All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 6 posts ] 
Author Message
 Post subject: Macbook Retina A1534 NAND
PostPosted: March 10th, 2023, 20:26 
Offline
User avatar

Joined: March 30th, 2016, 15:52
Posts: 27
Location: Washington, USA
Hi all,
I will precede my question with this: Much of the work I do is research based, and I am always willing to try to do what is often referred to as "impossible"

With that, I am currently attempting data recovery from an A1534 Macbook with two LGA60 TH58XGT1JFLLDVL NAND ICs (CE ID 983CA5937E).

I have successfully dumped the entire contents of both NAND ICs. I know that these machines most likely had file vault enabled by default. I care less about that than I do identifying the page allocation for the NAND. For that ID, page size is 16K, plane is 4276, and block size is 256.

Does anyone have any info on ECC and SA for this NAND from this, or any other apple device?

I'll cross the encryption bridge when I get there :wink:

Thanks!


Top
 Profile  
 
 Post subject: Re: Macbook Retina A1534 NAND
PostPosted: March 11th, 2023, 5:14 
Online

Joined: October 24th, 2009, 15:22
Posts: 872
Location: Poland
At the past I found ECC for some iphones as I remember. You can share with me 20 blocks from nand, I will check. But it could be LDPC.

_________________
Flash Killer - everyday new resources (pinout, XOR, ECC,config) for flash devices


Top
 Profile  
 
 Post subject: Re: Macbook Retina A1534 NAND
PostPosted: March 13th, 2023, 12:12 
Offline
User avatar

Joined: March 30th, 2016, 15:52
Posts: 27
Location: Washington, USA
arvika wrote:
At the past I found ECC for some iphones as I remember. You can share with me 20 blocks from nand, I will check. But it could be LDPC.


I've uploaded 25 blocks here from the dump.

https://drive.google.com/file/d/17l69hE0d20Me7V4uHUL8tTVdVvgQta3A/view?usp=share_link

Thank you for taking a look!


Top
 Profile  
 
 Post subject: Re: Macbook Retina A1534 NAND
PostPosted: March 13th, 2023, 15:37 
Online

Joined: October 24th, 2009, 15:22
Posts: 872
Location: Poland
What page size you use? Did you cut blocks from the beggining of block? What reader do you use to read dump?

_________________
Flash Killer - everyday new resources (pinout, XOR, ECC,config) for flash devices


Top
 Profile  
 
 Post subject: Re: Macbook Retina A1534 NAND
PostPosted: March 13th, 2023, 16:52 
Offline
User avatar

Joined: March 30th, 2016, 15:52
Posts: 27
Location: Washington, USA
arvika wrote:
What page size you use? Did you cut blocks from the beggining of block? What reader do you use to read dump?


Using VNR. Got config from looking up ID and double checked with JEDEC config in VNR.


Attachments:
VNR-Settings.png
VNR-Settings.png [ 35.98 KiB | Viewed 2181 times ]
Top
 Profile  
 
 Post subject: Re: Macbook Retina A1534 NAND
PostPosted: March 13th, 2023, 17:37 
Online

Joined: October 24th, 2009, 15:22
Posts: 872
Location: Poland
Sector 4440 -> 4096_18_326. Such big sector usually means LDPC, or here it could be also Apple propetiary correction. Another challange will be encryption by controller + encryption by filesystem.

_________________
Flash Killer - everyday new resources (pinout, XOR, ECC,config) for flash devices


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: arvika and 19 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group