICRE

  18. First chipshots from the new microscope. No idea what this chip is, other than by Motorola and with a mask code of B61T ZC419213. Does anyone recognise the artwork next to the batwing in the first photo? I'm guessing it's a country, county/state or city. #ICRE #siliconart #electronics

    Edit: thanks to everyone who pointed out that's Switzerland! The chip also has the text "Motorola EDO" and "EDO Geneva" on it, which should have been a hint XD