Teardown: internet banking security calculator

[wkb]

One of my security calculators used for Internet banking went t*ts up so I decided to tear it apart.  Which proved far easier than expected. 

These things are used here in .nl in combination with a chip-equipped smart card that we also use for electronic payments in shops (I think the Brits call this Chip-and-PIN or somesuch; its been around in .nl for ages)

Anyway, the fancy stuff is obviously underneath that black plastic glob, some kind of custom chip.

[T4P]

I logged into my bank earlier today and they said they were sending out a new e-token again ... when i get one i shall tear it down ( It's a OneKey thing )

[amyk]

How helpful of them to label the programming pads. I see SCLK, SDAT, VCC, GND, RESET, VPP? Have you tried probing them?

The interesting stuff is going to be in the COB. If you can, decapsulate and give us some die photos

[wkb]

How helpful of them to label the programming pads. I see SCLK, SDAT, VCC, GND, RESET, VPP? Have you tried probing them?

The interesting stuff is going to be in the COB. If you can, decapsulate and give us some die photos

No, I have not tried to probe them.  In case anybody has the time and inclination to try, I am more than happy to put a stamp on an envelope and ship it over.

Any suggestion on how to decapsulate it?  I gave up on stocking fuming nitric acid etc about 2 decades ago.