foundry:start
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revision | |||
| foundry:start [2025/08/04 21:24] – external edit 127.0.0.1 | foundry:start [2025/11/17 23:53] (current) – mcmaster | ||
|---|---|---|---|
| Line 6: | Line 6: | ||
| {{topic> | {{topic> | ||
| + | |||
| + | ====== Foundry ID (FIXME: clean up) ====== | ||
| + | |||
| + | Device vendors concerned about reverse engineering often use simple tricks to make it harder to put a BOM together. One of these is to remove the labeling from, or even re-label with a laser engraver, various ICs on the board. Re-labeling can also be done for brand reasons. | ||
| + | |||
| + | The first step in identifying an unknown components is to determine the vendor. If there' | ||
| + | |||
| + | This page is a library of specific process examples, not a place to discuss general fabrication techniques. General fab topics belong on the [[siliconprawn> | ||
| + | |||
| + | ====== CMP fill ====== | ||
| + | |||
| + | Although only present on smaller (<=350nm typically) process technology, CMP fill patterns are distinctive enough that a pretty good guess of the vendor can sometimes be obtained from the fill pattern alone. | ||
| + | |||
| + | All images shown are top metal with overglass intact, unless otherwise labeled. | ||
| + | |||
| + | Please try to include scale bars in all images. | ||
| + | ===== Actel ===== | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ===== Adaptec ===== | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ===== ATI radeon ===== | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ===== Atmel ===== | ||
| + | |||
| + | ==== 350nm aluminum ==== | ||
| + | |||
| + | FIXME: get a picture with a scale bar | ||
| + | |||
| + | The fill pattern is very distinctive and looks like a "brick wall" - short lines staggered every other row. | ||
| + | |||
| + | {{: | ||
| + | |||
| + | (image copyright Christopher Tarnovsky, originally published on [[http:// | ||
| + | |||
| + | ===== Cisco Systems ===== | ||
| + | |||
| + | {{: | ||
| + | |||
| + | IBM logo on chip. Am100x objective? | ||
| + | |||
| + | ===== FTDI ===== | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ===== Microchip ===== | ||
| + | |||
| + | ==== 350nm aluminum ==== | ||
| + | |||
| + | Example image from PIC12F683. Overglass generally appears deep red to orange, CMP fill is long straight lines. | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ==== 250nm copper ==== | ||
| + | |||
| + | The exact geometry of this process isn't known but it's copper damascene and significantly smaller than the 350. | ||
| + | |||
| + | Example image from ENC424J600. Overglass appears orange to yellow. CMP fill is short lines. | ||
| + | |||
| + | |||
| + | {{: | ||
| + | |||
| + | ==== pic32mx695f ==== | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ===== Myricom ===== | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ===== NXP / Philips ===== | ||
| + | |||
| + | ==== Unknown geometry, possibly 220nm ==== | ||
| + | |||
| + | Fill pattern is large square patches of metal with spaces between them. | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ===== Sysmocom ===== | ||
| + | |||
| + | {{: | ||
| + | |||
| + | Has several fill patterns, second metal down is somewhat visible | ||
| + | |||
| + | ====== Routing ====== | ||
| + | |||
| + | ===== Power ===== | ||
| + | |||
| + | ===== Cell ===== | ||
| + | |||
| + | |||
| + | ====== Security mesh ====== | ||
| + | |||
| + | Smartcard vendors are extremely secretive and competitive and the mesh patterns are all developed in house. If a device has mesh on it, a matching pattern can typically be considered a positive ID of the vendor. | ||
| + | |||
| + | ===== Atmel ===== | ||
| + | |||
| + | ===== Infineon ===== | ||
| + | |||
| + | ===== Renesas ===== | ||
| + | |||
| + | Die labeled R5H30201, found in an unlabeled QFN. | ||
| + | |||
| + | The mesh runs vertically and horizontally. | ||
| + | |||
| + | FIXME: get image rotated to canonical orientation on an edge of the die | ||
| + | |||
| + | {{: | ||
| + | |||
| + | {{: | ||
| + | ===== ST ===== | ||
| + | |||
| + | ST7 series smartcard, origin unknown. The mesh runs at a 45 degree angle to the vertical axis of the chip and consists of two conductors. | ||
| + | |||
| + | This is one of the few images we have taken with a SEM rather than a light microscope because they' | ||
| + | |||
| + | The sample was not sputter-coated with anything conductive and had severe charging problems, this was the only image I got that was useful. | ||
| + | |||
| + | FIXME: get image rotated into canonical orientation on an edge of the die | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ===== Xilinx ===== | ||
| + | |||
| + | XC6SLX4 (45nm Samsung process). Damage to passivation was from overly aggressive cleaning. | ||
| + | |||
| + | {{: | ||
| + | |||
| + | ====== Test patterns ====== | ||
| + | |||
| + | Test patterns and alignment marks are often very fab or vendor specific. | ||
| + | |||
| + | ====== Misc ====== | ||
| + | |||
| + | ===== SandForce SF-2281VB1-SDC ===== | ||
| + | |||
| + | {{: | ||
| + | |||
| ====== References ====== | ====== References ====== | ||
foundry/start.txt · Last modified: 2025/11/17 23:53 by mcmaster
