DJ🌞

Well hello and welcome to #nakeddiefriday -- the second one in April.

My pleasure to introduce you the guest of today: ATSAMA5D26C by Atmel. This is a SoC with one Cortex-A5 core and a boatload of peripherals.

Full-res map: http://infosecdj.net:8086/map/atmel/atsama5d26c-cu/infosecdj_mz_nikpa40x/

#electronics #reverseengineering #icre #microscopy

Apr 10 at 4:50pmWeb
Show threadDJ🌞Apr 10

I took the liberty of removing the top aluminium layer which got stripped almost completely.

Note the colours; as it would seem, this is likely to be a copper process. The lower layers never shone the classic silver.

Full-res map: http://infosecdj.net:8086/map/atmel/atsama5d26c-cu/infosecdj_my_nikpa40x_d1/

Show threadDJ🌞Apr 10
One particularly noteworthy feature of this die is, they put mask ID markings in Morse code. These are located along the top edge of the image.
Show threadDJ🌞Apr 10

I have a bit of history with the chips of this series. Previously I had a look from the power analysis angle: https://labs.withsecure.com/advisories/microchip-atsama5-soc-multiple-vulnerabilities-full-release

The point of the exercise thus is to locate the ROM on this die.

Microchip ATSAMA5 SoC Multiple Vulnerabilities [Full Release]

Show threadDJ🌞Apr 10
I say, there is not much to be seen under all the power distribution. There are a couple distinct IP blocks the purpose of which I do not know; some of them look more analog than the others. There is probably some kind of memory in the top right corner. I suppose we will see more with further deprocessing. Until then, I wish you all a merry end of the week.
Show threadDJ🌞Apr 12

The next imaging run has finished at midnight, and here is the result. The corners were obliterated. :-) It seems after two top layers, the remaining 5 are spaced rather closely.

Full-res map: http://infosecdj.net:8086/map/atmel/atsama5d26c-cu/infosecdj_mx_nikpa60x_d2/

#electronics #reverseengineering