ROM

What Is ROM in Smart Cards?

Read-Only Memory (ROMROMHardwarePermanent mask-programmed OS memory on chip.Click to view →) is mask-programmed, non-volatile memory on a smart card chip that contains the permanent operating system code. ROM content is defined during the chip design phase and physically written into the silicon during wafer fabrication -- once manufactured, it cannot be modified, erased, or rewritten. This immutability is both ROM's primary security advantage and its key architectural constraint.

Role in Smart Card Architecture

Every smart card chip contains three types of memory working together:

ROM holds the card's operating system -- the fundamental software layer that manages file systems, processes APDU commands, enforces access control policies, and provides the runtime environment for applications. For JavaCard platforms, the ROM also contains the Java Card Virtual Machine (JCVM) bytecode interpreter and the GlobalPlatform card manager.

ROM vs Flash-Based OS

Newer smart card chips increasingly use flash memory instead of ROM for operating system storage, enabling post-manufacturing OS updates:

Security Implications

ROM's immutability provides a strong security foundation: an attacker cannot modify the operating system code even with physical access to the chip. This makes ROM-based cards resistant to persistent software attacks. However, it also means that security patches for OS-level vulnerabilities require manufacturing a new chip mask -- a process that takes months and costs hundreds of thousands of dollars.

The crypto coprocessor algorithms are also typically implemented in ROM, ensuring that cryptographic primitives like AES, RSA, and ECC execute from immutable, verified code rather than from alterable storage.