Breaking copy protection in MCUs: then and now

When you decide to copy protect the firmware on your MCU, how effective are efforts such as setting a lock bit or enabling chip erase modes?

Sergei P. Skorobogatov’s article provides an overview of the methods he’s tried against MCUs from various manufacturers. He outlines both invasive and non-invasive techniques such as chip depackaging, microprobing and fault generation.

This document is somewhat historical in nature, covering techniques developed between 1996-2000. Nevertheless it is regarded as one of the foundational works on this aspect of hardware hacking.

Sergei has updated this information with his PhD thesis from 2004.

Join the Conversation

4 Comments

  1. i have ic micro with this number
    can you unlock or break for me
    i have: atmega8- atmega32- atmega64- atmega90can128-
    33fj256gp506
    please send a email about subject
    my mail: barati2783@yahoo.com

    hi my dears
    i have company in the iran
    i have some ic micro until is lock.
    can you unlock or break this ic for me
    my ic list:
    atmega8
    atmega32
    atmega64
    at90can128
    33fj256gp506

    im going to go to china to shenzhen city for break my ic.
    how long do you need for break this ic.becuse i want take wisa for china.
    please help me about this subject.
    my mobile number: 00989133252783

  2. Try to work hard, being inventive and don’t fuck the other’s work. Knowledge is not reached copying…

Leave a comment

Your email address will not be published. Required fields are marked *

Notify me of followup comments via e-mail. You can also subscribe without commenting.