Breaking copy protection in MCUs: then and now

When you decide to copy protect the firmware on your MCU, how effective are efforts such as setting a lock bit or enabling chip erase modes?

Sergei P. Skorobogatov’s article provides an overview of the methods he’s tried against MCUs from various manufacturers. He outlines both invasive and non-invasive techniques such as chip depackaging, microprobing and fault generation.

This document is somewhat historical in nature, covering techniques developed between 1996-2000. Nevertheless it is regarded as one of the foundational works on this aspect of hardware hacking.

Sergei has updated this information with his PhD thesis from 2004.

Join the Conversation


  1. i have ic micro with this number
    can you unlock or break for me
    i have: atmega8- atmega32- atmega64- atmega90can128-
    please send a email about subject
    my mail:

    hi my dears
    i have company in the iran
    i have some ic micro until is lock.
    can you unlock or break this ic for me
    my ic list:

    im going to go to china to shenzhen city for break my ic.
    how long do you need for break this ic.becuse i want take wisa for china.
    please help me about this subject.
    my mobile number: 00989133252783

  2. Try to work hard, being inventive and don’t fuck the other’s work. Knowledge is not reached copying…

Leave a comment

Your email address will not be published. Required fields are marked *

Notify me of followup comments via e-mail. You can also subscribe without commenting.