MSP430 susceptibility to IP theft via BSL attack or decapsulation?

Smokensparks

Hi,

My customer has implemented the AES128 stack on a MSP430F2xxx eval board. The prototype works, but the customer has concerns regarding code security.

Application: battery pack authentication for (AED) Automated External Defibrillators. Note: RFID was considered, but will not work due to wire interface requirements.

- Customer has a prototype implemented in MSP430F2xxx. Engineer download AES128 stack and implemented it in an eval board with 4k flash and I2C

- Customer understands the BSL attack and decap methods of stealing IP

- Customer understands that MSP430F5xxx BSL is more secure since it erases code on incorrect password

- Customer understands that decapsulating a chip and examining the metallization layers is not hard to do, and can be done with minimal investment in equipment

In order to help the customer quantify the chances of counterfeit battery packs, can you answer these questions?

Questions:

Is it possible to completely disable the BSL in order to eliminate it as a way to steal IP?
Assume the attacker decapsulates the chip. Did TI employ any tricks to make it more difficult for the attacker to decipher the code?

Thanks,

Rick

over 14 years ago

0 old_cow_yellow over 14 years ago

Guru 58965 points

For most F2xxx, the BSL can be (a) completely disabled, (b) configured to erase all flash on incorrect password, or (c) act the same way as BSL in F1xxx.

0 darkwzrd over 14 years ago in reply to old_cow_yellow

Expert 1385 points

Deleted by user.

0 old_cow_yellow over 14 years ago in reply to darkwzrd

Guru 58965 points

darkwzrd said:

My recommendation is that he configures his parts to automatically erase their code on password failure. This way, the attacker needs to buy a lot of his product in order to crack it, which sounds like a win-win! ;)

I disagree. But I would rather not discuss this except with TI engineers in private.

0 darkwzrd over 14 years ago in reply to old_cow_yellow

Expert 1385 points

Well darn! I was hoping that you would prove me wrong! I know that you are a bit more experienced than I am and I thought you might enlighten me into the intricacies of the BSL.

If you could spare the time, I would appreciate it if you could private message me (I think there is a way to do this on this forum; I've never done it before) so we could discuss this further.

If you cannot, no hard feelings. :)

**Attention** This is a public forum

MSP low-power microcontrollers

MSP low-power microcontroller forum

MSP430 susceptibility to IP theft via BSL attack or decapsulation?