Macbook Retina A1534 NAND

[crackz0r]

Hi all,
I will precede my question with this: Much of the work I do is research based, and I am always willing to try to do what is often referred to as "impossible"

With that, I am currently attempting data recovery from an A1534 Macbook with two LGA60 TH58XGT1JFLLDVL NAND ICs (CE ID 983CA5937E).

I have successfully dumped the entire contents of both NAND ICs. I know that these machines most likely had file vault enabled by default. I care less about that than I do identifying the page allocation for the NAND. For that ID, page size is 16K, plane is 4276, and block size is 256.

Does anyone have any info on ECC and SA for this NAND from this, or any other apple device?

I'll cross the encryption bridge when I get there

Thanks!

[arvika]

At the past I found ECC for some iphones as I remember. You can share with me 20 blocks from nand, I will check. But it could be LDPC.

[crackz0r]

At the past I found ECC for some iphones as I remember. You can share with me 20 blocks from nand, I will check. But it could be LDPC.

I've uploaded 25 blocks here from the dump.

https://drive.google.com/file/d/17l69hE0d20Me7V4uHUL8tTVdVvgQta3A/view?usp=share_link

Thank you for taking a look!

[arvika]

What page size you use? Did you cut blocks from the beggining of block? What reader do you use to read dump?

[crackz0r]

What page size you use? Did you cut blocks from the beggining of block? What reader do you use to read dump?

Using VNR. Got config from looking up ID and double checked with JEDEC config in VNR.

Attachments

[arvika]

Sector 4440 -> 4096_18_326. Such big sector usually means LDPC, or here it could be also Apple propetiary correction. Another challange will be encryption by controller + encryption by filesystem.