Difference between revisions of "Hardware"

From freemyipod.org
Jump to: navigation, search
 
(59 intermediate revisions by 17 users not shown)
Line 1: Line 1:
−
Although iPods have many other components, here we are only listing the components that might be relavent to cracking firmware encryption. If you have any suggestions for any other components to add, just post on the talk page or IRC. Links to datasheets are important if they can be found. For a visual hardware reference, visit the [[Hardware annotation]] page.
+
This is just a basic comparison of each generation's main components. For a detailed hardware analysis of a generation, click on it's link.
  
−
'''The datasheet for the S5L8700X series (possibly part of it?) has been located!''' You can download it [http://rapidshare.com/files/101234522/S5L8700X-DS.pdf.html here] (link from [http://www.rockbox.org/twiki/bin/view/Main/SamsungSA58#SA58700_codename_Blues this Rockbox wiki page]), but I (cmwslw) will try to get it hosted on my site soon. Apparently Marcoen Hirschberg added the link on November 25, 2008. We need to contact him and ask where he found it. The datasheet describes every pin (page 1-5) and instruction (page 3-1) in detail. We now know the exact locations of the JTAG pins, and a lot of other information about the chip.
+
{| class="wikitable"
−
==1G Nano==
+
! Generation !! SoC !! RAM !! NOR/Utility Flash !! Codename !! UpdaterFamilyID
−
{| border="1" cellpadding="5" cellspacing="0"
 
−
! Component !! Details
 
 
|-
 
|-
−
| CPU
+
|[[Nano 1G]]
−
| Portal Player PP5021C-TDF. This is the last Nano that used a PortalPlayer processor before Apple started using Samsung. If anybody knows of a datasheet for this, please add a link to it.
+
|PP5021C-TDF
 +
|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)
 +
|[http://www.sst.com/products/?inode=41856 SST39WF400A] (512KiB)
 +
|
 +
|
 
|-
 
|-
−
| RAM
+
|[[Nano 2G]]
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=136&partnum=K4M56163PG Samsung K4M56163PG] - A datasheet for this Mobile SDRAM chip can be found [http://pdf1.alldatasheet.net/datasheet-pdf/view/168204/SAMSUNG/K4M56163PG.html here].
+
|S5L8701
 +
|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)
 +
|[http://www.sst.com/products/?inode=41422 SST39WF800A] (1MiB)
 +
|
 +
|
 
|-
 
|-
−
| Utility Flash
+
|[[Nano 3G]]
−
| [http://www.sst.com/products.xhtml/parallel_flash/39/x16/SST39WF400A SST39WF400A]. This chip is documented very well as is a similar chip on the 2G Nano.
+
|S5L8702
−
|}
+
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (32MiB)
−
==2G Nano==
+
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
−
{| border="1" cellpadding="5" cellspacing="0"
+
| N46
−
! Component !! Details
+
| 26
 
|-
 
|-
−
| CPU
+
|[[Nano 4G]]
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8701] System On Chip (SoC), includes ARM940T(SAM44X?) central processor, DSP (CalmRisc16+MAC2424), 50kb boot ROM, 256kb SRAM, external RAM, flash and LCD controllers, USB(1.1-host; 2.0-function) and some other parts. Package: [http://www.samsung.com/global/business/semiconductor/support/PackageInformation/downloads/SystemLSI/FBGA/232_FBGA_1010_12_05.pdf 232-pin FBGA 10x10mm] or 224/226-pin 9x9mm. Similar chips: [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=SA58700 SA58700X07].  No documentation available for the S5L series, and contacting Samsung doesn't help either. The processor itself is Apple-branded and marked 337S3291 8701.
+
|S5L8720
 +
|Integrated (32MiB)
 +
| ''none''
 +
| N58
 +
| 31
 
|-
 
|-
−
| RAM
+
|[[Nano 5G]]
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=136&partnum=K4M56163PG Samsung K4M56163PG] - [http://pdf1.alldatasheet.net/datasheet-pdf/view/168204/SAMSUNG/K4M56163PG.html here] is the datasheet. This is the same chip used in the iPod 1G Nano. Sometimes the Qimonda [http://www.alldatasheet.com/datasheet-pdf/pdf/207179/QIMONDA/HYE18L256169BFX-7.5.html HYE18L256] chip is used instead.
+
|S5L8730
 +
|Integrated (64MiB)
 +
| ''none''
 +
| N33
 +
| 34
 
|-
 
|-
−
| Utility Flash
+
|[[Nano 6G|Nano 6G]]
−
| [http://www.sst.com/products.xhtml/parallel_flash/39/x16/SST39WF800A SST SST39WF800A],stores Disk Mode, Diagnostic Mode and the code to flash this chip. Tof has [http://home.gna.org/linux4nano/dumping_SST39WF800A.html managed to extract] this data and the dump can be obtained by emailing Emmanuel Fleury. All of the contents in the utility flash chip are encrypted from now on.
+
|S5L8723
−
|}
+
|Integrated
−
 
+
| ''none''
−
==3G Nano==
+
| N20
−
{| border="1" cellpadding="5" cellspacing="0"
+
| 36
−
! Component !! Details
 
 
|-
 
|-
−
| CPU
+
|[[Nano 7G|Nano 7G]]
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8702] ARM940T processor. The package itself is Apple-branded and marked 337S3473 8702.
+
|S5L8740
 +
|Integrated (64MiB)
 +
| ''none''
 +
| N31
 +
| 37
 
|-
 
|-
−
| RAM
+
|[[Classic 1G]]
−
| Like the flash chip, the memory also varies. The most popular chip seems to be the [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=137&partnum=K4X56163PG&&ppmi=1209 K4X56163PI]. Another similar one that is sometimes used is the [http://www.qimonda.com/mobile-ram/ddr-18/index.html Qimonda HYE18M169CX75].
+
|S5L8702
 +
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (64MiB)
 +
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
 +
|
 +
|
 
|-
 
|-
−
| Utility Flash
+
|[[Classic 2G]]
−
| [http://www.sst.com/products.xhtml/serial_flash/25/3.0V/SST25VF080B SST25VF080B]. Like the other SST chips, this one is also extremely well documented.
+
|S5L8702
−
|}
+
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (64MiB)
−
==4G Nano==
+
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
−
{| border="1" cellpadding="5" cellspacing="0"
+
|
−
! Component !! Details
+
|
 
|-
 
|-
−
| CPU
+
|[[Classic 3G]]
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8720] ARM940T processor. It is definitely worth knowing that this is the exact same processor used in the iTouch 2G. This could mean that some of the same exploits for that could possibly be used. [http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware) Here] is a very interesting page about the S5L8720 processor.
+
|S5L8702
−
|-
+
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X51163PE] (64MiB)
−
| RAM
+
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
−
| Integrated into the processor, similar to the iPod Touch and iPhone lines.
+
|
−
|-
+
|
−
| Utility Flash
 
−
|  
 
 
|}
 
|}
−
==Helpful pages==
 
−
http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware)
 
  
−
http://www.ipodlinux.org/wiki/Generations (Be careful! This is extremely inaccurate.)
+
Concerning the detailed generation pages: If you can prove or disprove any of these chip names, please let us know: [[Contact]]
  
−
http://www.rockbox.org/twiki/bin/view/Main/SamsungSA58#SA58700_codename_Blues
+
==Helpful pages==
−
===1G Nano===
+
Chip analyses
−
http://www2.electronicproducts.com/Apple_iPod_nano-whatsinside-2.aspx
+
*http://www2.electronicproducts.com/Apple_iPod_Touch-whatsinside-57.aspx
−
 
+
*http://www2.electronicproducts.com/Apple_iPhone-whatsinside-4.aspx
−
http://arstechnica.com/apple/reviews/2005/09/nano.ars/4
+
Additional information
−
 
+
*http://dendrites.blog.163.com/blog/static/165376178201082112922174/
−
[http://pc.watch.impress.co.jp/docs/2005/0908/nano21.jpg Image of the 1G Nano board]
 
−
 
 
−
[http://www.ipodlinux.org/wiki/Generations#iPod_Nano_.28Nano1G.29] - The pictures listed
 
−
===2G Nano===
 
−
http://home.gna.org/linux4nano/download/hardware_synth-1.0.pdf
 
−
 
 
−
http://www.ifixit.com/Guide/First-Look/iPod-Nano-2nd-Generation/592/1
 
−
 
 
−
http://arstechnica.com/apple/reviews/2006/09/ipod-2g.ars/4
 
−
===3G Nano===
 
−
http://www2.electronicproducts.com/Applie_iPod_Nano_(4GB)_3rd_Generation-whatsinside-16.aspx#
 
−
 
 
−
http://content.techrepublic.com.com/2346-13636_11-170826-1.html
 
−
 
 
−
http://www.ifixit.com/Guide/First-Look/iPod-Nano-3rd-Generation/594/1
 
−
 
 
−
http://insidetronics.blogspot.com/2007/09/teardown-ipod-nano-3g.html
 
−
 
 
−
[http://www.combert-elec.com/www/bookpic/200810916515460624.jpg Image of 3G Nano board]
 
−
===4G Nano===
 
−
http://www.ifixit.com/Guide/First-Look/iPod-Nano-4th-Generation/584/1
 
−
===Other (for comparison)===
 
−
http://www2.electronicproducts.com/Apple_iPod_Touch-whatsinside-57.aspx
 
−
 
 
−
http://www2.electronicproducts.com/Apple_iPhone-whatsinside-4.aspx
 

Latest revision as of 00:37, 26 February 2023

This is just a basic comparison of each generation's main components. For a detailed hardware analysis of a generation, click on it's link.

Generation SoC RAM NOR/Utility Flash Codename UpdaterFamilyID
Nano 1G PP5021C-TDF K4M56163PG (32MiB) SST39WF400A (512KiB)
Nano 2G S5L8701 K4M56163PG (32MiB) SST39WF800A (1MiB)
Nano 3G S5L8702 K4X56163PI (32MiB) SST25VF080B (1MiB) N46 26
Nano 4G S5L8720 Integrated (32MiB) none N58 31
Nano 5G S5L8730 Integrated (64MiB) none N33 34
Nano 6G S5L8723 Integrated none N20 36
Nano 7G S5L8740 Integrated (64MiB) none N31 37
Classic 1G S5L8702 K4X56163PI (64MiB) SST25VF080B (1MiB)
Classic 2G S5L8702 K4X56163PI (64MiB) SST25VF080B (1MiB)
Classic 3G S5L8702 K4X51163PE (64MiB) SST25VF080B (1MiB)

Concerning the detailed generation pages: If you can prove or disprove any of these chip names, please let us know: Contact

Helpful pages

Chip analyses

Additional information

Retrieved from "https://freemyipod.org/index.php?title=Hardware&oldid=22025"