// SECURITY · SILICON · SECRET

The chip keeps
a secret.
We are the exception.

ChipXOR researches, hardens and reprograms the encrypted authentication silicon inside the world's printers, cartridges and consumables — and builds the programmers that do it.

▷ Start Online BurnEnter Research
Trusted silicon  HP · Videojet · Epson · Lexmark · Sharp · Xerox
chipxor@core:~/videojet
$ chipxor --videojet daily-password
> VJ1xxx · W620 · maintenance L3
SecuritySiliconSecretHPVideojetEpsonLexmarkSharpXeroxI2CSPI1-WireUART
// 01 — CAPABILITIES

We do three things, and we do them to the metal.

R.01

Research

Side-channel analysis, fault injection and protocol reversal on encrypted consumable authentication chips. We publish what we can and vault the rest.

H.02

Hardware

The NuBri programmer line — bench, field and production gang units that read, reset and burn I2C, SPI, 1-Wire and UART silicon at scale.

S.03

Service

Send us a locked chip, or queue a job online. We burn and reset Videojet, Sharp and Lexmark consumable silicon and ship it back cloned-clean.

// 02 — RESEARCH_PROTOCOL

Inside the black epoxy.

Every cartridge, ribbon and toner bottle carries a tiny authentication die under a drop of opaque resin. It counts, it signs, it refuses. We spend our days learning exactly how — recovering keys, mapping XOR-masked counters and documenting vendor handshakes across six printer families.

Read the papers  →
WP-01 · 2025.11
Reading the black epoxy: side-channel key recovery
PUBLIC
WP-02 · 2025.09
XOR-masked EEPROM: rolling counters exposed
RESTRICTED
WP-04 · ██████
fault-injection on toner DRM
CLASSIFIED
// 03 — HARDWARE

The NuBri programmer line.

All products →
// 04 — ONLINE_BURN

Queue a burn from anywhere.

Live for Videojet, Sharp & Lexmark consumable silicon. Select, upload, and we return it reset and re-signed.

STEP 01

Select the chip

Pick vendor, model and interface from the supported silicon catalog.

STEP 02

Upload firmware

Drop a dump or choose a clean ChipXOR profile. We verify the checksum.

STEP 03

Burn & reset

The queue flashes and re-signs the die. Track it live, get it back clean.

Open Burn Console →
// 05 — SUPPORTED_SILICON

Six vendor families. One toolchain.

HPRESEARCH
Ink & toner auth · I2C / SPI
VideojetLIVE
CIJ fluids & make-up · I2C / 1-Wire
EpsonBETA
CSIC ink chips · Serial
LexmarkLIVE
Toner & imaging · I2C / 1-Wire
SharpLIVE
Toner & drum · I2C / SPI
XeroxRESEARCH
Toner & drum · I2C / SPI
06
Vendor families
40+
Chip profiles
03
Programmers
24/7
Burn queue

Have a locked chip?

Hand it to the lab.

Contact the lab →Start Online Burn