Difference between revisions of "Hardware"

From freemyipod.org
Jump to: navigation, search
 
(81 intermediate revisions by 19 users not shown)
Line 1: Line 1:
−
Although iPods have many other components, here we are only listing the components that might be relavent to cracking firmware encryption. If you have any suggestions for any other components to add, just post on the talk page or IRC. Links to datasheets are important if they can be found.
+
== Overview ==
−
==1G Nano==
+
 
−
{| border="1" cellpadding="5" cellspacing="0"
+
This is just a basic comparison of each generation's main components. For a detailed hardware analysis of a generation, click on it's link.
−
! Component !! Details
+
 
−
|-
+
{| class="wikitable"
−
| CPU  
+
! Generation !! SoC !! CPU Core !! RAM !! NOR/Utility Flash !! Device Code Name !! SoC Family Code Name !! UpdaterFamilyID
−
| Portal Player PP5021C-TDF. This is the last Nano that used a PortalPlayer processor.
 
−
|-
 
−
| RAM
 
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=136&partnum=K4M56163PG Samsung K4M56163PG] - apparently the datasheet can be found [http://pdf1.alldatasheet.net/datasheet-pdf/view/168204/SAMSUNG/K4M56163PG/datasheet.pdf here].
 
−
|-
 
−
| Utility Flash ROM
 
−
|
 
−
|-
 
−
| NAND Flash
 
−
| This chip is dependent on the iPod model, but all interface in the same way.
 
−
|}
 
−
==2G Nano==
 
−
{| border="1" cellpadding="5" cellspacing="0"
 
−
! Component !! Details
 
 
|-
 
|-
−
| CPU
+
|[[Nano 1G]]
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8701] ARM940T processor. The processor itself is Apple-branded and marked 337S3291 8701, but the markings share an S for Samsung, and 8701 for the part number.
+
|PP5021C-TDF
 +
|
 +
|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)
 +
|[http://www.sst.com/products/?inode=41856 SST39WF400A] (512KiB)
 +
|
 +
|
 +
| 14/17
 
|-
 
|-
−
| Utility Flash ROM
+
|[[Nano 2G]]
−
| [http://www.sst.com/products.xhtml/parallel_flash/39/x16/SST39WF800A SST SST39WF800A],stores Disk Mode, Diagnostic Mode and the code to flash this chip. Tof has [http://home.gna.org/linux4nano/dumping_SST39WF800A.html managed to extract] this data and the dump can be obtained by emailing Emmanuel Fleury.
+
|S5L8701
−
|-
+
|ARM940T
−
| RAM
+
|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=136&partnum=K4M56163PG Samsung K4M56163PG] - [http://pdf1.alldatasheet.net/datasheet-pdf/view/168204/SAMSUNG/K4M56163PG/datasheet.pdf here] is the datasheet. This is the same chip used in the iPod 1G Nano.
+
|[http://www.sst.com/products/?inode=41422 SST39WF800A] (1MiB)
−
|-
+
|
−
| NAND Flash
+
| M1
−
| This chip is dependent on the iPod model, but all interface in the same way. Common ones for the 2G Nano are the [http://www.datasheet4u.com/download.php?id=607807 Samsung K9MBG08U5M] and the [http://www.alldatasheet.com/datasheet-pdf/pdf/115161/HYNIX/HY27UF081G2M.html Hynix HY27UW08BGFM].
+
| 19/29
−
|}
 
−
==3G Nano==
 
−
{| border="1" cellpadding="5" cellspacing="0"
 
−
! Component !! Details
 
 
|-
 
|-
−
| CPU
+
|[[Nano 3G]]
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8702] ARM940T processor. The package itself is Apple-branded and marked 337S3473 8702, but the markings share an S for Samsung, and 8702 for the part number.
+
|S5L8702
 +
|ARM926
 +
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (32MiB)
 +
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
 +
| N46
 +
| M1A
 +
| 26
 
|-
 
|-
−
| RAM
+
|[[Nano 4G]]
−
| Like the flash chip, the memory also varies. The most popular chip seems to be the [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=137&partnum=K4X56163PG&&ppmi=1209 K4X561], a 256Mbit (32MByte) Mobile 1.8V DDRAM. Another similar one that is sometimes used is the [http://www.qimonda.com/mobile-ram/ddr-18/index.html Qimonda HYE18M169CX75].
+
|S5L8720
 +
|
 +
|Integrated (32MiB)
 +
| ''none''
 +
| N58
 +
| M2
 +
| 31
 
|-
 
|-
−
| Utility Flash ROM
+
|[[Nano 5G]]
−
|  
+
|S5L8730
 +
|ARM1176
 +
|Integrated (64MiB)
 +
| ''none''
 +
| N33
 +
| M2
 +
| 34
 
|-
 
|-
−
| NAND Flash
+
|[[Nano 6G|Nano 6G]]
−
| This chip is dependent on the iPod model, but all interface in the same way. A common one for the 3G Nano is the [http://www.datasheet4u.com/download.php?id=607807 Samsung K9MBG08U5M].
+
|S5L8723
−
|}
+
|
−
==4G Nano==
+
|Integrated
−
{| border="1" cellpadding="5" cellspacing="0"
+
| ''none''
−
! Component !! Details
+
| N20
 +
|
 +
| 36
 
|-
 
|-
−
| CPU
+
|[[Nano 7G|Nano 7G]]
−
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=S5L8700 Samsung S5L8720] ARM940T processor. It is definitely worth knowing that this is the exact same processor used in the iTouch 2G. This could mean that some of the same exploits for that could possibly be used. [http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware) Here] is a very interesting page about the S5L8720 processor.
+
|S5L8740
 +
|Cortex A5
 +
|Integrated (64MiB)
 +
| ''none''
 +
| N31
 +
| H4
 +
| 37
 
|-
 
|-
−
| RAM
+
|[[Classic 1G]]
−
| Integrated into the processor, similar to the iPod Touch and iPhone lines.
+
|S5L8702
 +
|
 +
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (64MiB)
 +
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
 +
|
 +
|
 +
| 24
 
|-
 
|-
−
| Utility Flash ROM
+
|[[Classic 2G]]
−
|  
+
|S5L8702
 +
|
 +
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (64MiB)
 +
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
 +
|
 +
|
 +
| 33
 
|-
 
|-
−
| NAND Flash
+
|[[Classic 3G]]
−
| This chip is dependent on the iPod model, but all interface in the same way.
+
|S5L8702
 +
|
 +
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X51163PE] (64MiB)
 +
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
 +
|
 +
|
 +
| 35/38
 
|}
 
|}
−
==Helpful pages==
 
−
http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware)
 
  
−
http://www.ipodlinux.org/wiki/Generations (Be careful! This is extremely inaccurate.)
+
=== Explanations ===
−
===1G Nano===
 
−
http://www2.electronicproducts.com/Apple_iPod_nano-whatsinside-2.aspx
 
  
−
http://arstechnica.com/apple/reviews/2005/09/nano.ars/4
+
* '''Device Code Name''': product code name, from early prototype phases to production run device. Most commonly used internal reference.
 +
* '''SoC Family Code Name''': device family code name, seems to follow large generational changes in SoC. Mostly seen around hardware (init) code, eg. flash interface, diags, etc.
  
−
[http://pc.watch.impress.co.jp/docs/2005/0908/nano21.jpg Image of the 1G Nano board]
+
==Helpful pages==
−
 
+
Chip analyses
−
[http://www.ipodlinux.org/wiki/Generations#iPod_Nano_.28Nano1G.29] - The pictures listed
+
*http://www2.electronicproducts.com/Apple_iPod_Touch-whatsinside-57.aspx
−
===2G Nano===
+
*http://www2.electronicproducts.com/Apple_iPhone-whatsinside-4.aspx
−
http://home.gna.org/linux4nano/download/hardware_synth-1.0.pdf
+
Additional information
−
 
+
*http://dendrites.blog.163.com/blog/static/165376178201082112922174/
−
http://www.ifixit.com/Guide/First-Look/iPod-Nano-2nd-Generation/592/1
 
−
 
 
−
http://arstechnica.com/apple/reviews/2006/09/ipod-2g.ars/4
 
−
===3G Nano===
 
−
http://www2.electronicproducts.com/Applie_iPod_Nano_(4GB)_3rd_Generation-whatsinside-16.aspx#
 
−
 
 
−
http://www.ifixit.com/Guide/First-Look/iPod-Nano-3rd-Generation/594/1
 
−
 
 
−
http://insidetronics.blogspot.com/2007/09/teardown-ipod-nano-3g.html
 
−
 
 
−
http://www.appleinsider.com/articles/07/09/10/a_peek_inside_apples_new_nano_and_classic_ipods_photos.html
 
−
===4G Nano===
 
−
http://www.ifixit.com/Guide/First-Look/iPod-Nano-4th-Generation/584/1
 
−
===Other (for comparison)===
 
−
http://www2.electronicproducts.com/Apple_iPod_Touch-whatsinside-57.aspx
 
−
 
 
−
http://www2.electronicproducts.com/Apple_iPhone-whatsinside-4.aspx
 

Latest revision as of 00:56, 20 September 2025

Overview

This is just a basic comparison of each generation's main components. For a detailed hardware analysis of a generation, click on it's link.

Generation SoC CPU Core RAM NOR/Utility Flash Device Code Name SoC Family Code Name UpdaterFamilyID
iPod nano (1st generation) PP5021C-TDF K4M56163PG (32MiB) SST39WF400A (512KiB) 14/17
iPod nano (2nd generation) S5L8701 ARM940T K4M56163PG (32MiB) SST39WF800A (1MiB) M1 19/29
iPod nano (3rd generation) S5L8702 ARM926 K4X56163PI (32MiB) SST25VF080B (1MiB) N46 M1A 26
iPod nano (4th generation) S5L8720 Integrated (32MiB) none N58 M2 31
iPod nano (5th generation) S5L8730 ARM1176 Integrated (64MiB) none N33 M2 34
iPod nano (6th generation) S5L8723 Integrated none N20 36
iPod nano (7th generation) S5L8740 Cortex A5 Integrated (64MiB) none N31 H4 37
iPod classic (6th generation) S5L8702 K4X56163PI (64MiB) SST25VF080B (1MiB) 24
iPod classic (6th generation) S5L8702 K4X56163PI (64MiB) SST25VF080B (1MiB) 33
iPod classic (6th generation) S5L8702 K4X51163PE (64MiB) SST25VF080B (1MiB) 35/38

Explanations

  • Device Code Name: product code name, from early prototype phases to production run device. Most commonly used internal reference.
  • SoC Family Code Name: device family code name, seems to follow large generational changes in SoC. Mostly seen around hardware (init) code, eg. flash interface, diags, etc.

Helpful pages

Chip analyses

Additional information

Retrieved from "https://freemyipod.org/index.php?title=Hardware&oldid=22173"