HDD GURU FORUMS
http://forum.hddguru.com/

Reading NAND/Flash directly from an MCU
http://forum.hddguru.com/viewtopic.php?f=10&t=42625
Page 1 of 1

Author:  crackz0r [ August 3rd, 2022, 16:35 ]
Post subject:  Reading NAND/Flash directly from an MCU

Hey all.
Had a thought pop in my head recently and figured I'd ask around.

Most MCUs these days have flash (NAND/NOR) embedded in the IC for loading into RAM so the MCU can boot.

Has anyone thought about how it might be possible to access this NAND directly (say in an instance where the MCU fails and you can't debug via JTAG/SWD/etc.)

I am sure there is an embedded controller in most cases that links directly from the embedded CPU to the NAND structure itself.

What do you all think?

Author:  pepe [ August 3rd, 2022, 17:08 ]
Post subject:  Re: Reading NAND/Flash directly from an MCU

such controllers usually use NOR flash as internal nonvolatile storage. This peripheral is attached to an internal bus through which the MCU accesses it. I highly doubt there's any other way to access these than these buses. So if the device is unable to work on its own, accessing the flash is extremely difficult.
Not completely impossible but there must be a very good reason for someone to chose this way...

pepe

Author:  DRUG [ August 7th, 2022, 19:14 ]
Post subject:  Re: Reading NAND/Flash directly from an MCU

crackz0r wrote:
Hey all.
Had a thought pop in my head recently and figured I'd ask around.

Most MCUs these days have flash (NAND/NOR) embedded in the IC for loading into RAM so the MCU can boot.

Has anyone thought about how it might be possible to access this NAND directly (say in an instance where the MCU fails and you can't debug via JTAG/SWD/etc.)

I am sure there is an embedded controller in most cases that links directly from the embedded CPU to the NAND structure itself.

What do you all think?



It is completely possible. However you need to decap the processor, and then probe it very precisely. Not all labs have the hardware or knowledge to do it.

Author:  sourcerer [ August 13th, 2022, 16:14 ]
Post subject:  Re: Reading NAND/Flash directly from an MCU

It might also be (and my personal guess is that it's quite likely), that the internal SPI bus is also brought outside, so that it can be flashed during production. But the pins might not be further connected on the PCB, so just desoldering the chip might give you access to the SPI bus. I guess the difficult thing is to actually find those SPI bus pins...

Author:  pepe [ August 13th, 2022, 18:55 ]
Post subject:  Re: Reading NAND/Flash directly from an MCU

I haven't seen internal flash with SPI interface, it is usually directly connected to the internal buses with paralel interfaces. Not telling it can't exist just haven't seen so far.

pepe

Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/