RunFei: Difference between revisions
No edit summary |
No edit summary |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 4: | Line 4: | ||
These programmers are notable for containing functions to read out protected ICs (via gentle voltage glitching) and permanently destroy test circuitry to prevent security voltage glitching (via strong voltage glitching) | These programmers are notable for containing functions to read out protected ICs (via gentle voltage glitching) and permanently destroy test circuitry to prevent security voltage glitching (via strong voltage glitching) | ||
was: http://www.runfei.com.cn . According to archive.org, the website was active from roughly 2000 to 2008. From archive.org: | |||
= RF-1800 = | "Beijing Xinrunfei Electronic Technology Co., Ltd. (formerly Beijing Runfei Electric Co., Ltd.) developed and produced RF-1800, RF810, RF-1848 USB intelligent universal programmers since 1998, 1999, and 2002" | ||
=RF-910= | |||
In 2018 [https://www.vipprogrammer.com/runfei-m-25 RF-910 for sale for $85] | |||
=RF-1800= | |||
RF-1800/810 manual: http://web.archive.org/web/20110313101116/http://www.runfei.com.cn:80/software/rf.doc | RF-1800/810 manual: http://web.archive.org/web/20110313101116/http://www.runfei.com.cn:80/software/rf.doc | ||
In 2018 [https://www.vipprogrammer.com/runfei-m-25 RF-1800 for sale for $179] | |||
= RF-2148 = | |||
=RF-2148= | |||
"Luckily the PLDs were early GALs which could have their code extracted using a Run-Fei RF-2148USB IC programmer. The software for the programmer allows for some early PLDs with security issues to be copied regardless of the security bit being set. Henry was in luck and was able to read and duplicate all the PLDs for this board." https://wiki.reactivemicro.com/GS-RAM_Plus | "Luckily the PLDs were early GALs which could have their code extracted using a Run-Fei RF-2148USB IC programmer. The software for the programmer allows for some early PLDs with security issues to be copied regardless of the security bit being set. Henry was in luck and was able to read and duplicate all the PLDs for this board." https://wiki.reactivemicro.com/GS-RAM_Plus | ||
| Line 19: | Line 29: | ||
= RF-3148 = | =RF-3148= | ||
https://www.vipprogrammer.com/rf3148-usb-universal-programmer-intelligent-chip-tester-programmer-784 | https://www.vipprogrammer.com/rf3148-usb-universal-programmer-intelligent-chip-tester-programmer-784 | ||
"this (no longer available) RunFei RF-3148 programmer I have has a "Read secured IC" function and a "Special protect" function for at89c52. however the documentation indicates that the latter requires an [K51] adapter that's unobtainium. there's two claimed additional security measures for at89c5x: "otp security" and "data line killing"" | "this (no longer available) RunFei RF-3148 programmer I have has a "Read secured IC" function and a "Special protect" function for at89c52. however the documentation indicates that the latter requires an [K51] adapter that's unobtainium. there's two claimed additional security measures for at89c5x: "otp security" and "data line killing"" | ||
[[RF-3148 Supported Devices]] | |||
[[File:runfei_3148_other_menu.png]] | [[File:runfei_3148_other_menu.png]] | ||
| Line 30: | Line 42: | ||
[[File:runfei_3148_unsecure_dialogue.png]] | [[File:runfei_3148_unsecure_dialogue.png]] | ||
In 2018 [https://www.vipprogrammer.com/runfei-m-25 RF-3148 for sale for $229] | |||
<nowiki>https://www.tradekorea.com/product/detail/P575662/RF-3148-USB-Universal-programmer-intelligent-Chip-Tester.html</nowiki> | |||
"RF-3148 usb programmer is full drive intelligent general programmer, it brings together xinrun fly more than ten years experience in design development, periof two years development accomplish. | |||
elaborate the products with all kinds of device programming needed all drive resource, including 48pin socket, road power supply voltage, burn programmed write voltage controlled programmed / i o signal, revisions, bordels oscillation clock, noise filter, surge strangulating etc, user secondary hardware ( adapter input ) reduses to minimum overhead . | |||
attainment approximation 's burning speed, automatically detect pin access to undesirable, ensure the programming safe and efficient, all power device used low manufacturing, abopt lower power consumption. complete mainframe usb mouth power supply work, circumscribing forsook the / ac dc adapter, making machine weight lighter and more small, easy to carry . | |||
support eeprom: PLD: GAL, ATF, PALCE, PEEL; EPROM: serial port and parallel por EEPROM; FLASHROM, MPU: 51 serial（87C, 97C, W78/77, AT89C/87F/80F, P89C, SST89C, IS89,P87LPC7XX…… ）, AT90S,ATTINY, ATMEGA, PIC12/16/17, EM78P, MDT20, Z86E…… | |||
Test support: TTL74/54 serial, CMOS40/45 serial, SRAM, 8155, 8255, 8253, 6821, subscriber can test vector table expand test model | |||
special: encryption can to at89 series mcu, carry on otp recoverability don't encryption, the use of safe and reliable two step encryption way, encryption after not affect the bus function | |||
direct reading: decryption can to GAL16V8/A/B、20V8/A/B、22V10/B、PALCE16V8H/20V8H direct reading of declassified, and have "door touchdowns fuse-element map " to " logic expression " automatic conversion function." | |||
<br /> | |||
==Software== | |||
Final software release from archive.org page: | |||
https://web.archive.org/web/20080225150423/http://www.runfei.com.cn/new_page_2.htm | |||
RF-3148(USB) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20 | |||
RF-2148(USB) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20 (Old users need to upgrade the USB driver) | |||
RF-2148(PRT) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20 | |||
RF-1800mini(USB) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20 | |||
RF-910(USB) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20 | |||
RF-1800mini software Chinese and English Win95/98/me/NT/W2K/XP software Publication date: 2007.06.18 | |||
RF-910 software Chinese and English Win95/98/me/NT/W2K/XP software Publication date: 2007.06.18 | |||
RF-1800 software DOS version software Publication date: 2000.4.28 | |||
RF-1800 software Full Chinese Win95/98/me/NT/W2K/XP software Publication date: 2003.3.26 | |||
RF-810 software DOS version software Publication date: 2000.4.28 | |||
RF-810 software Full Chinese Win95/98/me/NT/W2K/XP software Publication date: 2003.3.31 | |||
RF-510 software Full Chinese Win95/98/me/NT/W2K/XP software Publication date: 2003.3.31 | |||
RF-1600 Software DOS version software Publication date: 1999.7.8 | |||
<br /> | |||
Latest revision as of 19:07, 14 November 2022
These programmers are notable for containing functions to read out protected ICs (via gentle voltage glitching) and permanently destroy test circuitry to prevent security voltage glitching (via strong voltage glitching)
was: http://www.runfei.com.cn . According to archive.org, the website was active from roughly 2000 to 2008. From archive.org:
"Beijing Xinrunfei Electronic Technology Co., Ltd. (formerly Beijing Runfei Electric Co., Ltd.) developed and produced RF-1800, RF810, RF-1848 USB intelligent universal programmers since 1998, 1999, and 2002"
RF-910
In 2018 RF-910 for sale for $85
RF-1800
RF-1800/810 manual: http://web.archive.org/web/20110313101116/http://www.runfei.com.cn:80/software/rf.doc
In 2018 RF-1800 for sale for $179
RF-2148
"Luckily the PLDs were early GALs which could have their code extracted using a Run-Fei RF-2148USB IC programmer. The software for the programmer allows for some early PLDs with security issues to be copied regardless of the security bit being set. Henry was in luck and was able to read and duplicate all the PLDs for this board." https://wiki.reactivemicro.com/GS-RAM_Plus
Lord_Nightmare: "...the rf-2148 (which runfei 'recalled' and had some very broken english explanation why)..."
balrog: "if you can fine an rf-2148 it doesn’t need the [K51 special protect] adapter"
RF-3148
https://www.vipprogrammer.com/rf3148-usb-universal-programmer-intelligent-chip-tester-programmer-784
"this (no longer available) RunFei RF-3148 programmer I have has a "Read secured IC" function and a "Special protect" function for at89c52. however the documentation indicates that the latter requires an [K51] adapter that's unobtainium. there's two claimed additional security measures for at89c5x: "otp security" and "data line killing""
In 2018 RF-3148 for sale for $229
https://www.tradekorea.com/product/detail/P575662/RF-3148-USB-Universal-programmer-intelligent-Chip-Tester.html
"RF-3148 usb programmer is full drive intelligent general programmer, it brings together xinrun fly more than ten years experience in design development, periof two years development accomplish.
elaborate the products with all kinds of device programming needed all drive resource, including 48pin socket, road power supply voltage, burn programmed write voltage controlled programmed / i o signal, revisions, bordels oscillation clock, noise filter, surge strangulating etc, user secondary hardware ( adapter input ) reduses to minimum overhead .
attainment approximation 's burning speed, automatically detect pin access to undesirable, ensure the programming safe and efficient, all power device used low manufacturing, abopt lower power consumption. complete mainframe usb mouth power supply work, circumscribing forsook the / ac dc adapter, making machine weight lighter and more small, easy to carry .
support eeprom: PLD: GAL, ATF, PALCE, PEEL; EPROM: serial port and parallel por EEPROM; FLASHROM, MPU: 51 serial（87C, 97C, W78/77, AT89C/87F/80F, P89C, SST89C, IS89,P87LPC7XX…… ）, AT90S,ATTINY, ATMEGA, PIC12/16/17, EM78P, MDT20, Z86E……
Test support: TTL74/54 serial, CMOS40/45 serial, SRAM, 8155, 8255, 8253, 6821, subscriber can test vector table expand test model
special: encryption can to at89 series mcu, carry on otp recoverability don't encryption, the use of safe and reliable two step encryption way, encryption after not affect the bus function
direct reading: decryption can to GAL16V8/A/B、20V8/A/B、22V10/B、PALCE16V8H/20V8H direct reading of declassified, and have "door touchdowns fuse-element map " to " logic expression " automatic conversion function."
Software
Final software release from archive.org page:
https://web.archive.org/web/20080225150423/http://www.runfei.com.cn/new_page_2.htm
RF-3148(USB) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20
RF-2148(USB) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20 (Old users need to upgrade the USB driver)
RF-2148(PRT) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20
RF-1800mini(USB) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20
RF-910(USB) software Chinese and English Win98/me/NT/W2K/XP software Publication date: 2008.02.20
RF-1800mini software Chinese and English Win95/98/me/NT/W2K/XP software Publication date: 2007.06.18
RF-910 software Chinese and English Win95/98/me/NT/W2K/XP software Publication date: 2007.06.18
RF-1800 software DOS version software Publication date: 2000.4.28
RF-1800 software Full Chinese Win95/98/me/NT/W2K/XP software Publication date: 2003.3.26
RF-810 software DOS version software Publication date: 2000.4.28
RF-810 software Full Chinese Win95/98/me/NT/W2K/XP software Publication date: 2003.3.31
RF-510 software Full Chinese Win95/98/me/NT/W2K/XP software Publication date: 2003.3.31
RF-1600 Software DOS version software Publication date: 1999.7.8