View topic - Crucial V4

Main » Forums home » Flash storage, SSD

All times are UTC - 5 hours [ DST ]

Crucial V4

Page 1 of 1

[ 13 posts ]

Print view

Previous topic | Next topic

Author

Message

ici_lemmy

Post subject: Crucial V4

Posted: October 21st, 2014, 5:15

Joined: May 3rd, 2011, 9:52
Posts: 177
Location: France

Hello,

I have a broken crusial V4. The controller is a PHISON PS3105-S5-1. I unsoldered and dumped one chip to see if I could do something.
So it doesn't seem encrypted but i'm having trouble getting the xor.

Can someone confirm (or not) that the xor is [ID=40: BLK=256 PG=8640 (1074-1070x7)] in PC3k Flash. It seems to work on the first two sectors of the page but not after...

For info, pictures of the drive :

Attachment:

recto.png [ 7.14 MiB | Viewed 9801 times ]

Attachment:

verso.png [ 8.85 MiB | Viewed 9801 times ]

_________________
Lemmy

Top

MarkGreenwood (KE)

Post subject: Re: Crucial V4

Posted: October 21st, 2014, 6:28

Joined: August 8th, 2014, 4:31
Posts: 37
Location: South Wales (UK)

what ECC did you detect ?

Top

ici_lemmy

Post subject: Re: Crucial V4

Posted: October 21st, 2014, 7:13

Joined: May 3rd, 2011, 9:52
Posts: 177
Location: France

No ECC detected... that's also a problem...
I'm starting to think I'm playing out of my league.

_________________
Lemmy

Top

Sasha Sheremetov

Post subject: Re: Crucial V4

Posted: October 21st, 2014, 8:34

Joined: July 2nd, 2014, 8:05
Posts: 201

Just find a XOR key fragments and you'll see what's the problem. The best block for this is LBN0000/LBN0001.

As I remember there's nothing special in this key, here it's appearance (do not remember if it was "S" version.)

_________________
VISUAL NAND RECONSTRUCTOR. A big revolution in chip-off data recovery

Top

ici_lemmy

Post subject: Re: Crucial V4

Posted: October 21st, 2014, 10:45

Joined: May 3rd, 2011, 9:52
Posts: 177
Location: France

Sasha Sheremetov wrote:

Just find a XOR key fragments and you'll see what's the problem. The best block for this is LBN0000/LBN0001.
As I remember there's nothing special in this key, here it's appearance (do not remember if it was "S" version.)

http://rusolut.com/xor-key-library/ wrote:

Controller generates one page of pattern for first page in block, then cyclically shift it -1 byte (-8 bits) for next pages in block. Pattern xored wih Data area of page only.

I don't think that PC3k can do that...

I'm still dumping the other chips in the mean time...

By the way, the https version of rusolut doesn't work !

_________________
Lemmy

Top

arvika

Post subject: Re: Crucial V4

Posted: October 21st, 2014, 13:25

Joined: October 24th, 2009, 15:22
Posts: 875
Location: Poland

Can you upload to my FTP (PM) one dump? I can try find XOR for this.

_________________
Flash Killer - everyday new resources (pinout, XOR, ECC,config) for flash devices

Top

GreyDKang

Post subject: Re: Crucial V4

Posted: October 23rd, 2014, 4:31

Joined: March 15th, 2005, 12:49
Posts: 36
Location: Владивосток

Just detect page structure.
mostly only first page bigger then other but this controller can have few bigger pages.
After detect all sector lenght in page add this for ECC.
if ecc detected run fix and post structure, page size and block size here.
I will make xor for use in PC3000.

Top

arvika

Post subject: Re: Crucial V4

Posted: October 23rd, 2014, 6:56

Joined: October 24th, 2009, 15:22
Posts: 875
Location: Poland

Structure for this case is: DATA2048_SA8_ECC90_(DATA2048_SA2_ECC90)x3.

_________________
Flash Killer - everyday new resources (pinout, XOR, ECC,config) for flash devices

Top

Sasha Sheremetov

Post subject: Re: Crucial V4

Posted: October 23rd, 2014, 10:05

Joined: July 2nd, 2014, 8:05
Posts: 201

Arvika is right.

Considering this chip is MLC chip, block size must be 128 (256) pages = 1105920 (2211840) bytes.

_________________
VISUAL NAND RECONSTRUCTOR. A big revolution in chip-off data recovery

Top

ici_lemmy

Post subject: Re: Crucial V4

Posted: October 24th, 2014, 2:40

Joined: May 3rd, 2011, 9:52
Posts: 177
Location: France

Dear Gurus, thank you for your comments.

Structure given by arvika seems ok but I still can't find and correct ECC... I'll work on that today.
The chip IDed 0x2CA805CB so block size seems to be 256 pages.

In the mean time i'll also try to work out something else.

Again thanks for your comments.

_________________
Lemmy

Top

arvika

Post subject: Re: Crucial V4

Posted: October 24th, 2014, 3:20

Joined: October 24th, 2009, 15:22
Posts: 875
Location: Poland

Block is 512 pages.

_________________
Flash Killer - everyday new resources (pinout, XOR, ECC,config) for flash devices

Top

GreyDKang

Post subject: Re: Crucial V4

Posted: October 24th, 2014, 4:03

Joined: March 15th, 2005, 12:49
Posts: 36
Location: Владивосток

This ECC not has in PC3000Flash.

Top

arvika

Post subject: Re: Crucial V4

Posted: November 7th, 2014, 6:35

Joined: October 24th, 2009, 15:22
Posts: 875
Location: Poland

XOR was found for this case remotely

_________________
Flash Killer - everyday new resources (pinout, XOR, ECC,config) for flash devices

Top

Page 1 of 1

[ 13 posts ]

Main » Forums home » Flash storage, SSD

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: Google Adsense [Bot] and 72 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum