Talk:Telluride 9A406 (iPhone4,1) - Revision history

IAdam1n: IAdam1n moved page Talk:Telluride 9A406 (iPhone 4S) to Talk:Telluride 9A406 (iPhone4,1): New format.

2014-01-22T16:32:45Z

IAdam1n moved page Talk:Telluride 9A406 (iPhone 4S) to Talk:Telluride 9A406 (iPhone4,1): New format.

IAdam1n at 11:46, 23 August 2013

2013-08-23T11:46:26Z

IAdam1n at 11:36, 23 August 2013

2013-08-23T11:36:02Z

Http: /* Key location */ link update

2013-08-04T08:15:03Z

‎Key location: link update

5urd: Still not understood?

2013-02-04T19:01:10Z

Still not understood?

IAdam1n: /* Key location */

2013-02-02T18:51:24Z

‎Key location

IAdam1n at 23:57, 30 January 2013

2013-01-30T23:57:29Z

Http: still not understood?

2013-01-30T23:53:14Z

still not understood?

IAdam1n: /* Key location */

2013-01-29T20:56:42Z

‎Key location

Dialexio: /* Key location */

2013-01-29T20:43:31Z

‎Key location

@@ Line 9: / Line 9: @@
 ::::::: Then how do I ask it for the GID key? --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 23:57, 30 January 2013 (UTC)
 ::::::::You '''can't''. It is embedded ''directly'' into the device. There is no way to get it without a direct analysis of the die of the chip, or performing a side-channel attack on the chip while it encrypts/decrypts data. The encryption is done by the processor with a [[GID Key|key]] ''embedded into'' the processor. You can, however, ask the processor to encrypt and decrypt stuff for you. That is done with the [[MobileDevice Library]] and [[xpwn]]. If you want help, please ask one of the people who post keys here, not us. Thanks. --[[User:5urd|5urd]] ([[User talk:5urd|talk]]) 19:01, 4 February 2013 (UTC)
-::::::::They are not just in the IPSW. You have to decrypt a ramdisk then use [[GenPass]] to get the rootfs key. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 11:36, 23 August 2013 (UTC)
+::::::::They are not just in the IPSW. You have to decrypt a ramdisk then use [[GenPass]] to get the rootfs key. As the ramdisk's in this IPSW were not encrypted, just use [[GenPass]] with the normal ramdisk. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 11:36, 23 August 2013 (UTC)

@@ Line 3: / Line 3: @@
 :The VFDecrypt key is in the ramdisk. You could use [[GenPass]] to get it. --[[User:Dialexio|<span style="color:#C20; font-weight:normal;">Dialexio</span>]] 22:12, 15 December 2011 (MST)
 :I am sure they were referring to the fact that, because the ramdisks are unencrypted, they were able to be "extracted" without the device. --[[User:5urd|5urd]] 17:05, 16 December 2011 (MST)
-:: continuing from this, where do you get the ramdisk key if it is encrypted? --[[User:Adaminsull|adaminsull]] ([[User talk:Adaminsull|talk]]) 18:43, 29 January 2013 (UTC)
+:: continuing from this, where do you get the ramdisk key if it is encrypted? --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 18:43, 29 January 2013 (UTC)
 :::The ramdisk's [[KBAG]] needs to be decrypted with the device's GID key. There is no way to extract the GID key; you need a bootrom exploit (an iBoot exploit may suffice?) to use the device's AES engine. Once you have the IV and key, you can use xpwntool to decrypt the ramdisk. --[[User:Dialexio|<span style="color:#BA0000; font-weight:normal;">Dialexio</span>]] ([[User talk:Dialexio|<span style="color:#BA0000; font-weight:normal;">talk</span>]]) 20:43, 29 January 2013 (UTC)
-::::: How would I get the GID key on an A4 device? --[[User:Adaminsull|adaminsull]] ([[User talk:Adaminsull|talk]]) 20:56, 29 January 2013 (UTC)
+::::: How would I get the GID key on an A4 device? --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 20:56, 29 January 2013 (UTC)
 :::::: You can't. GID key is only in hardware and has never been extracted. You can only ask the hardware to use the GID key to decrypt something for you. --[[User:Http|http]] ([[User talk:Http|talk]]) 23:53, 30 January 2013 (UTC)
-::::::: Then how do I ask it for the GID key? --[[User:Adaminsull|adaminsull]] ([[User talk:Adaminsull|talk]]) 23:57, 30 January 2013 (UTC)
+::::::: Then how do I ask it for the GID key? --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 23:57, 30 January 2013 (UTC)
 ::::::::You '''can't''. It is embedded ''directly'' into the device. There is no way to get it without a direct analysis of the die of the chip, or performing a side-channel attack on the chip while it encrypts/decrypts data. The encryption is done by the processor with a [[GID Key|key]] ''embedded into'' the processor. You can, however, ask the processor to encrypt and decrypt stuff for you. That is done with the [[MobileDevice Library]] and [[xpwn]]. If you want help, please ask one of the people who post keys here, not us. Thanks. --[[User:5urd|5urd]] ([[User talk:5urd|talk]]) 19:01, 4 February 2013 (UTC)

@@ Line 8: / Line 8: @@
 :::::: You can't. GID key is only in hardware and has never been extracted. You can only ask the hardware to use the GID key to decrypt something for you. --[[User:Http|http]] ([[User talk:Http|talk]]) 23:53, 30 January 2013 (UTC)
 ::::::: Then how do I ask it for the GID key? --[[User:Adaminsull|adaminsull]] ([[User talk:Adaminsull|talk]]) 23:57, 30 January 2013 (UTC)
-::::::::You '''can't''. It is embedded ''directly'' into the device. There is no way to get it without a direct analysis of the die of the chip, or performing a side-channel attack on the chip while it encrypts/decrypts data. The encryption is done by the processor with a [[GID-key|key]] ''embedded into'' the processor. You can, however, ask the processor to encrypt and decrypt stuff for you. That is done with the [[MobileDevice Library]] and [[xpwn]]. If you want help, please ask one of the people who post keys here, not us. Thanks. --[[User:5urd|5urd]] ([[User talk:5urd|talk]]) 19:01, 4 February 2013 (UTC)
+::::::::You '''can't''. It is embedded ''directly'' into the device. There is no way to get it without a direct analysis of the die of the chip, or performing a side-channel attack on the chip while it encrypts/decrypts data. The encryption is done by the processor with a [[GID Key|key]] ''embedded into'' the processor. You can, however, ask the processor to encrypt and decrypt stuff for you. That is done with the [[MobileDevice Library]] and [[xpwn]]. If you want help, please ask one of the people who post keys here, not us. Thanks. --[[User:5urd|5urd]] ([[User talk:5urd|talk]]) 19:01, 4 February 2013 (UTC)

← Older revision		Revision as of 19:01, 4 February 2013
Line 8:		Line 8:
	:::::: You can't. GID key is only in hardware and has never been extracted. You can only ask the hardware to use the GID key to decrypt something for you. --[[User:Http\|http]] ([[User talk:Http\|talk]]) 23:53, 30 January 2013 (UTC)		:::::: You can't. GID key is only in hardware and has never been extracted. You can only ask the hardware to use the GID key to decrypt something for you. --[[User:Http\|http]] ([[User talk:Http\|talk]]) 23:53, 30 January 2013 (UTC)
	::::::: Then how do I ask it for the GID key? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 23:57, 30 January 2013 (UTC)		::::::: Then how do I ask it for the GID key? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 23:57, 30 January 2013 (UTC)
		+	::::::::You '''can't''. It is embedded ''directly'' into the device. There is no way to get it without a direct analysis of the die of the chip, or performing a side-channel attack on the chip while it encrypts/decrypts data. The encryption is done by the processor with a [[GID-key\|key]] ''embedded into'' the processor. You can, however, ask the processor to encrypt and decrypt stuff for you. That is done with the [[MobileDevice Library]] and [[xpwn]]. If you want help, please ask one of the people who post keys here, not us. Thanks. --[[User:5urd\|5urd]] ([[User talk:5urd\|talk]]) 19:01, 4 February 2013 (UTC)

@@ Line 7: / Line 7: @@
 ::::: How would I get the GID key on an A4 device? --[[User:Adaminsull|adaminsull]] ([[User talk:Adaminsull|talk]]) 20:56, 29 January 2013 (UTC)
 :::::: You can't. GID key is only in hardware and has never been extracted. You can only ask the hardware to use the GID key to decrypt something for you. --[[User:Http|http]] ([[User talk:Http|talk]]) 23:53, 30 January 2013 (UTC)
-::::::: Then how do I do that? --[[User:Adaminsull|adaminsull]] ([[User talk:Adaminsull|talk]]) 23:57, 30 January 2013 (UTC)
+::::::: Then how do I ask it for the GID key? --[[User:Adaminsull|adaminsull]] ([[User talk:Adaminsull|talk]]) 23:57, 30 January 2013 (UTC)

← Older revision	Revision as of 16:32, 22 January 2014
(No difference)

← Older revision		Revision as of 23:57, 30 January 2013
Line 7:		Line 7:
	::::: How would I get the GID key on an A4 device? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 20:56, 29 January 2013 (UTC)		::::: How would I get the GID key on an A4 device? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 20:56, 29 January 2013 (UTC)
	:::::: You can't. GID key is only in hardware and has never been extracted. You can only ask the hardware to use the GID key to decrypt something for you. --[[User:Http\|http]] ([[User talk:Http\|talk]]) 23:53, 30 January 2013 (UTC)		:::::: You can't. GID key is only in hardware and has never been extracted. You can only ask the hardware to use the GID key to decrypt something for you. --[[User:Http\|http]] ([[User talk:Http\|talk]]) 23:53, 30 January 2013 (UTC)
		+	::::::: Then how do I do that? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 23:57, 30 January 2013 (UTC)

← Older revision		Revision as of 23:53, 30 January 2013
Line 6:		Line 6:
	:::The ramdisk's [[KBAG]] needs to be decrypted with the device's GID key. There is no way to extract the GID key; you need a bootrom exploit (an iBoot exploit may suffice?) to use the device's AES engine. Once you have the IV and key, you can use xpwntool to decrypt the ramdisk. --[[User:Dialexio\|<span style="color:#BA0000; font-weight:normal;">Dialexio</span>]] ([[User talk:Dialexio\|<span style="color:#BA0000; font-weight:normal;">talk</span>]]) 20:43, 29 January 2013 (UTC)		:::The ramdisk's [[KBAG]] needs to be decrypted with the device's GID key. There is no way to extract the GID key; you need a bootrom exploit (an iBoot exploit may suffice?) to use the device's AES engine. Once you have the IV and key, you can use xpwntool to decrypt the ramdisk. --[[User:Dialexio\|<span style="color:#BA0000; font-weight:normal;">Dialexio</span>]] ([[User talk:Dialexio\|<span style="color:#BA0000; font-weight:normal;">talk</span>]]) 20:43, 29 January 2013 (UTC)
	::::: How would I get the GID key on an A4 device? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 20:56, 29 January 2013 (UTC)		::::: How would I get the GID key on an A4 device? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 20:56, 29 January 2013 (UTC)
		+	:::::: You can't. GID key is only in hardware and has never been extracted. You can only ask the hardware to use the GID key to decrypt something for you. --[[User:Http\|http]] ([[User talk:Http\|talk]]) 23:53, 30 January 2013 (UTC)

← Older revision		Revision as of 20:56, 29 January 2013
Line 5:		Line 5:
	:: continuing from this, where do you get the ramdisk key if it is encrypted? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 18:43, 29 January 2013 (UTC)		:: continuing from this, where do you get the ramdisk key if it is encrypted? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 18:43, 29 January 2013 (UTC)
	:::The ramdisk's [[KBAG]] needs to be decrypted with the device's GID key. There is no way to extract the GID key; you need a bootrom exploit (an iBoot exploit may suffice?) to use the device's AES engine. Once you have the IV and key, you can use xpwntool to decrypt the ramdisk. --[[User:Dialexio\|<span style="color:#BA0000; font-weight:normal;">Dialexio</span>]] ([[User talk:Dialexio\|<span style="color:#BA0000; font-weight:normal;">talk</span>]]) 20:43, 29 January 2013 (UTC)		:::The ramdisk's [[KBAG]] needs to be decrypted with the device's GID key. There is no way to extract the GID key; you need a bootrom exploit (an iBoot exploit may suffice?) to use the device's AES engine. Once you have the IV and key, you can use xpwntool to decrypt the ramdisk. --[[User:Dialexio\|<span style="color:#BA0000; font-weight:normal;">Dialexio</span>]] ([[User talk:Dialexio\|<span style="color:#BA0000; font-weight:normal;">talk</span>]]) 20:43, 29 January 2013 (UTC)
		+	::::: How would I get the GID key on an A4 device? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 20:56, 29 January 2013 (UTC)

← Older revision		Revision as of 20:43, 29 January 2013
Line 4:		Line 4:
	:I am sure they were referring to the fact that, because the ramdisks are unencrypted, they were able to be "extracted" without the device. --[[User:5urd\|5urd]] 17:05, 16 December 2011 (MST)		:I am sure they were referring to the fact that, because the ramdisks are unencrypted, they were able to be "extracted" without the device. --[[User:5urd\|5urd]] 17:05, 16 December 2011 (MST)
	:: continuing from this, where do you get the ramdisk key if it is encrypted? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 18:43, 29 January 2013 (UTC)		:: continuing from this, where do you get the ramdisk key if it is encrypted? --[[User:Adaminsull\|adaminsull]] ([[User talk:Adaminsull\|talk]]) 18:43, 29 January 2013 (UTC)
		+	:::The ramdisk's [[KBAG]] needs to be decrypted with the device's GID key. There is no way to extract the GID key; you need a bootrom exploit (an iBoot exploit may suffice?) to use the device's AES engine. Once you have the IV and key, you can use xpwntool to decrypt the ramdisk. --[[User:Dialexio\|<span style="color:#BA0000; font-weight:normal;">Dialexio</span>]] ([[User talk:Dialexio\|<span style="color:#BA0000; font-weight:normal;">talk</span>]]) 20:43, 29 January 2013 (UTC)