AES Keys - Revision history

Siguza: Recent key decryption & 0x8A3 key

2020-11-28T05:11:40Z

Recent key decryption & 0x8A3 key

AS967 at 00:23, 9 August 2018

2018-08-09T00:23:48Z

IAdam1n: Updating.

2015-10-08T08:00:24Z

Updating.

IAdam1n: /* Key 0x837 */ "iOS 1" and "iOS 2" do not exist.

2015-06-13T18:30:20Z

‎Key 0x837: "iOS 1" and "iOS 2" do not exist.

IAdam1n: /* Derived keys */

2014-02-10T08:08:46Z

‎Derived keys

5urd: link text fix

2014-01-04T23:41:13Z

link text fix

M2m: /* Running The Engine */

2014-01-04T08:38:40Z

‎Running The Engine

IAdam1n: Decryption Category.

2013-08-27T10:56:07Z

Decryption Category.

Http: link update

2013-08-04T08:06:41Z

link update

Http: /* Key 0x837 */ link update

2013-08-04T08:05:59Z

‎Key 0x837: link update

@@ Line 7: / Line 7: @@
 * Use the crypto bundle provided in [[XPwn]] to utilize it via userland. This method requires a kernel patch.
 * Use [[Greenpois0n (toolkit)|Greenpois0n]] console.
-If you want to decrypt [[IMG3 File Format|IMG3]] files you need to use this. The [[GID Key]] currently has not been extracted from the phone, so the only way to use it is on the phone itself.
+If you want to decrypt [[IMG3 File Format|IMG3]] or [[IMG4 File Format|IMG4]] files you need to use this. The [[GID Key]] has so far not been extracted from any device, so the only way to use it is by going through the engine itself.
 See [[Obtaining IMG3 Keys#Method 2|Obtaining IMG3 Keys]] for an [[iBoot (Bootloader)|iBoot]] patch.
@@ Line 18: / Line 20: @@
  __text:807E3030                 DCD 0x89B,0x7D0,0x67993E18,0x543CB06B,0xF568A46F,0x49BD0C1C
  __text:807E3048                 DCD 0x89A,0x7D0,0x335B1FDB,0x1C5F6C60,0x66AA3419,0x61069C58
 === Key 0x835 ===
 Generated by encrypting 0x01010101010101010101010101010101 with the [[UID-key]].<br />
 Used for data protection.
 === Key 0x836 ===
 Generated by encrypting 0x00E5A0E6526FAE66C5C1C6D4F16D6180 with the [[UID-key]].<br />
 This is computed by the kernel during a restore, but is zeroed out during a normal boot. It is also computed by the Secure Bootloader, and its only known use is to decrypt LLB in NOR. Like 0x835, it is different for each device.
 === Key 0x837 ===
 Generated by encrypting 0x345A2D6C5050D058780DA431F0710E15 with the [[S5L8900]] [[GID Key]], resulting in 0x188458A6D15034DFE386F23B61D43774.<br />
@@ Line 31: / Line 36: @@
 Generated by encrypting 0x8C8318A27D7F030717D2B8FC5514F8E1 with the [[UID-key]].<br />
 Another UID-AES-key-based key, it is used to encrypt everything but LLB in the NOR (iBoot, DeviceTree, pictures).
 === Key 0x899 ===
 Generated by encrypting 0xD1E8FCB53937BF8DEFC74CD1D0F1D4B0 with the [[UID-key]]. Usage unknown.
 === Key 0x89A ===
 Used on A4 devices. Generated by encrypting 0xDB1F5B33606C5F1C1934AA66589C0661 with the [[UID-key]], getting a device-specific key.<br />
 It is used to encrypt the [[SHSH]] blobs on the device.
 === Key 0x89B ===
 Generated by encrypting 0x183E99676BB03C546FA468F51C0CBD49 with the [[UID-key]]. It is used to encrypt the data partition key.
 == Using [[Greenpois0n (toolkit)|greenpois0n]] ==

@@ Line 3: / Line 3: @@
 == Running The Engine ==
 Currently, there are several ways to run the hardware AES engine:
-* Patch [[iBoot (Bootloader)|iBoot]] to jump to <code>aes_decrypt</code>.
+* Patch [[iBoot (Bootloader)|iBoot]] to jump to <code>aes_crypto_cmd</code>, presuming the AES keys are still enabled.
 * Use [http://github.com/planetbeing/iphonelinux/tree/master OpenIBoot].
 * Use the crypto bundle provided in [[XPwn]] to utilize it via userland. This method requires a kernel patch.

@@ Line 13: / Line 13: @@
 == Derived keys ==
-Some derived keys are computed by the IOAESAccelerator kernel service at boot. These keys are generated by encrypting static values either with the UID key (0x7D0 identifier) or the GID key (0x3E8 identifier). The values defined in the [[n90ap|iPhone 4 (iPhone3,1)]] 5.0 kernel are :
+Some derived keys are computed by the IOAESAccelerator kernel service at boot. These keys are generated by encrypting static values either with the UID key (0x7D0 identifier) or the GID key (0x3E8 identifier). The values defined in the [[N90AP|iPhone 4 (iPhone3,1)]] 5.0 kernel are :
  __text:807E3000 keys_to_compute DCD 0x835,0x7D0,0x01010101,0x01010101,0x01010101,0x01010101
  __text:807E3018                 DCD 0x899,0x7D0,0xB5FCE8D1,0x8DBF3739,0xD14CC7EF,0xB0D4F1D0
@@ Line 26: / Line 26: @@
 === Key 0x837 ===
 Generated by encrypting 0x345A2D6C5050D058780DA431F0710E15 with the [[S5L8900]] [[GID Key]], resulting in 0x188458A6D15034DFE386F23B61D43774.<br />
-It is used as the encryption key for [[S5L File Formats#IMG2|IMG2 files]]. With the introduction of [[IMG3 File Format|IMG3]] in iPhone OS 2.0, [[KBAG]]s are now used instead of the 0x837 key. Because iPhone OS versions 1.x were used only on the [[M68ap|iPhone]] and [[N45ap|iPod touch]] (both use the [[S5L8900]]) the encrypted values for other processors don't matter.
+It is used as the encryption key for [[S5L File Formats#IMG2|IMG2 files]]. With the introduction of [[IMG3 File Format|IMG3]] in iPhone OS 2.0, [[KBAG]]s are now used instead of the 0x837 key. Because iPhone OS versions 1.x were used only on the [[M68AP|iPhone]] and [[N45AP|iPod touch]] (both use the [[S5L8900]]) the encrypted values for other processors don't matter.
 === Key 0x838 ===

@@ Line 26: / Line 26: @@
 === Key 0x837 ===
 Generated by encrypting 0x345A2D6C5050D058780DA431F0710E15 with the [[S5L8900]] [[GID Key]], resulting in 0x188458A6D15034DFE386F23B61D43774.<br />
-It is used as the encryption key for [[S5L File Formats#IMG2|IMG2 files]]. With the introduction of [[IMG3 File Format|IMG3]] in iOS 2.0, [[KBAG]]s are now used instead of the 0x837 key. Because iOS versions 1.x were used only on the [[M68ap|iPhone]] and [[N45ap|iPod touch]] (both use the [[S5L8900]]) the encrypted values for other processors don't matter.
+It is used as the encryption key for [[S5L File Formats#IMG2|IMG2 files]]. With the introduction of [[IMG3 File Format|IMG3]] in iPhone OS 2.0, [[KBAG]]s are now used instead of the 0x837 key. Because iPhone OS versions 1.x were used only on the [[M68ap|iPhone]] and [[N45ap|iPod touch]] (both use the [[S5L8900]]) the encrypted values for other processors don't matter.
 === Key 0x838 ===

@@ Line 13: / Line 13: @@
 == Derived keys ==
-Some derived keys are computed by the IOAESAccelerator kernel service at boot. These keys are generated by encrypting static values either with the UID key (0x7D0 identifier) or the GID key (0x3E8 identifier). The values defined in the iPhone 4 GSM 5.0 kernel are :
+Some derived keys are computed by the IOAESAccelerator kernel service at boot. These keys are generated by encrypting static values either with the UID key (0x7D0 identifier) or the GID key (0x3E8 identifier). The values defined in the [[n90ap|iPhone 4 (iPhone3,1)]] 5.0 kernel are :
  __text:807E3000 keys_to_compute DCD 0x835,0x7D0,0x01010101,0x01010101,0x01010101,0x01010101
  __text:807E3018                 DCD 0x899,0x7D0,0xB5FCE8D1,0x8DBF3739,0xD14CC7EF,0xB0D4F1D0

@@ Line 10: / Line 10: @@
 If you want to decrypt [[IMG3 File Format|IMG3]] files you need to use this. The [[GID Key]] currently has not been extracted from the phone, so the only way to use it is on the phone itself.
-See [[Grabbing IMG3 Keys]] for an [[iBoot (Bootloader)|iBoot]] patch.
+See [[Obtaining_IMG3_Keys]] (Method 2) for an [[iBoot (Bootloader)|iBoot]] patch.
 == Derived keys ==

← Older revision		Revision as of 10:56, 27 August 2013
Line 48:		Line 48:
	* [http://wikee.iphwn.org/s5l8900:encryption_keys Dev Team wiki]		* [http://wikee.iphwn.org/s5l8900:encryption_keys Dev Team wiki]
	* [http://conference.hitb.org/hitbsecconf2011ams/materials/D2T2%20-%20Jean-Baptiste%20Be%cc%81drune%20&%20Jean%20Sigwald%20-%20iPhone%20Data%20Protection%20in%20Depth.pdf Jean-Baptiste Bédrune & Jean Sigwald - iPhone Data Protection in Depth (PDF from HITB 2011)]		* [http://conference.hitb.org/hitbsecconf2011ams/materials/D2T2%20-%20Jean-Baptiste%20Be%cc%81drune%20&%20Jean%20Sigwald%20-%20iPhone%20Data%20Protection%20in%20Depth.pdf Jean-Baptiste Bédrune & Jean Sigwald - iPhone Data Protection in Depth (PDF from HITB 2011)]
		+
		+	[[Category:Decryption]]

← Older revision		Revision as of 08:06, 4 August 2013
Line 1:		Line 1:
−	The [[wikipedia:System-on-a-chip\|SoC]] in each device have an [[wikipedia:Advanced Encryption Standard\|AES]] coprocessor with the [[GID~~-key~~]] and [[UID-key]] built in.	+	The [[wikipedia:System-on-a-chip\|SoC]] in each device have an [[wikipedia:Advanced Encryption Standard\|AES]] coprocessor with the [[GID Key]] and [[UID-key]] built in.

	== Running The Engine ==		== Running The Engine ==