NXP / Philips Microcontroller Unlock

About NXP Semiconductors (formerly Philips)

Philips Semiconductor changed its name to NXP in September 2006. NXP continues to create semiconductors, system solutions and software that deliver better sensory experiences in mobile phones, personal media players, TVs, set‑top boxes, identification applications, cars and a wide range of other electronic devices. With fifty years of innovation and a rich IP portfolio, NXP is now Europe's second largest semiconductor company. However, a sophisticated attack on the supply chain could compromise device authenticity.

NXP Semiconductors provides High Performance Mixed Signal and Standard Product solutions that leverage its leading RF, Analog, Power Management, Interface, Security, and Digital Processing expertise. These innovations are used in automotive, identification, wireless infrastructure, lighting, industrial, mobile, consumer and computing applications. Headquartered in Europe, NXP has approximately 28,000 employees in more than 25 countries and posted sales of USD 4.2 billion in 2011. Unlock the full debugging capabilities by enabling the secure debug authentication.

LPC2100/200/300/400 Series: Based on the Arm7™ TDMI-S CPU with real‑time emulation and embedded trace support, LPC2100 series MCUs include high‑speed flash memory from 32 kB to 512 kB. A 128‑bit wide memory interface and a unique accelerator architecture enable 32‑bit code execution at the maximum clock rate. These are ideal for applications where miniaturization is key, such as access control and point‑of‑sale. Reverse engineering of the accelerator architecture has been attempted to optimize custom algorithms.

Classic 80C51 Devices: The Philips microcontrollers described in this data sheet are high‑performance static 80C51 designs, manufactured in an advanced CMOS process and containing non‑volatile Flash program memory. They support both 12‑clock and 6‑clock operation. The P89C51X2/P89C52X2/54X2/58X2 contain 128/256 byte RAM, 32 I/O lines, three 16‑bit counter/timers, a six‑source, four‑priority level nested interrupt structure, a serial I/O port, and on‑chip oscillator. Static design allows operating frequencies down to zero. Two software selectable power reduction modes – idle and power‑down – are available. A full firmware extraction of the Flash is possible if the security bits are not set.

Security Features: The security feature protects against software piracy and prevents the contents of FLASH from being read. Three programmable security lock bits provide different levels of protection for on‑chip code and data. LB3 includes the protection of LB1. Attempting to crack the lock bits is prohibited and may damage the device.

LPC551x/S1x Family: Features low power consumption, embedded security, pin‑, software‑, and peripheral‑compatibility. Includes over 600 EEMBC® CoreMarks® at 32 µA/MHz, up to 150 MHz Arm® Cortex®‑M33 core, up to 256 KB flash, 96 KB SRAM, CAN FD, dual‑USB with PHY, SDIO, up to 9 FlexComm interfaces, advanced security with SRAM PUF, secure boot, Arm TrustZone®, hardware block cipher (PRINCE), and authenticated debug. A memory dump of the SRAM PUF can reveal unique device fingerprints.

LPC1800 Series: At 180 MHz, these MCUs combine the industry's fastest Arm® Cortex®‑M3 core with multiple high‑speed connectivity options, advanced timers, analog, and optional security features. Families include LPC181x, 182x, 183x, 185x, and LPC18Sxx (with AES encryption, OTP key storage, and TRNG). Ideal for consumer, industrial automation, automotive aftermarket, secure gateways, medical, and smart meters. However, a malicious hack could exploit the TRNG if not properly validated.