Switch to full style
Discussions related to Visual NAND Reconstructor tool
Post a reply

Toshiba TC58NC6134G6F controller

July 4th, 2019, 8:15

Anyone worked with devices using this controller before?

Got a stick that has this controller and a 16 GB Toshiba NAND chip w/ 17664b page size, ordered in 16x (1024,4,70) code word blocks.

I've extracted the XOR key since it was static, but I'm not sure about the correct ECC here. All the code word analysis functions and checking up against the database doesn't yield anything useful, so thought I'd ask here if anyone has suggestions for ECC parameters that should be tried?

Re: Toshiba TC58NC6134G6F controller

July 4th, 2019, 15:33

Most of latest Toshiba controller need deXOR whole data, SA and ECC area, than you can use ECC on dexored dump.

Re: Toshiba TC58NC6134G6F controller

July 5th, 2019, 1:49

Yah, I've seen those as well, but this controller seems to only data area xor'ed, as you can see in the image below. Or at least spare area isn't xor'ed, thus I would assume ECC isn't either.

Image (https://i.imgur.com/W63lsyQ.jpg for full size picture).

Re: Toshiba TC58NC6134G6F controller

July 5th, 2019, 9:41

All is XORed.

Re: Toshiba TC58NC6134G6F controller

July 6th, 2019, 15:52

Hello,
The SA Is Also Xored , There Is So Much Noise In PIC For SA .SA Is Clean If Not Xored ,This is Definitely a Xored SA

Re: Toshiba TC58NC6134G6F controller

July 11th, 2019, 2:36

Have to say I don't agree with you. If I use a key that include SA+ECC, the dump will after XORing have SA that is all 0xFF for ALL the SA, so I end up with a page that is 16*(1024b random data + 4b*0xFF + 70b random data), so this is definitely NOT correct. If I include SA only in the XOR key, the key size of the dump can't be a multiple of the XOR key size, and again the output result is totally wrong, so you are both wrong here.

Re: Toshiba TC58NC6134G6F controller

July 11th, 2019, 9:36

This SA has no information usable. Heard that FE can make it work but never had a chance to try. I think, that the only way with RuSolut is RAW search.

Re: Toshiba TC58NC6134G6F controller

July 12th, 2019, 2:20

yes some of the Toshiba use layouts from SSS controllers and in FE are solved (somewhat) with Virtual Translator.

Re: Toshiba TC58NC6134G6F controller

July 12th, 2019, 3:12

melvin wrote:This SA has no information usable. Heard that FE can make it work but never had a chance to try. I think, that the only way with RuSolut is RAW search.


I'm not intending to reconstruct the data or anything, I'm working on another project that would yield better results if there were less bit errors in the dump, so I'm basically only interested in the ECC for this controller. E.g. suggestions for polynomial / order, etc. The results from using the "code word analysis" in Rusolut aren't satisfactory but I'm not sure if it's because it suggests the wrong ECC parameters or if it's because the dump has too many errors.

But the tip from HaQue about Toshiba having similarities with SSS is interesting, I'll dig a bit into what they do and check if I can find something that maybe works on this dump as well.

Re: Toshiba TC58NC6134G6F controller

July 12th, 2019, 4:12

Some of the Toshiba use layouts from SSS controllers and in FE are solved (somewhat) with Virtual Translator.

Re: Toshiba TC58NC6134G6F controller

July 13th, 2019, 15:45

In toshiba the ecc is usually applied after the xor.
If you can upload a block of the dump, maybe I could help you.
A greeting.

Re: Toshiba TC58NC6134G6F controller

July 15th, 2019, 6:17

I've uploaded 5 blocks from the dump to we transfer. https://we.tl/t-MgA4wzSXWh

I have also included the extracted XOR key for the controller. If needed I can make upload a bigger dump, but I assume this should be enough to look at the ECC.

Re: Toshiba TC58NC6134G6F controller

July 17th, 2019, 6:26

Hi,
We have this one supported however you need to use SSS resources from update 3.5 (We should probably rename them all to Toshiba/SSS it's same devices):
Connect XOR to PhyImage and select
SSS6695(17664b_256p_1098_xoredSA_ECC)_809E9C.xor (do not adjust key to page)
Then connect ECC to XOR element and select
SSS6695_17664(ecc70b)_16_X.bch

Dump quality is pretty good btw, minor ReRead will be required (maybe 3 passes without even Read Retry).

Re: Toshiba TC58NC6134G6F controller

July 18th, 2019, 2:32

Thanks, Sasha. In the process of renewing the support now - had totally forgotten about it, so will try that once I've gotten around to download the new version. As for dump quality, might be that the overall is good, but I have a feeling there might some errors in the FW region of the dump that makes my other project not working as intended, hence why I just want to fix as many as possible.

Re: Toshiba TC58NC6134G6F controller

July 18th, 2019, 19:25

I'm sorry I have not seen it before.
Attachments
HDD GURU.rar
(12.32 MiB) Downloaded 279 times
Post a reply