eliott/BBeOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
71941f058439f44573f666bdf8352c731aac75d0
BBeOS/research/q20-hardware-research.md
Eliott 71941f0584
Some checks failed
CI / markdown-lint (push) Failing after 15s
Details
Phase 1: Initial kernel development setup 
- Added comprehensive hardware research documentation
- Created bootloader analysis and driver compatibility research
- Set up development environment with cross-compilation tools
- Created Q20-specific device tree (simplified version)
- Added kernel build scripts and configuration
- Set up CI/CD pipeline with Gitea Actions
- Added .gitignore for build artifacts
2025-07-31 17:43:09 +02:00

8.0 KiB
Raw Blame History

BlackBerry Classic Q20 Hardware Research

Device Overview

  • Model: BlackBerry Classic (Q20)
  • Release Date: December 2014
  • Manufacturer: BlackBerry Limited
  • OS: BlackBerry 10.3.1 (originally)
  • Dimensions: 131 x 72.4 x 10.2 mm
  • Weight: 177g

System-on-Chip (SoC)

Qualcomm MSM8960 (Snapdragon S4 Plus)

  • Architecture: ARMv7 dual-core Krait 200/300
  • Process: 28nm LP (Low Power)
  • CPU Cores: 2x ARM Cortex-A9 (Krait 200/300)
  • CPU Frequency: 1.5GHz (maximum)
  • GPU: Adreno 225
  • Memory Interface: LPDDR2-1066
  • ISP: 20MP camera support
  • Video: 1080p encode/decode
  • Modem: Integrated MDM9615

Krait CPU Details

  • Architecture: ARMv7-A compatible
  • Pipeline: 11-stage out-of-order
  • L1 Cache: 32KB instruction + 32KB data per core
  • L2 Cache: 1MB shared
  • Power Management: Dynamic voltage and frequency scaling

Memory & Storage

RAM

  • Type: LPDDR2-1066
  • Capacity: 2GB
  • Bandwidth: 8.5 GB/s
  • Configuration: 32-bit dual-channel

Internal Storage

  • Type: eMMC 4.5
  • Capacity: 16GB
  • Interface: 8-bit parallel
  • Speed: Up to 200MB/s read, 50MB/s write

Expandable Storage

  • Type: microSD card slot
  • Capacity: Up to 128GB (officially supported)
  • Speed: Class 10

Display System

Panel Specifications

  • Type: IPS LCD
  • Size: 3.5 inches
  • Resolution: 720 x 720 pixels (1:1 aspect ratio)
  • Pixel Density: 294 PPI
  • Color Depth: 24-bit (16.7M colors)
  • Brightness: Up to 500 nits
  • Contrast Ratio: 1000:1
  • Viewing Angles: 178° horizontal/vertical

Display Interface

  • Technology: MIPI DSI (Display Serial Interface)
  • Lanes: 4-lane DSI
  • Version: DSI 1.0
  • Backlight: LED edge-lit with PWM control

Touch Technology

  • Type: Capacitive
  • Points: Multi-touch (up to 10 points)
  • Interface: I2C or SPI
  • Controller: Likely Atmel or Synaptics

Input Devices

Physical Keyboard

  • Type: QWERTY with backlight
  • Keys: 35 physical keys
  • Layout: 4 rows x 9 columns (approximately)
  • Backlight: LED with adjustable brightness
  • Interface: I2C or SPI controller
  • Features:
    • Dedicated Call/End keys
    • Menu and Back navigation
    • Alt and Shift modifiers
    • Number row (1-0)
    • Special function keys

Trackpad

  • Type: Optical or capacitive sensor
  • Size: Approximately 20mm x 20mm
  • Resolution: High precision for trackpad use
  • Interface: I2C or SPI
  • Features:
    • Left/right click buttons
    • Scroll functionality
    • Gesture support

Navigation Keys

  • Menu Key: Context menu access
  • Back Key: Navigation back
  • Call Key: Answer/initiate calls
  • End Key: End calls/power functions

Graphics & Multimedia

Adreno 225 GPU

  • Architecture: Unified shader model 4.1
  • Shader Units: 8 unified shaders
  • Memory: Shared with system RAM
  • API Support:
    • OpenGL ES 2.0
    • OpenVG 1.1
    • DirectX 9.0c (limited)
  • Performance: ~24 GFLOPS
  • Memory Bandwidth: 8.5 GB/s

Video Capabilities

  • Decode: H.264, H.263, MPEG-4, VP8
  • Encode: H.264, H.263
  • Resolution: Up to 1080p
  • Frame Rate: Up to 30fps

Audio System

Audio Codec

  • Primary: Qualcomm WCD9310 or similar
  • Interface: I2S/SLIMbus
  • Sample Rate: Up to 48kHz
  • Bit Depth: 16/24-bit

Audio Outputs

  • Speaker: Mono speaker (rear-facing)
  • Headphone: 3.5mm TRRS jack
  • Volume Control: Hardware + software

Audio Inputs

  • Microphone: Built-in microphone
  • Noise Cancellation: Digital noise reduction
  • Echo Cancellation: For voice calls

Connectivity

Cellular Modem

  • Model: Qualcomm MDM9615
  • Technology:
    • LTE Cat 3 (100/50 Mbps)
    • HSPA+ (21/5.76 Mbps)
    • CDMA (EV-DO Rev. A)
  • Interface: QMI over USB or HSIC
  • Bands:
    • LTE: Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 20
    • GSM: 850, 900, 1800, 1900 MHz
    • CDMA: 800, 1900 MHz

Wi-Fi

  • Standard: IEEE 802.11n
  • Frequency: 2.4GHz and 5GHz
  • Speed: Up to 150 Mbps
  • Security: WPA/WPA2/WEP
  • Chipset: Likely Qualcomm/Atheros

Bluetooth

  • Version: 4.0 (Bluetooth Low Energy)
  • Profiles: A2DP, AVRCP, HFP, HSP, OPP, PBAP
  • Range: Up to 10 meters
  • Chipset: Likely Qualcomm WCN3660

GPS

  • Type: Assisted GPS (A-GPS)
  • Satellites: GPS, GLONASS
  • Accuracy: 3-5 meters
  • Time to First Fix: <30 seconds (cold start)

USB

  • Version: USB 2.0
  • Type: Micro-USB
  • Modes: Host, Device, OTG
  • Speed: 480 Mbps
  • Charging: USB charging supported

Power Management

Battery

  • Type: Lithium-ion (removable)
  • Capacity: 2515mAh
  • Voltage: 3.7V nominal
  • Chemistry: LiCoO2
  • Cycle Life: 500+ cycles
  • Dimensions: 65 x 35 x 5mm (approximate)

Charging

  • Input: 5V/1.8A (9W)
  • Technology: Qualcomm Quick Charge 1.0
  • Time: ~3 hours to full charge
  • Indicators: LED charging indicator

Power Management IC

  • Primary: Qualcomm PM8941
  • Features:
    • Multiple voltage regulators
    • Battery management
    • Power sequencing
    • Thermal protection

Sensors

Accelerometer

  • Type: 3-axis MEMS
  • Range: ±2g, ±4g, ±8g, ±16g
  • Interface: I2C/SPI
  • Applications: Screen rotation, motion detection

Gyroscope

  • Type: 3-axis MEMS
  • Range: ±250, ±500, ±1000, ±2000 dps
  • Interface: I2C/SPI
  • Applications: Motion sensing, gaming

Magnetometer

  • Type: 3-axis digital compass
  • Range: ±4900 μT
  • Interface: I2C
  • Applications: Navigation, compass

Proximity Sensor

  • Type: Infrared
  • Range: 0-5cm
  • Interface: I2C
  • Applications: Screen blanking during calls

Ambient Light Sensor

  • Type: Digital light sensor
  • Range: 0.1-1000 lux
  • Interface: I2C
  • Applications: Automatic backlight adjustment

Camera System

Rear Camera

  • Sensor: 8MP CMOS
  • Aperture: f/2.2
  • Focal Length: 4.6mm (35mm equivalent: 35mm)
  • Features:
    • Autofocus
    • LED flash
    • 1080p video recording
    • Image stabilization

Front Camera

  • Sensor: 2MP CMOS
  • Aperture: f/2.8
  • Features:
    • Fixed focus
    • 720p video recording
    • Selfie mode

Debug Interfaces

Serial Console

  • Interface: UART over USB
  • Baud Rate: 115200
  • Protocol: 8N1
  • Access: Requires special cable or software

JTAG

  • Interface: 20-pin connector
  • Protocol: ARM Debug Interface
  • Access: Hardware debug port (not user accessible)

USB Debug

  • Mode: ADB (Android Debug Bridge)
  • Protocol: USB 2.0
  • Access: Developer mode required

Boot Process

Bootloader

  • Primary: Qualcomm SBL (Secondary Boot Loader)
  • Security: Secure boot with signature verification
  • Recovery: Qualcomm EDL (Emergency Download Mode)

Partition Layout

  • Bootloader: 2MB
  • Boot: 32MB
  • System: 1GB
  • User Data: 12GB
  • Cache: 512MB
  • Recovery: 256MB

Security Features

Hardware Security

  • TrustZone: ARM TrustZone technology
  • Secure Boot: Chain of trust verification
  • Hardware Encryption: AES-256 acceleration
  • Secure Storage: Hardware-backed key storage

Software Security

  • BlackBerry Balance: Work/personal data separation
  • BlackBerry Guardian: App permission management
  • BlackBerry Protect: Anti-malware protection

Research Status

  • Basic hardware specifications documented
  • SoC details researched
  • Display specifications confirmed
  • Input device details documented
  • Bootloader analysis needed
  • Debug interface testing required
  • Firmware extraction attempted
  • Hardware reverse engineering needed
  • Driver compatibility research needed

Next Research Priorities

  1. Bootloader Analysis: Understand the boot process and security
  2. Debug Interface Testing: Verify access methods
  3. Hardware Reverse Engineering: Identify exact component models
  4. Driver Research: Find compatible open-source drivers
  5. Security Assessment: Evaluate unlock possibilities