Main » Forums home » Flash storage, SSD

All times are UTC - 5 hours [ DST ]



Post new topic Reply to topic  Page 1 of 1
  [ 13 posts ] 
  Print view Previous topic | Next topic 
Author Message
ici_lemmy
 Post subject: Crucial V4
PostPosted: October 21st, 2014, 5:15 
Offline
User avatar

Joined: May 3rd, 2011, 9:52
Posts: 178
Location: France
Hello,

I have a broken crusial V4. The controller is a PHISON PS3105-S5-1. I unsoldered and dumped one chip to see if I could do something.
So it doesn't seem encrypted but i'm having trouble getting the xor.

Can someone confirm (or not) that the xor is [ID=40: BLK=256 PG=8640 (1074-1070x7)] in PC3k Flash. It seems to work on the first two sectors of the page but not after...

For info, pictures of the drive :
Attachment:
recto.png
recto.png [ 7.14 MiB | Viewed 9161 times ]

Attachment:
verso.png
verso.png [ 8.85 MiB | Viewed 9161 times ]

_________________
Lemmy
Top
 Profile  
 
MarkGreenwood (KE)
 Post subject: Re: Crucial V4
PostPosted: October 21st, 2014, 6:28 
Offline
User avatar

Joined: August 8th, 2014, 4:31
Posts: 37
Location: South Wales (UK)
what ECC did you detect ?
Top
 Profile  
 
ici_lemmy
 Post subject: Re: Crucial V4
PostPosted: October 21st, 2014, 7:13 
Offline
User avatar

Joined: May 3rd, 2011, 9:52
Posts: 178
Location: France
No ECC detected... that's also a problem...
I'm starting to think I'm playing out of my league.

_________________
Lemmy
Top
 Profile  
 
Sasha Sheremetov
 Post subject: Re: Crucial V4
PostPosted: October 21st, 2014, 8:34 
Offline

Joined: July 2nd, 2014, 8:05
Posts: 201
Just find a XOR key fragments and you'll see what's the problem. The best block for this is LBN0000/LBN0001.

As I remember there's nothing special in this key, here it's appearance (do not remember if it was "S" version.)

_________________
VISUAL NAND RECONSTRUCTOR. A big revolution in chip-off data recovery
Top
 Profile  
 
ici_lemmy
 Post subject: Re: Crucial V4
PostPosted: October 21st, 2014, 10:45 
Offline
User avatar

Joined: May 3rd, 2011, 9:52
Posts: 178
Location: France
Sasha Sheremetov wrote:
Just find a XOR key fragments and you'll see what's the problem. The best block for this is LBN0000/LBN0001.
As I remember there's nothing special in this key, here it's appearance (do not remember if it was "S" version.)

http://rusolut.com/xor-key-library/ wrote:
Controller generates one page of pattern for first page in block, then cyclically shift it -1 byte (-8 bits) for next pages in block. Pattern xored wih Data area of page only.
I don't think that PC3k can do that...

I'm still dumping the other chips in the mean time...

By the way, the https version of rusolut doesn't work !

_________________
Lemmy
Top
 Profile  
 
arvika
 Post subject: Re: Crucial V4
PostPosted: October 21st, 2014, 13:25 
Offline

Joined: October 24th, 2009, 15:22
Posts: 843
Location: Poland
Can you upload to my FTP (PM) one dump? I can try find XOR for this.

_________________
Odzyskiwanie danych
Top
 Profile  
 
GreyDKang
 Post subject: Re: Crucial V4
PostPosted: October 23rd, 2014, 4:31 
Offline

Joined: March 15th, 2005, 12:49
Posts: 36
Location: Владивосток
Just detect page structure.
mostly only first page bigger then other but this controller can have few bigger pages.
After detect all sector lenght in page add this for ECC.
if ecc detected run fix and post structure, page size and block size here.
I will make xor for use in PC3000.
Top
 Profile  
 
arvika
 Post subject: Re: Crucial V4
PostPosted: October 23rd, 2014, 6:56 
Offline

Joined: October 24th, 2009, 15:22
Posts: 843
Location: Poland
Structure for this case is: DATA2048_SA8_ECC90_(DATA2048_SA2_ECC90)x3.

_________________
Odzyskiwanie danych
Top
 Profile  
 
Sasha Sheremetov
 Post subject: Re: Crucial V4
PostPosted: October 23rd, 2014, 10:05 
Offline

Joined: July 2nd, 2014, 8:05
Posts: 201
Arvika is right.

Image

Considering this chip is MLC chip, block size must be 128 (256) pages = 1105920 (2211840) bytes.

_________________
VISUAL NAND RECONSTRUCTOR. A big revolution in chip-off data recovery
Top
 Profile  
 
ici_lemmy
 Post subject: Re: Crucial V4
PostPosted: October 24th, 2014, 2:40 
Offline
User avatar

Joined: May 3rd, 2011, 9:52
Posts: 178
Location: France
Dear Gurus, thank you for your comments.

Structure given by arvika seems ok but I still can't find and correct ECC... I'll work on that today.
The chip IDed 0x2CA805CB so block size seems to be 256 pages.

In the mean time i'll also try to work out something else.

Again thanks for your comments.

_________________
Lemmy
Top
 Profile  
 
arvika
 Post subject: Re: Crucial V4
PostPosted: October 24th, 2014, 3:20 
Offline

Joined: October 24th, 2009, 15:22
Posts: 843
Location: Poland
Block is 512 pages.

_________________
Odzyskiwanie danych
Top
 Profile  
 
GreyDKang
 Post subject: Re: Crucial V4
PostPosted: October 24th, 2014, 4:03 
Offline

Joined: March 15th, 2005, 12:49
Posts: 36
Location: Владивосток
This ECC not has in PC3000Flash.
Top
 Profile  
 
arvika
 Post subject: Re: Crucial V4
PostPosted: November 7th, 2014, 6:35 
Offline

Joined: October 24th, 2009, 15:22
Posts: 843
Location: Poland
XOR was found for this case remotely :)

_________________
Odzyskiwanie danych
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 13 posts ] 

Main » Forums home » Flash storage, SSD

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 10 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Switch to mobile style
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group