Welcome to EDAboard.com

Welcome to our site! EDAboard.com is an international Electronic Discussion Forum focused on EDA software, circuits, schematics, books, theory, papers, asic, pld, 8051, DSP, Network, RF, Analog Design, PCB, Service Manuals... and a whole lot more! To participate you need to register. Registration is free. Click here to register now.

Register Log in

Can any one help me in reading protected PAL PAL20L10NC.

Status
Not open for further replies.

sadat007

Full Member level 4
Joined
Dec 31, 1999
Messages
235
Helped
13
Reputation
26
Reaction score
7
Trophy points
1,298
Location
Pakistan
Activity points
1,773
reading protected pals

Hi,
Can any one help me in reading protected PAL PAL20L10NC.
thanks
 

sadat007

Full Member level 4
Joined
Dec 31, 1999
Messages
235
Helped
13
Reputation
26
Reaction score
7
Trophy points
1,298
Location
Pakistan
Activity points
1,773
Hellooooooooooooo
no one have idea how to read these pals????????
 

cube007

Full Member level 6
Joined
Mar 12, 2002
Messages
386
Helped
15
Reputation
30
Reaction score
5
Trophy points
1,298
Location
Australia
Activity points
3,477
Try to search the forum with "protected, pic, uc, ...". May be you will find something useful for you.

by,
cube007
 

FASTER

Junior Member level 1
Joined
Jun 3, 2002
Messages
16
Helped
0
Reputation
0
Reaction score
0
Trophy points
1,281
Activity points
60
Is the protected fuse burned???? If is not, you could generate an empty JEDEC file and try to find the right code by verifying the chip, sometimes you might be able to read the code inside.

If protected fuse is burned, there is no way to read that one. However, is a combinatorial one, is very easy to reverse engineer those types, simply hook up some digital analiser to the outputs and a word generator to the inputs and you´ll find the way.
 

Big Boy

Full Member level 4
Joined
Jan 19, 2004
Messages
235
Helped
21
Reputation
42
Reaction score
11
Trophy points
1,298
Activity points
4,723
Re: reading protected pals

I'm not sure about PAL, but I know that with re-programable/erasable chips, you can read them back even if protected. This, however, involve precise timing and control of the Vcc/Vpp lines.

The technique involved is known as 'glitching'. The way it work is that you do a device erase or similar action, but with precise timing, you glitch the power on the Vcc or Vpp lines. Now, don't ask me how it's done, and the timings, but you may be able to find something on the Net about this.

What happen is that when you perform the operation, you tell the chip to erase itself. This is usually performed inside the chip as a sequence of event, like a little program, but the glitching on the power pin will make the sequence go nuts. If done at the right time, with the right pulse (glitch) width, the device will be left in a mode which you can actually read back the content, or make only the protection fuse be unprogrammed.

For example, let's suppose the chip erase it's array content, and finally erase the lock bits. If, during the array erasure, you lower Vpp to a lower level, the array may be kept intact, and when it come to erase the lock bits, you put full Vpp, and the lock bits (and only the lock bits) get erased.

As you can see, this require very precise timing, you can't control this with a PC, you need a micro-controler (which can be controled via a PC if you wish).
 

Status
Not open for further replies.
Toggle Sidebar

Part and Inventory Search

Welcome to EDABoard.com

Sponsor

Top