Recent Experiments with Mask ROMs

Explore recent experiments with Mask ROMs in this informative conference talk from Recon 2023. Delve into the world of truly read-only memory encoded in microcontroller mask layers and learn about the challenges of extracting this data when debugging protocols are undocumented. Discover the intricate process of photographically dumping chips, including chemical decapsulation with nitric acid, delayering with hydrofluoric acid, and staining techniques to differentiate between ones and zeroes. Gain insights into building a home lab for capturing these photographs and learn about the custom CAD software developed for converting images into bits. Examine prior work in the field and understand how to reproduce results efficiently. Presented by Travis Goodspeed, an experienced reverse engineer from East Tennessee, this 56-minute talk offers a unique perspective on microcontroller reverse engineering, blending technical expertise with a touch of personal flair.