Hardware: Difference between revisions

From freemyipod
Jump to navigation Jump to search
← Older edit
User890104 (talk | contribs)
Bureaucrats, svnadmins, Administrators
327 edits
Farthen (talk | contribs)
confirmed, svnadmins
218 edits
 
(54 intermediate revisions by 11 users not shown)
Line 1: Line 1:
Although iPods have many other components, here we are only listing the components that might be relavent to cracking firmware encryption. If you have any suggestions for any other components to add, just post on the talk page or IRC. Links to datasheets are important if they can be found. For a visual hardware reference, visit the [[Hardware annotation]] page.
== Overview ==


For information about the S5L8700 datasheet, see the [[S5L8700 datasheet]] page.
This is just a basic comparison of each generation's main components. For a detailed hardware analysis of a generation, click on it's link.
==1G Nano==
{| border="1" cellpadding="5" cellspacing="0"
! Component !! Details
|-
| CPU
| Portal Player PP5021C-TDF. This is the last Nano that used a PortalPlayer processor before Apple started using Samsung. If anybody knows of a datasheet for this, please add a link to it.
|-
| RAM
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=136&partnum=K4M56163PG Samsung K4M56163PG] - A datasheet for this Mobile SDRAM chip can be found [http://pdf1.alldatasheet.net/datasheet-pdf/view/168204/SAMSUNG/K4M56163PG.html here].
|-
| Utility Flash
| [http://www.sst.com/products.xhtml/parallel_flash/39/x16/SST39WF400A SST39WF400A]. This chip is documented very well as is a similar chip on the 2G Nano.
|}
==2G Nano==
{| border="1" cellpadding="5" cellspacing="0"
! Component !! Details
|-
| CPU
| Samsung S5L8701 System On Chip (SoC), includes ARM940T(SAM44X?) central processor, advanced DSP, 50kb boot ROM, 256kb SRAM, external RAM, flash and LCD controllers, USB(1.1-host; 2.0-function) and some other parts. Package: [http://www.samsung.com/global/business/semiconductor/support/PackageInformation/downloads/SystemLSI/FBGA/232_FBGA_1010_12_05.pdf 232-pin FBGA 10x10mm] or 224/226-pin 9x9mm. Similar chips: [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=SA58700 SA58700X07].  Some documentation available for the S5L series can be found [[S5L8700 datasheet|here]]. The processor itself is Apple-branded and marked 337S3291 8701.
|-
| RAM
| [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=136&partnum=K4M56163PG Samsung K4M56163PG] - [http://pdf1.alldatasheet.net/datasheet-pdf/view/168204/SAMSUNG/K4M56163PG.html here] is the datasheet. This is the same chip used in the iPod 1G Nano. Sometimes the Qimonda [http://www.alldatasheet.com/datasheet-pdf/pdf/207179/QIMONDA/HYE18L256169BFX-7.5.html HYE18L256] chip is used instead.
|-
| Utility Flash
| [http://www.sst.com/products.xhtml/parallel_flash/39/x16/SST39WF800A SST SST39WF800A],stores Disk Mode, Diagnostic Mode and the code to flash this chip. Tof has [http://home.gna.org/linux4nano/dumping_SST39WF800A.html managed to extract] this data and the dump can be obtained by emailing Emmanuel Fleury. All of the contents in the utility flash chip are encrypted from now on.
|-
| DSP
| Combination of Samsung 16-bit CalmRisc16 and Samsung 24-bit CalmMAC2424.
|
|}


==3G Nano==
{| class="wikitable"
{| border="1" cellpadding="5" cellspacing="0"
! Generation !! SoC !! CPU Core !! RAM !! NOR/Utility Flash !! Device Code Name !! SoC Family Code Name !! UpdaterFamilyID
! Component !! Details
|-
|-
| CPU
|[[Nano 1G]]
| Samsung S5L8702 ARM940T processor. The package itself is Apple-branded and marked 337S3473 8702.
|PP5021C-TDF
|
|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)
|[http://www.sst.com/products/?inode=41856 SST39WF400A] (512KiB)
|
|
| 14/17
|-
|-
| RAM
|[[Nano 2G]]
| Like the flash chip, the memory also varies. The most popular chip seems to be the [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=137&partnum=K4X56163PG&&ppmi=1209 K4X56163PI]. Another similar one that is sometimes used is the [http://www.qimonda.com/mobile-ram/ddr-18/index.html Qimonda HYE18M169CX75].
|S5L8701
|ARM940T
|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)
|[http://www.sst.com/products/?inode=41422 SST39WF800A] (1MiB)
|
| M1
| 19/29
|-
|-
| Utility Flash
|[[Nano 3G]]
| [http://www.sst.com/products/?inode=41340 SST25VF080B]. Like the other SST chips, this one is also extremely well documented.
|S5L8702
|}
|ARM926
 
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (32MiB)
==4G Nano==
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
{| border="1" cellpadding="5" cellspacing="0"
| N46
! Component !! Details
| M1A
| 26
|-
|-
| CPU
|[[Nano 4G]]
| Samsung S5L8720 processor. It is definitely worth knowing that this is the exact same processor used in the iTouch 2G. This could mean that some of the same exploits for that could possibly be used. [http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware) Here] is a very interesting page about the S5L8720 processor.
|S5L8720
|ARM1176
|Integrated (32MiB)
| ''none''
| N58
| M2
| 31
|-
|-
| RAM
|[[Nano 5G]]
| Integrated into the processor, similar to the iPod Touch and iPhone lines.
|S5L8730
|ARM1176
|Integrated (64MiB)
| ''none''
| N33
| M2
| 34
|-
|-
| NAND FLASH
|[[Nano 6G|Nano 6G]]
| LGA TYPE,The most is TOSHIBA TH58NVG6D1DLG87,Some SAMSUNG K9HCG08U5M
|S5L8723
|ARM1176
|Integrated (64MiB)
| ''none''
| N20
|
| 36
|-
|-
| Display IC(by dumping...found it connected to the LCD)
|[[Nano 7G|Nano 7G]]
| APPLE 338S0559
|S5L8740
|Cortex A5
|Integrated (64MiB)
| ''none''
| N31
| H4
| 37
|-
|-
| PMU
|[[Classic 1G]]
| APPLE 338S0807
|S5L8702
|ARM926
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (64MiB)
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
|N25
| M1A
| 24
|-
|-
| Click Wheel IC
|[[Classic 2G]]
| There are two types of click wheel IC,CY8C214 and TS0839.
|S5L8702
|ARM926
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (64MiB)
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
|N25
| M1A
| 33
|-
|-
| Utility Flash
|[[Classic 3G]]
| Possibly the chip on the lower part of the 4G board? See [[Hardware annotation]].
|S5L8702
|ARM926
|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X51163PE] (64MiB)
|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
|N25
| M1A
| 35/38
|}
|}


==Helpful pages==
=== Explanations ===
http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware)


http://www.ipodlinux.org/wiki/Generations (Be careful! This is extremely inaccurate.)
* '''Device Code Name''': product code name, from early prototype phases to production run device. Most commonly used internal reference.
* '''SoC Family Code Name''': device family code name, seems to follow large generational changes in SoC. Mostly seen around hardware (init) code, eg. flash interface, diags, etc.


http://www.rockbox.org/twiki/bin/view/Main/SamsungSA58#SA58700_codename_Blues
==Helpful pages==
===1G Nano===
Chip analyses
http://www2.electronicproducts.com/Apple_iPod_nano-whatsinside-2.aspx
*http://www2.electronicproducts.com/Apple_iPod_Touch-whatsinside-57.aspx
 
*http://www2.electronicproducts.com/Apple_iPhone-whatsinside-4.aspx
http://arstechnica.com/apple/reviews/2005/09/nano.ars/4
Additional information
 
*http://dendrites.blog.163.com/blog/static/165376178201082112922174/
[http://pc.watch.impress.co.jp/docs/2005/0908/nano21.jpg Image of the 1G Nano board]
 
[http://www.ipodlinux.org/wiki/Generations#iPod_Nano_.28Nano1G.29] - The pictures listed
===2G Nano===
[[Nano2G%2BHW%2Banalysis]]
 
[[S5L8701 analysis]]
 
http://home.gna.org/linux4nano/download/hardware_synth-1.0.pdf
 
http://www.ifixit.com/Guide/First-Look/iPod-Nano-2nd-Generation/592/1
 
http://arstechnica.com/apple/reviews/2006/09/ipod-2g.ars/4
 
===3G Nano===
http://www2.electronicproducts.com/Applie_iPod_Nano_(4GB)_3rd_Generation-whatsinside-16.aspx#
 
http://content.techrepublic.com.com/2346-13636_11-170826-1.html
 
http://www.ifixit.com/Guide/First-Look/iPod-Nano-3rd-Generation/594/1
 
http://insidetronics.blogspot.com/2007/09/teardown-ipod-nano-3g.html
 
[http://www.combert-elec.com/www/bookpic/200810916515460624.jpg Image of 3G Nano board]
===4G Nano===
http://www.ifixit.com/Guide/First-Look/iPod-Nano-4th-Generation/584/1
===6G Classic===
http://en.wikipedia.org/wiki/IPod_Classic
 
http://homepage.mac.com/marc.heijligers/audio/ipod/comparison/measurements/measurements.html
===Other (for comparison)===
http://www2.electronicproducts.com/Apple_iPod_Touch-whatsinside-57.aspx
 
http://www2.electronicproducts.com/Apple_iPhone-whatsinside-4.aspx

Latest revision as of 10:11, 8 February 2026

Overview

This is just a basic comparison of each generation's main components. For a detailed hardware analysis of a generation, click on it's link.

Generation SoC CPU Core RAM NOR/Utility Flash Device Code Name SoC Family Code Name UpdaterFamilyID
iPod nano (1st generation) PP5021C-TDF K4M56163PG (32MiB) SST39WF400A (512KiB) 14/17
iPod nano (2nd generation) S5L8701 ARM940T K4M56163PG (32MiB) SST39WF800A (1MiB) M1 19/29
iPod nano (3rd generation) S5L8702 ARM926 K4X56163PI (32MiB) SST25VF080B (1MiB) N46 M1A 26
iPod nano (4th generation) S5L8720 ARM1176 Integrated (32MiB) none N58 M2 31
iPod nano (5th generation) S5L8730 ARM1176 Integrated (64MiB) none N33 M2 34
iPod nano (6th generation) S5L8723 ARM1176 Integrated (64MiB) none N20 36
iPod nano (7th generation) S5L8740 Cortex A5 Integrated (64MiB) none N31 H4 37
iPod classic (6th generation) S5L8702 ARM926 K4X56163PI (64MiB) SST25VF080B (1MiB) N25 M1A 24
iPod classic (6th generation) S5L8702 ARM926 K4X56163PI (64MiB) SST25VF080B (1MiB) N25 M1A 33
iPod classic (6th generation) S5L8702 ARM926 K4X51163PE (64MiB) SST25VF080B (1MiB) N25 M1A 35/38

Explanations

  • Device Code Name: product code name, from early prototype phases to production run device. Most commonly used internal reference.
  • SoC Family Code Name: device family code name, seems to follow large generational changes in SoC. Mostly seen around hardware (init) code, eg. flash interface, diags, etc.

Helpful pages

Chip analyses

Additional information

Retrieved from "https://freemyipod.org/index.php?title=Hardware&oldid=22219"