Yahoo Groups archive

Lpc2000

Index last updated: 2026-04-28 23:31 UTC

Message

Re: LPC Boot Loader Internals

2006-01-05 by unity0724

Umm... OK => by studying the bootloader, may be you can figure out
some silly mistakes by boot loader writer making CRP vulnerable to
attack. But pls reverse/disassembly on a correct CRP enabled chip.
And Let us know if you have some proven way of cracking the
protection. There is supposed to have enough hardware protection
(even if that H/W protection of "cannot crack into the JTAG enabled
window" is by "coincidence" and not original function by design).

The P89C51RD+ was also done in the same bootloader way (except
it has protection lock bits to disable the parallel programming)
Somwhow had not heard of anybody cracked the chip...

I'm happy as long as there is no simple way of cracking LPC2xxx...
Regards

--- In lpc2000@...m, "jayasooriah" <jayasooriah@y...> 
wrote:
>
> --- In lpc2000@yahoogroups.com, "unity0724" <unity0724@y...> wrote:
> > Reverse disassembly of bootloader is of no use in hacking the 
chip.
> > Regards
> 
> If this is true, Philips would have provided us with source for the
> boot loader.
> 
> You do not expect Philips to build defects into the boot loader.  
It
> does not follow however that there are no defects, or that they 
cannot
> be exploited.
> 
> In a regime where obscurity is critical component of security,
> exposing internals is a high security risk.
> 
> Jaya
>

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.