Forum Discussion

Altera_Forum's avatar
Altera_Forum
Icon for Honored Contributor rankHonored Contributor
14 years ago

Security vulnerability with MAX CPLD's !!

I'm currently using an EPM3256 CPLD in a prototype to prove a design and was thinking of using the same CPLD in the final revision until a colleague alerted me to possible security vulnerabilities wi...
Altera_Forum's avatar
Altera_Forum
Icon for Honored Contributor rankHonored Contributor
14 years ago

--- Quote Start ---

Sorry I didn't see that you were using a Max 3000A and not a Max V. In that case it makes things a lot harder, as the Max 3000 doesn't use a separate configuration memory but has EEPROM cells directly integrated in the LABs. In this case there is no way to access the configuration by probing the power supply or trying to trigger errors that way, as there in no configuration data loading. The only solution I see to get back the data in that case is either through a magical undocumented JTAG command (which I'm not aware of, and I don't think Altera would have done this) or by opening the chip and trying to make that bit change in some way. So this doesn't change what I said, while it isn't impossible it requires lots of knowledge and equipment, and probably isn't cheap.

--- Quote End ---

Thanks for the reply

The thing is, the site I posted the link for is offering that service. These dudes in china don't care about IP protection or patents :( Is there anything in the MAX II or V parts that would make an invasive or semi-invasive attack difficult or is it just a matter of time before they can reverse engineer those ? Maybe someone from Altera can tell us.

regards

http://www.mcu-reverse.com/contact-us (http://www.mcu-reverse.com/contact-us)

--- Quote Start ---

Email: mcureverse@gmail.com

Tel: 86-0755-25895856

FAX: 86-0755-2589681

Skype: simendi0755

Address for IC samples shipping:

Room 2110, Changhong Building, No. 3013 Sun Gang East Road, Luohu District, Shenzhen, Guangdong Province, China. (Zip code: 518010)

How to get started?

A. Please send an inquiry by skype, email or call with description of protected device you have.

B. Our staff will response quickest with quotation and delivery time and conditions for service.

C. Ship us the protected device, along with at least two or more not-programmed samples.

D. Before extracting the code, you need to pay 50% deposit by Paypal.

E. After extracting the code, we will send you back two programmed devices for you to test.

F. after making sure we had done our job with success, you will need to make final payment to receive the source code( .bin file or .hex file).

--- Quote End ---