HomeEngines › DSG DQ250

DSG DQ250

VAG DSG DQ250 (02E) — Temic/Continental wet-clutch 6-speed dual-clutch transmission control unit (mechatronic TCU). Transverse PQ35/MQB platforms (VW/Audi/Skoda/SEAT). Generations: CXX (MK5-era), EXX/FXX (MK6-era, pre-MQB) and MQB (0D9300xxx). Tuned parameters = clutch input-torque limits, clutch/clamping + line (supply) pressure, launch, shift schedule/speed, rev + speed limiters. (DQ250 = WET-cl

Reference - updated 4 August 2026

The ECU hardware

MQB generation (0D9300xxx) = Temic/Continental mechatronic on an Infineon TriCore TC1766 — VERIFIED (TheFlashBold/DQ250-MQB-Bench-Flash): ~1.5 MB internal PFlash + PSPR scratchpad RAM + 2x16 KB internal DFlash @ 0xAFE00000 / 0xAFE10000. CORRECTION: the MQB TC1766 mechatronic ALSO carries an EXTERNAL ~8 KB SPI EEPROM (on the SSC0/SPI peripheral, application mirror ~0xC00) holding adaptation + immo/component-protection data — an external EEPROM is NOT a pre-MQB-only trait, as the original draft implied. Pre-MQB CXX/EXX/FXX generations use an earlier Temic microcontroller (commonly cited as Freescale/Motorola-class — UNVERIFIED, varies by generation) with a separate 95-series SPI EEPROM (adaptation/immo); software and layout differ by generation even on the same gearbox. Part-number families: 02E300xxx (pre-MQB, e.g. 02E300012/014/043) and 0D9300xxx (MQB).

Fuelling and load sensing

N/A — this is the TRANSMISSION controller, not the engine ECU. The DQ250 sits behind both petrol and diesel engines (commonly EA888 2.0 TSI / 2.0 TDI, up to its ~350 Nm class). Critical: the TCU tune must be co-developed WITH the engine ECU tune — input torque arrives over CAN from the ECM, and the TCU sends torque-reduction requests back to the ECM (torque-monitor lockstep). Engine-domain safety limits (knock, EGT, rail pressure, DPF) live in the ENGINE calibration, not in this file.

How this ECU is read and flashed

MQB (TC1766): (1) OBD via UDS — the normal tuning route with Kess/KTAG, Autotuner, Alientech, HP Tuners, PCMflash (VAG DSG module — VERIFY the current module number; the draft's 'Module 58' is unconfirmed), and the open-source bri3d/VW_Flash. Payload = LZSS-compressed + 256-byte rolling-offset substitution cipher (plaintext also accepted); a RAM flash-driver CRC32 challenge is run; ASW/CAL JAMCRC checksums must be corrected (tools auto-correct). (2) BENCH over CAN (TheFlashBold/DQ250-MQB-Bench-Flash; SocketCAN on a Raspberry Pi or CAN adapter, no OEM diag software) — hold the TCU in SBOOT with repeated requests on CAN ID 0x640 (responses on 0x641), then advance the internal auth phases by FORGING the RSA-1024 signature via SBOOT's relaxed PKCS#1 v1.5 verification (a Bleichenbacher-style low-exponent signature forgery; exponent e=3 is typical of such forgeries but is NOT explicitly documented). Then upload a flash-manager to PSPR RAM (0xD4000000) and erase/write/verify PFlash / CAL / ASW plus internal DFlash and the external SPI EEPROM. IMPORTANT ATTRIBUTION FIX: this RSA forge is the DQ250 (TheFlashBold) work — it is NOT bri3d's SBOOT research. it explicitly does NOT use a Bleichenbacher/RSA attack. bri3d's DSG contribution is VW_Flash (the OBD/UDS side above). (3) BOOT/service mode — for repair: read/write the internal micro + external EEPROM. Pre-MQB CXX/EXX/FXX: OBD + bench/boot; a separate 95-series external SPI EEPROM holds adaptation + immo/component-protection. IMMO/CP note: cloning or swapping a mechatronic requires copying that EEPROM (adaptation + immo/CP) to the donor; component protection is enforced on the vehicle/gateway side. Always RESET clutch adaptations after any write (EcuTek/ProECU-style DSG menu or VCDS basic settings) and relearn at correct oil temp.

Engine codes in this family

Staging - what each stage really gives

Safety limits

Every car using this platform (1)

Stock power and typical remap figures per car. Stage results assume a healthy engine on good fuel.

CarEngineEngine codeStockStage 1Flash access
Volkswagen Golf GTI / R — DSG TCU (DQ250, 6-spd wet)
mk6 2009-2017
n/a — dual-clutch transmission control unit DQ250 / 02E mechatronicn/a (torque handling) hpTCU flash: raise clutch-clamp pressureOBD read/write on most DQ250 mechatronics; some later units

How confident is this?

HIGH / web-verified against primary sources (bri3d/VW_Flash docs/dsg.md; TheFlashBold/DQ250-MQB-Bench-Flash; TheFlashBold/tune-editor): MQB DQ250 = Infineon TriCore TC1766; block layout DRIVER(RAM)/CAL@0xA0020000(0x20000)/ASW@0xA0040000(0x130000) in a ~1.5 MB image with internal DFlash 2x16 KB @0xAFE00000/0xAFE10000, PSPR RAM @0xD4000000, PLUS an external ~8 KB SPI EEPROM; integrity = JAMCRC (inverse CRC32) in the last 4 bytes of ASW and CAL, checked by SBOOT every boot; OVER-UDS payload = LZSS + 256-byte rolling-offset substitution cipher with a RAM flash-driver CRC32 challenge (driver @0xD4000000, magic 00 00 2E A2, entry ptr @+0x4); BENCH flash holds SBOOT via CAN 0x640/0x641 and forges an RSA-1024 signature through relaxed PKCS#1 v1.5 verification; TCM<->ECM torque-monitor lockstep and the 'raise TCM limits or it caps the engine' behaviour; reference points ~350 stock / ~520 development / 655 software ceiling; and the map CATEGORIES. (b) the external SPI EEPROM exists on MQB TC1766 too, not only pre-MQB. (c) 'EcuTek ProECU DQ250' and 'PCMflash Module 58' are UNVERIFIED/possibly wrong and were demoted. MEDIUM / thinner: 'e=3' exponent for the RSA forge (only 'relaxed PKCS#1 v1.5

VAGPULSE reads, backs up, tunes and flashes these ECUs over OBD from a Windows laptop - diagnostics, fault codes, coding and Stage 1-3 maps in one app, with your original file saved first and checksums corrected automatically.

See VAGPULSE
All vehicles Guides VAGPULSE home