Emma Mobile1

---

Overview

This is the page for the Emma Mobile1 SoC, also known as em1 or mp200, from NEC/Renesas. There is a linux port for it, released by Sony for it's NWZ players (see sony open source content for the sony nwz-e463 for example). Sony's Source Code Distribution Service It uses the ARM1176JZF-S CPU. Sony uses the EM1-D512 package that bundles the Emma Mobile1 Soc with 64MB of RAM. It also has a DSPK701 DSP which is completely undocumented.

Datasheet

The datasheets are availble on Renesas websites using the internal search engine but are very hard to find. They are also attached to this page. A special comment about missings documents:

• The NAND flash module datasheet is impossible to find
• Two modules (MMM and MSP) which are crypto related probably never were documented and linux has no code for it.

Undocumented modules

MMM

The MMM crypto modules is located in Bank 6 at address 0x60040000.

Features

This modules seems to supports DES and AES in CBC and ECB modes. This list is by no way exhaustive.

Registers

The following registers were identified:

Offset	Size	Name	Comment
0x18	4	STATUS	Gives busy status ?
0x20	2	CMD	Used to control encryption methods, run, ...
0x40	4	KEY0	Used to push a key
0x44	4	KEY1	Used to push a key
0x48	4	KEY2	Used to push a key
0x4c	4	KEY3	Used to push a key
0x50	4	DATAIN0	Used to push a block
0x54	4	DATAIN1	Used to push a block
0x58	4	DATAIN2	Used to push a block
0x5c	4	DATAIN3	Used to push a block
0x60	4	IV0	Used to push an initialisation vector
0x64	4	IV1	Used to push an initialisation vector
0x68	4	IV2	Used to push an initialisation vector
0x6c	4	IV3	Used to push an initialisation vector
0x70	4	DATAOUT0	Used to pop a block
0x74	4	DATAOUT1	Used to pop a block
0x78	4	DATAOUT2	Used to pop a block
0x7c	4	DATAOUT3	Used to pop a block

Operations

TODO

MSP

Nothing is known about the MSP modules except that it has three clock lines (rtclk, sclk, pclk).

-- AmauryPouly - 02 Nov 2012