{"guid":"import-d5861b6d900f059aee","title":"Cracking the MSP430 BSL","subtitle":"Part Two","slug":"25c3-2839-en-cracking_the_msp430_bsl","link":"http://events.ccc.de/congress/2008/Fahrplan/events/2839.en.html","description":"The Texas Instruments MSP430 low-power microcontroller is used in many medical, industrial, and consumer devices.  When its JTAG fuse is blown, the device's firmware is kept private only a serial bootstrap loader (BSL), certain revisions of which are vulnerable to a side-channel timing analysis attack.  This talk continues that from Black Hat USA by describing the speaker's adventures in creating a hardware device for exploiting this vulnerability.\n","original_language":"eng","persons":["Travis Goodspeed"],"tags":["25c3"," Hacking"],"view_count":338,"promoted":false,"date":"2008-12-27T01:00:00.000+01:00","release_date":"2008-12-30T01:00:00.000+01:00","updated_at":"2026-03-26T23:15:05.252+01:00","length":2247,"duration":2247,"thumb_url":"https://static.media.ccc.de/media/congress/2008/25c3-2839-en-cracking_the_msp430_bsl.jpg","poster_url":"https://static.media.ccc.de/media/congress/2008/25c3-2839-en-cracking_the_msp430_bsl_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2008/import-d5861b6d900f059aee-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2008/import-d5861b6d900f059aee-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/25c3-2839-en-cracking_the_msp430_bsl","url":"https://api.media.ccc.de/public/events/import-d5861b6d900f059aee","conference_title":"25C3: nothing to hide","conference_url":"https://api.media.ccc.de/public/conferences/25c3","related":[{"event_id":22,"event_guid":"import-d9fdeee55d49ce271e","weight":1},{"event_id":262,"event_guid":"import-f71239d01ea7c2d353","weight":1},{"event_id":768,"event_guid":"import-340bde5c179b953db1","weight":2},{"event_id":877,"event_guid":"import-adc67a0660f250c812","weight":1},{"event_id":905,"event_guid":"import-a50e2a69d02db0bc4a","weight":1},{"event_id":906,"event_guid":"import-2fe8f5f454423d73a8","weight":1},{"event_id":931,"event_guid":"import-aff35a6cca25642871","weight":1},{"event_id":935,"event_guid":"import-d9a34dd8bf60695047","weight":1},{"event_id":950,"event_guid":"import-e34e417f1bb6d66d12","weight":1},{"event_id":972,"event_guid":"import-e96f451e7f1825878a","weight":1},{"event_id":1090,"event_guid":"import-c5bd70ae7c91327ae4","weight":1},{"event_id":1112,"event_guid":"import-49fe42523b9cb3d932","weight":1},{"event_id":1172,"event_guid":"import-80587c27422ce87793","weight":1},{"event_id":1180,"event_guid":"import-5fa00c37cb75885d36","weight":1},{"event_id":1218,"event_guid":"import-16fe6a6e95d7c4f819","weight":1},{"event_id":1277,"event_guid":"import-46ee25357ca568906f","weight":1},{"event_id":1293,"event_guid":"import-dc8e99110645a4c62b","weight":1},{"event_id":1294,"event_guid":"import-e1bb0bdd72e1b3b9c2","weight":1},{"event_id":1301,"event_guid":"import-eac758740ecd962c0b","weight":1},{"event_id":1308,"event_guid":"import-ec9465f980d4610552","weight":1},{"event_id":1313,"event_guid":"import-ab7c839b128736450c","weight":1},{"event_id":1315,"event_guid":"import-317788719156ce0058","weight":1},{"event_id":1322,"event_guid":"import-d02ddb495b4b473e05","weight":1},{"event_id":1323,"event_guid":"import-5e89fe5c21c6e4d891","weight":1},{"event_id":1325,"event_guid":"import-57c2428d76aa862a32","weight":1},{"event_id":1372,"event_guid":"import-79c42ca7a3a36179d3","weight":1},{"event_id":1379,"event_guid":"import-f62972ee26d8e418a1","weight":1},{"event_id":1407,"event_guid":"import-aa97ee865d5e945700","weight":1},{"event_id":1418,"event_guid":"import-74d1d018eb33d0d9ba","weight":1},{"event_id":1422,"event_guid":"import-d7f37b1162046a6dc0","weight":1},{"event_id":1442,"event_guid":"import-ac2d78310990a8f3ff","weight":1},{"event_id":1470,"event_guid":"import-384abf403ee27a0804","weight":2},{"event_id":1487,"event_guid":"import-31618b1a3c02facb8d","weight":3},{"event_id":1490,"event_guid":"import-d38b66f7dfefe277e4","weight":1},{"event_id":1494,"event_guid":"import-5e7a01265ce6066f76","weight":1},{"event_id":1526,"event_guid":"import-8f741823f0d689a05e","weight":1},{"event_id":1547,"event_guid":"import-6b95a8a622b3d95c87","weight":1},{"event_id":1800,"event_guid":"gL8lRFVpn8NFFfATsOn7Bw","weight":2},{"event_id":1832,"event_guid":"toykIIIHEXC1x8F7xoiYRw","weight":2},{"event_id":2595,"event_guid":"6c89e5be-fc58-4c69-a281-3a7775b78f42","weight":1},{"event_id":2734,"event_guid":"a1533367-f889-4b07-8d2f-b2718ad6b9a6","weight":1},{"event_id":2738,"event_guid":"d4b2f5e6-417f-454c-981e-df75465d956d","weight":1},{"event_id":2948,"event_guid":"7ca8581d-a3f7-4247-8101-786cf04d9bd1","weight":1},{"event_id":3466,"event_guid":"0c0c4f89-9004-4572-a3ce-db1bfe65a86a","weight":1},{"event_id":3640,"event_guid":"700a07e7-a9c4-437b-a4c5-4491b23a9b4a","weight":2},{"event_id":3760,"event_guid":"1c75e6a1-e586-4b91-abce-92a4561d0181","weight":1},{"event_id":4319,"event_guid":"1b289666-cf9f-4808-9fca-5656f7a2296e","weight":1},{"event_id":4926,"event_guid":"1e5e3f78-dfbe-4aeb-9565-73c395c9f8fc","weight":1},{"event_id":4941,"event_guid":"02146e03-1a07-44f2-83b3-e1fd261a4214","weight":1},{"event_id":5074,"event_guid":"a6054988-4570-5b14-8a61-ef934f21c10e","weight":1},{"event_id":5562,"event_guid":"FCDA2jM81L7uJcD1iXje6A","weight":1}],"recordings":[{"size":288,"length":2247,"mime_type":"audio/ogg","language":"eng","filename":"25c3-2839-en-cracking_the_msp430_bsl.ogg","state":"downloaded","folder":"audio_only","high_quality":true,"width":720,"height":576,"updated_at":"2014-05-10T15:26:47.990+02:00","recording_url":"https://cdn.media.ccc.de/congress/2008/audio_only/25c3-2839-en-cracking_the_msp430_bsl.ogg","url":"https://api.media.ccc.de/public/recordings/2422","event_url":"https://api.media.ccc.de/public/events/import-d5861b6d900f059aee","conference_url":"https://api.media.ccc.de/public/conferences/25c3"},{"size":288,"length":2247,"mime_type":"video/mp4","language":"eng","filename":"25c3-2839-en-cracking_the_msp430_bsl.mp4","state":"downloaded","folder":"video_h264_720x576","high_quality":true,"width":720,"height":576,"updated_at":"2016-01-27T11:03:35.760+01:00","recording_url":"https://cdn.media.ccc.de/congress/2008/video_h264_720x576/25c3-2839-en-cracking_the_msp430_bsl.mp4","url":"https://api.media.ccc.de/public/recordings/2421","event_url":"https://api.media.ccc.de/public/events/import-d5861b6d900f059aee","conference_url":"https://api.media.ccc.de/public/conferences/25c3"},{"size":288,"length":2247,"mime_type":"video/webm","language":"eng","filename":"25c3-2839-en-cracking_the_msp430_bsl.webm","state":"downloaded","folder":"webm","high_quality":true,"width":720,"height":576,"updated_at":"2016-01-27T11:03:35.789+01:00","recording_url":"https://cdn.media.ccc.de/congress/2008/webm/25c3-2839-en-cracking_the_msp430_bsl.webm","url":"https://api.media.ccc.de/public/recordings/2420","event_url":"https://api.media.ccc.de/public/events/import-d5861b6d900f059aee","conference_url":"https://api.media.ccc.de/public/conferences/25c3"}]}