Difference between revisions of "Hardware"

From freemyipod.org
Jump to: navigation, search
Line 1: Line 1:
Although iPods have many other components, here we are only listing the components that might be relavent to cracking firmware encryption. If you have any suggestions for any other components to add, just post on the talk page or IRC.
+
Although iPods have many other components, here we are only listing the components that might be relavent to cracking firmware encryption. If you have any suggestions for any other components to add, just post on the talk page or IRC. Links to datasheets are important if they can be found.
 
==1G Nano==
 
==1G Nano==
 
{| border="1" cellpadding="5" cellspacing="0"
 
{| border="1" cellpadding="5" cellspacing="0"
Line 5: Line 5:
 
|-
 
|-
 
| CPU  
 
| CPU  
|  
+
| Portal Player PP5021C-TDF. This is the last Nano that used a PortalPlayer processor.
 
|-
 
|-
 
| Utility Flash ROM
 
| Utility Flash ROM
Line 18: Line 18:
 
|-
 
|-
 
| CPU  
 
| CPU  
| An Apple-branded ARM processor marked 337S3291 8701. It is probably a [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8701B05], because the markings share an S for Samsung, and 8701 for the part number.
+
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8701] The processor itself is an Apple-branded ARM processor marked 337S3291 8701, but the markings share an S for Samsung, and 8701 for the part number.
 
|-
 
|-
 
| Utility Flash ROM
 
| Utility Flash ROM
| [http://www.sst.com/products.xhtml/parallel_flash/39/x16/SST39WF800A SST SST39WF800A],stores Disk Mode, Diagnostic Mode and the code to flash this chip. The data of this chip is decrypted too. See [[#Encryption|Encryption]].
+
| [http://www.sst.com/products.xhtml/parallel_flash/39/x16/SST39WF800A SST SST39WF800A],stores Disk Mode, Diagnostic Mode and the code to flash this chip. Tof has managed to extract this data and the dump can be obtained by emailing Emmanuel Fleury.
 
|-
 
|-
 
| NAND Flash
 
| NAND Flash
Line 31: Line 31:
 
|-
 
|-
 
| CPU  
 
| CPU  
|  
+
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8702] The package itself is Apple-branded and marked 337S3473 8702, but the markings share an S for Samsung, and 8702 for the part number.
 
|-
 
|-
 
| Utility Flash ROM
 
| Utility Flash ROM
Line 44: Line 44:
 
|-
 
|-
 
| CPU  
 
| CPU  
|  
+
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8720]
 
|-
 
|-
 
| Utility Flash ROM
 
| Utility Flash ROM
Line 54: Line 54:
 
==Helpful pages==
 
==Helpful pages==
 
http://home.gna.org/linux4nano/download/hardware_synth-1.0.pdf
 
http://home.gna.org/linux4nano/download/hardware_synth-1.0.pdf
 +
[http://pc.watch.impress.co.jp/docs/2005/0908/nano21.jpg]
 +
http://arstechnica.com/apple/reviews/2005/09/nano.ars/4
 
http://arstechnica.com/apple/reviews/2006/09/ipod-2g.ars/4
 
http://arstechnica.com/apple/reviews/2006/09/ipod-2g.ars/4
 +
http://www.appleinsider.com/articles/07/09/10/a_peek_inside_apples_new_nano_and_classic_ipods_photos.html
 +
http://www.ifixit.com/Guide/First-Look/iPod-Nano-4th-Generation/584/1

Revision as of 21:51, 28 February 2009

Although iPods have many other components, here we are only listing the components that might be relavent to cracking firmware encryption. If you have any suggestions for any other components to add, just post on the talk page or IRC. Links to datasheets are important if they can be found.

1G Nano

Component Details
CPU Portal Player PP5021C-TDF. This is the last Nano that used a PortalPlayer processor.
Utility Flash ROM
NAND Flash

2G Nano

Component Details
CPU Samsung S5L8701 The processor itself is an Apple-branded ARM processor marked 337S3291 8701, but the markings share an S for Samsung, and 8701 for the part number.
Utility Flash ROM SST SST39WF800A,stores Disk Mode, Diagnostic Mode and the code to flash this chip. Tof has managed to extract this data and the dump can be obtained by emailing Emmanuel Fleury.
NAND Flash Depends on the iPod. Common ones are the Samsung K9MBG08U5M and the Hynix HY27UW08BGFM.

3G Nano

Component Details
CPU Samsung S5L8702 The package itself is Apple-branded and marked 337S3473 8702, but the markings share an S for Samsung, and 8702 for the part number.
Utility Flash ROM
NAND Flash

4G Nano

Component Details
CPU Samsung S5L8720
Utility Flash ROM
NAND Flash

Helpful pages

http://home.gna.org/linux4nano/download/hardware_synth-1.0.pdf [1] http://arstechnica.com/apple/reviews/2005/09/nano.ars/4 http://arstechnica.com/apple/reviews/2006/09/ipod-2g.ars/4 http://www.appleinsider.com/articles/07/09/10/a_peek_inside_apples_new_nano_and_classic_ipods_photos.html http://www.ifixit.com/Guide/First-Look/iPod-Nano-4th-Generation/584/1