Continue to Site

Welcome to

Welcome to our site! is an international Electronics Discussion Forum focused on EDA software, circuits, schematics, books, theory, papers, asic, pld, 8051, DSP, Network, RF, Analog Design, PCB, Service Manuals... and a whole lot more! To participate you need to register. Registration is free. Click here to register now.

Can any one help me in reading protected PAL PAL20L10NC.

Not open for further replies.


Full Member level 4
Dec 31, 1999
Reaction score
Trophy points
Activity points
reading protected pals

Can any one help me in reading protected PAL PAL20L10NC.

no one have idea how to read these pals????????

Try to search the forum with "protected, pic, uc, ...". May be you will find something useful for you.


Is the protected fuse burned???? If is not, you could generate an empty JEDEC file and try to find the right code by verifying the chip, sometimes you might be able to read the code inside.

If protected fuse is burned, there is no way to read that one. However, is a combinatorial one, is very easy to reverse engineer those types, simply hook up some digital analiser to the outputs and a word generator to the inputs and you´ll find the way.

Re: reading protected pals

I'm not sure about PAL, but I know that with re-programable/erasable chips, you can read them back even if protected. This, however, involve precise timing and control of the Vcc/Vpp lines.

The technique involved is known as 'glitching'. The way it work is that you do a device erase or similar action, but with precise timing, you glitch the power on the Vcc or Vpp lines. Now, don't ask me how it's done, and the timings, but you may be able to find something on the Net about this.

What happen is that when you perform the operation, you tell the chip to erase itself. This is usually performed inside the chip as a sequence of event, like a little program, but the glitching on the power pin will make the sequence go nuts. If done at the right time, with the right pulse (glitch) width, the device will be left in a mode which you can actually read back the content, or make only the protection fuse be unprogrammed.

For example, let's suppose the chip erase it's array content, and finally erase the lock bits. If, during the array erasure, you lower Vpp to a lower level, the array may be kept intact, and when it come to erase the lock bits, you put full Vpp, and the lock bits (and only the lock bits) get erased.

As you can see, this require very precise timing, you can't control this with a PC, you need a micro-controler (which can be controled via a PC if you wish).

Not open for further replies.

Part and Inventory Search

Welcome to