Differences

This shows you the differences between two versions of the page.

--- physical_protection [2012/02/21 01:36] – created mcmaster
+++ physical_protection [2014/01/15 14:23] (current) – [LOPPER] azonenberg
@@ Line 12: / Line 12: @@
 Obscurification techniques to make analyzing die images difficult. Most common is to make wires into a maze such that a human would get confused tracing them. However, computer aided techniques are largely immune to this.
-====== Chemical protection ======
-Very rare. I've been told that some high end military chips may have a thin layer of alkali metal put into them. The idea being if exposed to most techniques, it will react violently and destroy the chip. With proper chemical treatment and machining, such high end chip protections can usually be avoided. It may be best to destroy one chip to analyze protections and then attacking the actual chip to be imaged/tested.
 ====== UV metal shielding ======
@@ Line 19: / Line 17: @@
 ====== Die ID ======
-National claims they have some sort of anti-reverse engineering protection with their die ID scheme. Who knows if it does anything useful.
+National, Xilinx, and many other vendors have unique per-chip serial numbers stored in some sort of OTP memory on the chip. The user's firmware presumably uses this in a licensing scheme. Might make for a halfway decent anti-cloning system (until the check is found and nopped out) but is useless for preventing RE.
+====== Physical self-destructs ======
+===== Chemical protection =====
+Very rare. I've been told that some high end military chips may have a thin layer of alkali metal put into them. The idea being if exposed to most techniques, it will react violently and destroy the chip. With proper chemical treatment and machining, such high end chip protections can usually be avoided. It may be best to destroy one chip to analyze protections and then attacking the actual chip to be imaged/tested.
+We've read that some mil chips can have alkali metals to react with the strong acids typically used during decapsulation.  This can be dangerous to the tech as well as destroy the specimen with the strong heat.
+In our assessment, while it may look interesting at a first glance this is very unlikely to be used in practice simply because alkali metals diffuse very fast and destroy CMOS devices. The problems involved in keeping them separate are likely to be great enough that an alternative self-destruct method would be used.
+===== Connoisseur Coating =====
+Developed by LLNL as part of the "Connoisseur project". Very little public information.
+It's not clear what this material is. Various public sources give conflicting definitions:
+  * A [[http://www.nytimes.com/1989/11/08/business/business-technology-a-new-coating-thwarts-chip-pirates.html|1989 New York Times article]] describes it as "a resin about the consistency of peanut butter" ... "is opaque and resists solvents, heat, grinding and other techniques that have been developed for reverse engineering" ... "A second-generation coating is being developed that will automatically destroy the chip when an attempt is made chemically to break through the protective layer."
+  * [[http://web.mit.edu/6.857/OldStuff/Fall95/lectures/lecture2.ps|1995 MIT lecture slides]] reference another method which may be the referenced second-generation coating: "a layer of alumina, silicon bits, and even sodium coating" ... "usually expensive"
+===== Explosive =====
+==== LOPPER ====
+LOPPER was an experimental program to plant "tiny, non-violent, shaped charges in critical junctures in our circuits that could be triggered by the application of external voltage."  Originally intended for VINSON, but the added cost, questioned need, program delays caused it to stop after working prototypes [A history of US COMSEC, page 148].  So, unlikely the rumored nuclear systems this is not designed to harm a technician but rather to physically destroy information as needed.
+They conclude by saying they are currently in pursuit of "burying a resistor in the chip substrates which will incinerate micro-circuitry with the application of external voltage" [A history of US COMSEC, page 149].
+[[http://www.nytimes.com/2014/01/15/us/nsa-effort-pries-open-computers-not-connected-to-internet.html?hp&_r=2|A recent NYT article]] cites a large rock in Iran exploding and throwing fragments of destroyed PCBs around. LOPPER, or a successor, is apparently alive and well as of 2012.
+==== Guesses ====
+NanoFoil maybe?
+  * http://www.indium.com/nanofoil/
+  * http://buy.solder.com/NanoFoil/C1019_1/
+Would react explosively with all wet decap chemistries we're aware of. MSDS and safety documentation suggests it's sensitive to physical shock and heat as well (though perhaps not quite as much as, say, flash powder).
+Much safer to the chip (until detonated) than alkali metals since it's based on heavy metals (Ni and Al) which don't diffuse nearly as easily. Could be treated much like a conventional metalization layer from the fab's perspective.
+Without reading too much on the chemistry, it looks like it'd be triggered by heating regardless of the presence of oxygen. This means that even plasma-based etches would have to be done very carefully and slowly to prevent heating the sample to the point of detonation.
+The best way of defeating such protection would most likely be something along these lines: (In all steps emphasis would be on slow, deliberate etches with a minimum of heat released or required.)
+  - Mill package to just above bond wires
+  - Slow SF6 + O2 plasma etch to remove remainder of packaging compound. (A typical RIE process for SiO2 given in "Etch Rates for Micromachining Processes, pt 2" uses 25sccm of SF6. Adding 10sccm of O2 increases the etch rate against SiO2 as well as making it attack organics like photoresist. Since typical chip encapsulation is ~80% by wt of SiO2 microspheres in an organic epoxy matrix, this is a desirable side effect.)
+  - Ni seems to lack any good RIE chemistries. The best option for removing the actual metal layers is likely a very dilute (1% or less) HCl solution, which will attack both Ni and Al while keeping the etch slow and cool. Toward the end it will be critical to avoid attacking aluminum/copper bond pads if the chip must be kept operational; the solution may need to be diluted even further at this point.
 ====== Patents ======
@@ Line 28: / Line 71: @@
   - Hacking the PIC 18F1320: http://www.bunniestudios.com/blog/?page_id ======40
   - http://www.trustedfoundry.com/
+  - A history of US COMSEC: http://www.governmentattic.org/2docs/Hist_US_COMSEC_Boak_NSA_1973.pdf