NEO-CMC: Difference between revisions

From NeoGeo Development Wiki
Jump to navigation Jump to search
No edit summary
(21 intermediate revisions by 3 users not shown)
Line 1: Line 1:
[[File:crt_cmc.jpg|thumb|"CMC42" chip on a MVS [[cartridges|cartridge]]. Picture courtesy of [[http://www.mvs-scans.com MVS-Scans]].]]
{{ChipInfo
|picture=crt_cmc.jpg
|pkg=QFP180
|manu=toshiba
|date=1999 ?
|gates=A lot
|used_on={{PCB|CHAFIO}}...
}}


The most "basic" information published can be found at [[http://mamedev.org/source/src/mame/machine/neocrypt.c.html MAME:neocrypt.c]]
[[File:brd_cmcnoref.jpg|thumb|"CMC50"]]
 
Bellow the detailed information:
 
The NEO-CMC Chip is a Asic (Application Specific Integrated Circuit). This device can be programmed only once after be created severals prototypes until reach the stable condiction, using FPGA (Field Programmable Gate Array).
The Asci must be considerated a final step from this process.
 
To get a intuition about costs related, please read this:
[[http://www.design-reuse.com/articles/9010/fpga-s-vs-asic-s.html FPGA vs ASICs production and design]]


SNK had planned to put his next protection to try avoid NeoGeo piracy using the NEOCMC algorithm.
Late SNK custom chip used for protection, bankswitching and latching on [[CHAFIO]] [[CHA board]]s.


Because Toshiba was partner and not only made solution to hold data on it's Mask Roms (TC5xxxx), they has used its technology in Asic solutions to help to create this Chip. Until 1995 Toshiba had a line of Asics called TC190G series, the evolution of this series can be found at [[http://www.toshiba-components.com/ASIC/Technology.html Toshiba Technology RoadMap]].
Descrambling/decryption infos can be found in [[https://github.com/mamedev/mame/blob/master/src/devices/bus/neogeo/prot_cmc.cpp  MAME:prot_cmc.c]]


The serie that SNK get advantage to build a valuable chip with it's algorithm to protect Cs and S1 initially was the serie TC190G:
==Versions==
This chip is a TC190G series Toshiba ASIC developed between 1990 and 1994.


The series TC190G cannot be found in datasheets anymore, but in past years had these models:
The datasheet apparently can't be found anymore for any of the known types:
*TC190G06CF7008
*TC190G06CF7008
*TC1'''90G06CF7042'''
*TC1'''90G06CF7042'''
*TC1'''90G06CF7050'''
*TC1'''90G06CF7050'''
and more...
(probably others...)


Apparently the last two models was used because the number of internal number of gates acceptable to the logic SNK have developed:
SNK merged the following designs into this chip:
*NEO-ZMC
*{{Chipname|NEO-ZMC}}
*NEO-273
*{{Chipname|NEO-273}}
*And a new scrambling system for that interlaces M1 + (CX + S1) ROM data
*{{Chipname|PRO-CT0}}
*New scrambling system that interlaces M1 + (C* + S1) to decrypt all the graphics ROMs data in real time.


inicially the released model of CMC was '''NEO-CMC42''' on the following cartridges:
The first released NEO-MVS CHAFIO PCBs came out with the '''042''' version of NEO-CMC, on the following cartridges:
{|
*[[Zupapa!]]
|'''CART ID'''
*[[The King of Fighters '99 - Millennium Battle]]
|'''TITLE NAME'''
*[[Ganryu]]
|-
*[[Garou - Mark of the Wolves]]
|070
*[[Strikers 1945 Plus]]
|Zupapa  
*[[Prehistoric Isle 2]]
|-
*[[Metal Slug 3]]
|251
*[[Bang Bead]]
|King Of Fighters 99  
*[[Nightmare in the Dark]]
|-  
*[[Sengoku 3]]
|252
|Ganryu  
|-  
|253
|Garou Mark Of the Wolves  
|-
|254
|Strikers 1945  
|-
|255
|Prehistoric Isle 2  
|-
|256
|Metal Slug 3  
|-
|259
|Bang Bead  
|-
|260
|Nightmare in the Dark  
|-
|261
|Sengoku 3  
|-
|}


This version had only S1 and CRoms Encrypted and M1 remained in normal condition (unencrypted)
On this version only the [[S ROM|S1]] and [[C ROM]]s are encrypted and M1 remains unencrypted. Almost one year later, SNK decided to add one more layer, this time also encrypting M1. This new NEO-CMC chip had the '''050''' reference and was found in the following cartridges:
*[[Jockey Grand Prix]]
*[[The King of Fighters 2000]]
*[[The King of Fighters 2001]]
*[[Metal Slug 4]]
*[[Rage of the Dragons]]
*[[The King of Fighters 2002]]
*[[Matrimelee]]
*[[Pochi and Nyaa]]
*[[Metal Slug 5]]
*[[SNK vs. Capcom - SVC Chaos]]
*[[Samurai Shodown V]]
*[[The King of Fighters 2003]]
*[[Samurai Shodown V Special]]


This was just a "test", to see if SNK and Toshiba could be more further in protection.
Until today, nobody has released a cloned chip on the underground market.


Almost one year later SNK decided release one more layer on the algorithm, to encrypt M1 on the mixer.
==Fix handling==
So they released the model NEO-CMC50 on the following cartridges:
{|
|'''CART ID'''
|'''TITLE NAME'''
|-
|008
|Jockey Grand Prix
|-
|257
|King Of Figthers 2000
|-
|262
|King Of Figthers 2001
|-
|263
|Metal Slug 4
|-
|264
|Rage of the Dragons
|-
|265
|King Of Fighters 2002
|-
|266
|Power Instinct - Matrimele
|-
|267
|Pochi to Nyaa
|-
|268
|Metal Slug 5
|-
|269
|SNK vs Capcom Chaos
|-
|270
|Samurai Showdown Zero / Samurai Showdown 5
|-
|271
|King of Fighters 2003
|-
|272
|Samurai Showdown Zero Special / Samurai Showdown 5 Special
|-
|}
About Jockey Gran Prix, some peoples say this game is not official release but it´s not true.
At least its production of the card is official, because they had used the REAL Encryption that cannot be mocked easly.
Only the Toshiba and SNK knew the encryption and until today "NO ONE" piracy goes so forensic to mock it.
Explanation Later.


See [[fix bankswitching]].


==Encryption==


[[File:brd_cmcnoref.jpg|thumb|"CMC50"]]
Todo.


Also found on [[ROM-Only boards|ROM-only]] arcade boards, without the "NEO-CMC" marking.
=Pinout=
=Pinout=
[[File:Neocmc_7050_7042_pinout.png]]
[[File:Neocmc_7050_7042_pinout.png|x600px]]
 
OpenOffice Draw file: [[File:Neocmc_7050_7042.odg]]


Notes:
Signals:
*C_e_D[0-15]: C1/C3/C5/C7 data bus
*C_e_D[0..15]: C odd data bus
*C_o_D[0-15]: C2/C4/C6/C8 data bus
*C_o_D[0..15]: C even data bus
*CX A[0-21]: C1/C2/C3/C4/C5/C6/C7/C8 address bus
*CX A[0..21]: C1~8 address bus
*Pins 87,88 contains a RC circuit clock driver like in a 8085 with X1 and X2 pinouts
*Pins 87,88 contains a RC circuit clock driver like in a 8085 with X1 and X2 pinouts
*Pins 89 and 92 are short circuited in Cartridge board.
*Pins 89 and 92 are shorted.
[[Category:Chips]]
[[Category:Chips]]

Revision as of 02:22, 3 June 2018

Package QFP180
Manufacturer
First use 1999 ?
Used on CHAFIO...
File:Brd cmcnoref.jpg
"CMC50"

Late SNK custom chip used for protection, bankswitching and latching on CHAFIO CHA boards.

Descrambling/decryption infos can be found in [MAME:prot_cmc.c]

Versions

This chip is a TC190G series Toshiba ASIC developed between 1990 and 1994.

The datasheet apparently can't be found anymore for any of the known types:

  • TC190G06CF7008
  • TC190G06CF7042
  • TC190G06CF7050

(probably others...)

SNK merged the following designs into this chip:

  • NEO-ZMC
  • NEO-273
  • PRO-CT0
  • New scrambling system that interlaces M1 + (C* + S1) to decrypt all the graphics ROMs data in real time.

The first released NEO-MVS CHAFIO PCBs came out with the 042 version of NEO-CMC, on the following cartridges:

On this version only the S1 and C ROMs are encrypted and M1 remains unencrypted. Almost one year later, SNK decided to add one more layer, this time also encrypting M1. This new NEO-CMC chip had the 050 reference and was found in the following cartridges:

Until today, nobody has released a cloned chip on the underground market.

Fix handling

See fix bankswitching.

Encryption

Todo.

Pinout

OpenOffice Draw file: File:Neocmc 7050 7042.odg

Signals:

  • C_e_D[0..15]: C odd data bus
  • C_o_D[0..15]: C even data bus
  • CX A[0..21]: C1~8 address bus
  • Pins 87,88 contains a RC circuit clock driver like in a 8085 with X1 and X2 pinouts
  • Pins 89 and 92 are shorted.