Bluetooth

Bluetooth

BlueTooth and Wifi channels

The PS3 contains two wireless technologies, Wi-Fi 802.11b/g and Bluetooth 2.0. It is not possible for both to be used at the same time, so the PS3 alternates between Wi-Fi and Bluetooth communication at a very fast frequency using time division multiplexing (note, see:Marvell-WiFi-Bluetooth-Coexistence.pdf). Both wireless capabilities are powered by the Marvell 88W8580 chip. In SKU Models CECHL and later, this wireless module updated to Marvell 88W8780 chip and became part of the motherboard (no longer on a separate daughterboard).

Hardware

IEEE 802.11b/g wireless network and BlueTooth 2.0 EDR controller chip: Marvell 88W8580 / Marvell 88W8780. See: Wifi

The Bluetooth in the PS3 supports a maximum of eight devices concurrently. With the PS3 console using up one master slot, it leaves seven empty slots for connecting with Bluetooth devices (like Sixaxis and Dualshock3 controllers). The Bluetooth is version 2.0 + EDR (Enhanced Data Rate), supporting a maximum of 2.1 megabits per second data transfer rate. The Bluetooth controller contains 1MB of NOR flash memory using a Spansion chip and another 1MB of NOR flash memory using a SST chip.

Type	Size	Speed	Voltage	Packaging	Manufacturer	Serialnumber	Description
ARMv5TE-compliant	?	50MHz	?3.3V?	256-ball BGA	Marvell	88W8580-BAN1	PS3 Wi-Fi/BT controller chip
ARMv5TE-compliant	?8kbit EEPROM?	?50MHz?	?3.3V?	?256-ball BGA?	Marvell	88W8780-BIE2	PS3 Slim Wi-Fi/BT controller chip
NOR Flash	1MB	-	3.3V	-	Spansion	S99AL008D002	PS3 Bluetooth flash chip
NOR Flash	1MB	70ns	3V	-	SST	SST39VF800A-70-4I-M1QE	PS3 Bluetooth flash chip

Sony CXN1500-3CAL 649T04S (BT driver subboard on CWI-001)

Bluetooth subboard (as seen on CWI-001 / 1-871-870-21 for CECHA, CECHB, CECHC) with SCEI & CSR D3261GG (Bluetooth controller) and Spansion S99AL008D002 (NOR Flash)

as seen on CWI-001 / 1-871-870-21 for CECHA, CECHB, CECHC

Spansion S99AL008D002 0630DBA H (NOR Flash 8Mbit 3.3V)

package: BGA48

SCEI & CSR D3261GG (BlueCore4-ROM - Single Chip Bluetooth Solution, V2.0+ EDR System)

package: BGA132

Sony CXN1502-3AAL 752D34S (BT driver subboard on UWB-001)

as seen on UWB-001 / 1-875-939-21 for CECHK

? please add (if possible with pictures of inside the metal casing)

Firmware

Bluetooth Firmware is maintained in the firmware file and can be unpacked with:

 untar update_files.tar > unpkg BLUETOOTH_FIRMWARE.pkg > untar content ; info0 ; info1

Headers of resulting files (see table below) contains strings of .dfu and signed dfu

Known Retail bluetooth update packages

d/l: BLUETOOTH_FIRMWARE.pkgs 1.10-4.00.rar (2.97 MB)

These are inside full Retail/CEX and Debug/DEX firmwares inside the BLUETOOTH_FIRMWARE.pkg:

DFU inside pkg	1.00-1.02	1.10-2.60	2.70-2.80	3.00-3.01	3.10-3.15	3.20-3.21	3.30-4.00	Notes
RC29_firmware_footer.dfu	No	Yes	Yes	Yes	Yes	Yes	Yes
usb8780-3.0.58.0-A1-A2.dfu	No	No	Yes	No	No	No	No
usb8780-4.0.5-A1-A2.dfu	No	No	No	Yes	No	No	No
usb8780-4.0.13-A1-A2.dfu	No	No	No	No	Yes	Yes	No
usb8781-20.0.3.0.dfu	No	No	No	No	Yes	No	No
usb8781-20.0.9.0.dfu	No	No	No	No	No	Yes	No
usb8780-5.0.1-A1-A2.dfu	No	No	No	No	No	No	Yes
usb8781-20.0.12.0.dfu	No	No	No	No	No	No	Yes

This means from Bluetooth perspective notable firmware changes where made at 1.10, 2.70, 3.00, 3.10, 3.20 and 3.30.

Examples

1.10 - 2.60

BLUETOOTH_FIRMWARE.rar (215.67 KB)

Header:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 53 52 2D 64 66 75 32 02 00 A4 EC 06 00 C8 03  CSR-dfu2..¤ì..È.
00000010  73 69 67 6E 65 64 20 64 66 75 20 20 20 20 20 20  signed dfu      
00000020  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                  
00000030  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                  
00000040  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                  
00000050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00  ................
00000070  AA 3C 00 00 00 00 00 00 A8 E7 06 00 00 00 00 00  ª<......¨ç......
00000080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Tail:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0006EC50  49 26 82 B6 33 7A C9 F2 5D 36 79 F1 72 53 3D 67  I&‚¶3zÉò]6yñrS=g
0006EC60  58 66 29 F0 87 D5 2A 15 0C D6 26 AD 01 C7 1E 5A  Xf)ð‡Õ*..Ö&­.Ç.Z
0006EC70  1B 90 A3 4A 5E 87 31 83 B6 22 BA B9 32 F6 D9 E4  ..£J^‡1ƒ¶"º¹2öÙä
0006EC80  5E 39 3A D4 CA 4B 27 BE 13 B5 AB 5B B8 F9 7E 13  ^9:ÔÊK'¾.µ«[¸ù~.
0006EC90  93 7C C7 37 22 F3 54 4C 84 2B 29 72 8B EF FF AB  “|Ç7"óTL„+)r‹ïÿ«
0006ECA0  FE C1 CE 03 08 36 67 02 4C 05 00 01 55 46 44 10  þÁÎ..6g.L...UFD.
0006ECB0  1C 85 12 CB 56 45 52 53 49 4F 4E 3D 30 45 31 38  .….ËVERSION=0E18

2.70 - 2.80

RC29_firmware_footer.dfu
usb8780-3.0.58.0-A1-A2.dfu

3.00 - 3.01

RC29_firmware_footer.dfu
usb8780-4.0.5-A1-A2.dfu

3.10 - 3.15

RC29_firmware_footer.dfu
usb8780-4.0.13-A1-A2.dfu
usb8781-20.0.3.0.dfu

3.20 - 3.21

RC29_firmware_footer.dfu
usb8780-4.0.13-A1-A2.dfu
usb8781-20.0.9.0.dfu

3.30 - 4.00

RC29_firmware_footer.dfu
usb8780-5.0.1-A1-A2.dfu
usb8781-20.0.12.0.dfu