Recently, Canadian retro hardware enthusiast DiscoStarslayer spent four years successfully reverse-engineering and extracting the firmware from the CXP102064 MechaCon security chip inside the original PlayStation 2, solving one of the PS2's last remaining mysteries.
The MechaCon chip is primarily responsible for controlling the PS2's optical drive and flash memory mechanisms. It also plays a key role in Sony's game disc security system, supporting features such as Magic Gate memory card encryption and KELF executable file decryption. Since the PS2's launch, this chip had remained uncracked for 26 years.
DiscoStarslayer's cracking process was extremely hardcore. He first used chemical etching to remove the chip's packaging, exposing the internal silicon core, and then analyzed the chip's circuit structure using a microscope and optical scanning technology.
During the reverse-engineering process, an unexpected discovery revealed a vulnerability that allowed the chip's firmware to be extracted via software, ultimately enabling a complete data dump.
This breakthrough is significant for game and hardware preservation. Open-sourcing the MechaCon firmware will help improve the accuracy of PS2 emulators and facilitate homebrew software development, while also offering possibilities for replacing aging PS2 optical drives.
Furthermore, MechaCon was not exclusive to the PS2 console; contemporary arcade machines also used this chip for security authentication and encrypted game data execution, including Namco's System 246/256 and Konami's Python 1, both of which were based on modified PS2 hardware.
