Difference between revisions of "Hardware"

From freemyipod.org
Jump to: navigation, search
(→‎4G Nano)
Line 20: Line 20:
 
|-
 
|-
 
| CPU
 
| CPU
−
| Samsung S5L8701 System On Chip (SoC), includes ARM940T(SAM44X?) central processor, advanced DSP, 50kb boot ROM, 256kb SRAM, external RAM, flash and LCD controllers, USB(1.1-host; 2.0-function) and some other parts. Package: [http://www.samsung.com/global/business/semiconductor/support/PackageInformation/downloads/SystemLSI/FBGA/232_FBGA_1010_12_05.pdf 232-pin FBGA 10x10mm] or 224/226-pin 9x9mm. Similar chips: [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=SA58700 SA58700X07].  Some documentation available for the S5L series can be found [[S5L8700 datasheet|here]]. The processor itself is Apple-branded and marked 337S3291 8701.  
+
| Samsung S5L8701 System On Chip (SoC), includes ARM940T central processor, advanced DSP, 50kB boot ROM, 256kB SRAM, external RAM, flash and LCD controllers, USB(1.1-host; 2.0-function) and some other parts. Package: [http://www.samsung.com/global/business/semiconductor/support/PackageInformation/downloads/SystemLSI/FBGA/232_FBGA_1010_12_05.pdf 232-pin FBGA 10x10mm] or 224/226-pin 9x9mm. Similar chips: [http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=212&partnum=SA58700 SA58700X07].  Some documentation available for the S5L series can be found [[S5L8700 datasheet|here]]. The processor itself is Apple-branded and marked 337S3291 8701.  
 
|-
 
|-
 
| RAM
 
| RAM
Line 38: Line 38:
 
|-
 
|-
 
| CPU  
 
| CPU  
−
| Samsung S5L8702 ARM940T processor. The package itself is Apple-branded and marked 337S3473 8702.
+
| Samsung S5L8702 ARM926EJ-S processor. The package itself is Apple-branded and marked 337S3473 8702.
 
|-
 
|-
 
| RAM
 
| RAM
Line 52: Line 52:
 
|-
 
|-
 
| CPU  
 
| CPU  
−
| Samsung S5L8720 processor. It is definitely worth knowing that this is the exact same processor used in the iTouch 2G. This could mean that some of the same exploits for that could possibly be used. [http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware) Here] is a very interesting page about the S5L8720 processor.
+
| Samsung S5L8720 ARM1136JZF-S processor. It is definitely worth knowing that this is the exact same processor used in the iTouch 2G. This could mean that some of the same exploits for that could possibly be used. [http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware) Here] is a very interesting page about the S5L8720 processor.
 
|-
 
|-
 
| RAM
 
| RAM
−
| Integrated into the processor, similar to the iPod Touch and iPhone lines.
+
| 32MB, probably MDDR. Integrated into the processor, similar to the iPod Touch and iPhone lines.
 
|-
 
|-
 
| NAND FLASH
 
| NAND FLASH
−
| LGA TYPE,The most is TOSHIBA TH58NVG6D1DLG87,Some SAMSUNG K9HCG08U5M
+
| LGA TYPE, The most is TOSHIBA TH58NVG6D1DLG87, Some SAMSUNG K9HCG08U5M
 
|-
 
|-
−
| Display IC(by dumping...found it connected to the LCD)
+
| LCD controller
 
| APPLE 338S0559
 
| APPLE 338S0559
 
|-
 
|-
Line 67: Line 67:
 
|-
 
|-
 
| Click Wheel IC
 
| Click Wheel IC
−
| There are two types of click wheel IC,CY8C214 and TS0839.
+
| There are two types of click wheel IC: CY8C214 and TS0839.
 
|}
 
|}
  
Line 73: Line 73:
 
http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware)
 
http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware)
  
−
http://www.ipodlinux.org/wiki/Generations (Be careful! This is extremely inaccurate.)
+
http://www.ipodlinux.org/wiki/Generations
  
 
http://www.rockbox.org/twiki/bin/view/Main/SamsungSA58#SA58700_codename_Blues
 
http://www.rockbox.org/twiki/bin/view/Main/SamsungSA58#SA58700_codename_Blues

Revision as of 16:58, 4 July 2010

Although iPods have many other components, here we are only listing the components that might be relavent to cracking firmware encryption. If you have any suggestions for any other components to add, just post on the talk page or IRC. Links to datasheets are important if they can be found. For a visual hardware reference, visit the Hardware annotation page.

For information about the S5L8700 datasheet, see the S5L8700 datasheet page.

1G Nano

Component Details
CPU Portal Player PP5021C-TDF. This is the last Nano that used a PortalPlayer processor before Apple started using Samsung. If anybody knows of a datasheet for this, please add a link to it.
RAM Samsung K4M56163PG - A datasheet for this Mobile SDRAM chip can be found here.
Utility Flash SST39WF400A. This chip is documented very well as is a similar chip on the 2G Nano.

2G Nano

Component Details
CPU Samsung S5L8701 System On Chip (SoC), includes ARM940T central processor, advanced DSP, 50kB boot ROM, 256kB SRAM, external RAM, flash and LCD controllers, USB(1.1-host; 2.0-function) and some other parts. Package: 232-pin FBGA 10x10mm or 224/226-pin 9x9mm. Similar chips: SA58700X07. Some documentation available for the S5L series can be found here. The processor itself is Apple-branded and marked 337S3291 8701.
RAM Samsung K4M56163PG - here is the datasheet. This is the same chip used in the iPod 1G Nano. Sometimes the Qimonda HYE18L256 chip is used instead.
Utility Flash SST SST39WF800A,stores Disk Mode, Diagnostic Mode and the code to flash this chip. Tof has managed to extract this data and the dump can be obtained by emailing Emmanuel Fleury. All of the contents in the utility flash chip are encrypted from now on.
DSP Combination of Samsung 16-bit CalmRisc16 and Samsung 24-bit CalmMAC2424.

3G Nano

Component Details
CPU Samsung S5L8702 ARM926EJ-S processor. The package itself is Apple-branded and marked 337S3473 8702.
RAM Like the flash chip, the memory also varies. The most popular chip seems to be the K4X56163PI. Another similar one that is sometimes used is the Qimonda HYE18M169CX75.
Utility Flash SST25VF080B. Like the other SST chips, this one is also extremely well documented.

4G Nano

Component Details
CPU Samsung S5L8720 ARM1136JZF-S processor. It is definitely worth knowing that this is the exact same processor used in the iTouch 2G. This could mean that some of the same exploits for that could possibly be used. Here is a very interesting page about the S5L8720 processor.
RAM 32MB, probably MDDR. Integrated into the processor, similar to the iPod Touch and iPhone lines.
NAND FLASH LGA TYPE, The most is TOSHIBA TH58NVG6D1DLG87, Some SAMSUNG K9HCG08U5M
LCD controller APPLE 338S0559
PMU APPLE 338S0807
Click Wheel IC There are two types of click wheel IC: CY8C214 and TS0839.

Helpful pages

http://theiphonewiki.com/wiki/index.php?title=S5L8720_(Hardware)

http://www.ipodlinux.org/wiki/Generations

http://www.rockbox.org/twiki/bin/view/Main/SamsungSA58#SA58700_codename_Blues

1G Nano

http://www2.electronicproducts.com/Apple_iPod_nano-whatsinside-2.aspx

http://arstechnica.com/apple/reviews/2005/09/nano.ars/4

Image of the 1G Nano board

[1] - The pictures listed

2G Nano

Nano2G+HW+analysis

S5L8701 analysis

http://home.gna.org/linux4nano/download/hardware_synth-1.0.pdf

http://www.ifixit.com/Guide/First-Look/iPod-Nano-2nd-Generation/592/1

http://arstechnica.com/apple/reviews/2006/09/ipod-2g.ars/4

3G Nano

http://www2.electronicproducts.com/Applie_iPod_Nano_(4GB)_3rd_Generation-whatsinside-16.aspx#

http://content.techrepublic.com.com/2346-13636_11-170826-1.html

http://www.ifixit.com/Guide/First-Look/iPod-Nano-3rd-Generation/594/1

http://insidetronics.blogspot.com/2007/09/teardown-ipod-nano-3g.html

Image of 3G Nano board

4G Nano

http://www.ifixit.com/Guide/First-Look/iPod-Nano-4th-Generation/584/1

6G Classic

http://en.wikipedia.org/wiki/IPod_Classic

http://homepage.mac.com/marc.heijligers/audio/ipod/comparison/measurements/measurements.html

Other (for comparison)

http://www2.electronicproducts.com/Apple_iPod_Touch-whatsinside-57.aspx

http://www2.electronicproducts.com/Apple_iPhone-whatsinside-4.aspx

Retrieved from "https://freemyipod.org/index.php?title=Hardware&oldid=2643"