Firmware Keys

From The iPhone Wiki
Revision as of 20:01, 6 June 2012 by Http (talk | contribs) (5.x: added 5.1.2)
Jump to: navigation, search

VFDecrypt Keys are the keys which can decrypt the files that come with the firmware. Apple uses a public-private key encryption to ensure the safety of their files. Over time Apple has changed the way to encrypt firmware files, thus the way to decrypt files as well as the way to get the VFDecrypt Keys has also.

IMG2 was the file format used prior to iOS 2.0. For iOS 1.1.x, IMG2 files were encrypted with Key 0x837.

IMG3 encrypted files contain encrypted versions of the VFDecrypt Keys as part of the KBAG (key bag). These can be decrypted with the GID-key. For jailbroken iDevices the VFDecrypt keys can be retrieved with the devices hardware AES engine. The VFDecrypt key for the root filesystem image of an iDevice (~500 MB to 800MB in the case of iOS 5) requires either a decrypted Restore Ramdisk or Update Ramdisk. Once you have a decrypted Restore or Update Ramdisk, GenPass can be used to gather the keys for the root filesystem. For the root filesystem there is one key per device model, with no IV. You can mount this once it has been decrypted using your program of choice. (For example, 7-zip on Windows (after extracting the DMG on Windows, extract the biggest file with 7-Zip)

Notes

The Update Ramdisk and Restore Ramdisks share the same IV and key per type of Application Processor. The current models are:

Application Processor iDevice
S5L8900 iPhone, iPhone 3G, iPod touch
S5L8720 iPhone, iPod touch 2G
S5L8920 iPhone 3GS
S5L8922 iPod touch 3G
S5L8930 (A4) iPad, iPhone 4, iPod touch 4G, Apple TV 2G
S5L8940 (A5) iPad 2, iPhone 4S
S5L8942 (revised A5) iPad 2 Wi-Fi R2, Apple TV 3G
S5L8945 (A5X) iPad 3

You can use img3decrypt[1] or xpwntool[2] to decrypt these as described in Ramdisk Decryption. Once done, mount or extract using the tool of your choice.

When posting a key page, please use the key template (IN THE CORRECT ORDER) and do NOT substitute it.

For the VFDecrypt Keys of each firmware please check the builds listed at the appropiate firmware version page.

Firmware versions

Final

Main article: Firmware

1.x

Date Build iPhone iPod touch 1G
? 1A420 1.0 Unavailable
? 1A543a 1.0.0
? 1C25 1.0.1
? 1C28 1.0.2
? 3A100a Unavailable 1.1
? 3A101a 1.1
? 3A109a 1.1.1 Unavailable
? 3A110a Unavailable 1.1.1
? 3B48b 1.1.2 1.1.2
? 4A93 1.1.3 1.1.3
? 4A102 1.1.4 1.1.4
? 4B1 Unavailable 1.1.5

2.x

Date Build iPhone iPhone 3G iPod touch 1G iPod touch 2G
? 5A345 Unavailable 2.0 Unavailable Unavailable
? 5A347 2.0 2.0 2.0
? 5B108 2.0.1 2.0.1 2.0.1
? 5C1 2.0.2 2.0.2 2.0.2
? 5F136 2.1 2.1 Unavailable
? 5F137 Unavailable 2.1
? 5F138 Unavailable 2.1.1
? 5G77 2.2 2.2 2.2 Unavailable
? 5G77a Unavailable 2.2
? 5H11 2.2.1 2.2.1 2.2.1 Unavailable
? 5H11a Unavailable 2.2.1

3.x

Date Build iPad iPhone iPhone 3G iPhone 3GS iPod touch 1G iPod touch 2G iPod touch 3G
? 7A341 Unavailable 3.0 3.0 3.0 3.0 3.0 Unavailable
? 7A400 3.0.1 3.0.1 3.0.1 Unavailable
? 7C144 3.1 3.1 3.1
? 7C145 Unavailable 3.1.1 3.1.1 3.1.1
? 7C146 Unavailable 3.1.1
? 7D11 3.1.2 3.1.2 3.1.2 3.1.2 3.1.2 3.1.2
? 7E18 3.1.3 3.1.3 3.1.3 3.1.3 3.1.3 3.1.3
? 7B367 3.2 Unavailable
? 7B405 3.2.1
? 7B500 3.2.2

4.x

Please note that for the Apple TV the firmware listed in this table is the one that your Apple TV reports. See also Apple TV Firmware Versions.

Date Build Apple TV 2G iPad iPad 2 (Wi-Fi) iPad 2 (GSM) iPad 2 (CDMA) iPhone 3G iPhone 3GS iPhone 4 (GSM) iPhone 4 (CDMA) iPod touch 2G iPod touch 3G iPod touch 4G
20100901 8M89 4.0 Unavailable
? 8A293 Unavailable Unavailable 4.0 4.0 4.0 Unavailable 4.0 4.0 Unavailable
? 8A306 4.0.1 4.0.1 4.0.1 Unavailable
? 8A400 4.0.2 4.0.2 4.0.2 Unavailable 4.0.2 4.0.2 Unavailable
? 8B117 4.1 4.1 4.1 4.1 4.1 4.1
? 8B118 Unavailable 4.1 Unavailable
? 8C148 4.2.1 Unavailable 4.2.1 Unavailable 4.2.1 Unavailable 4.2.1 4.2.1 4.2.1
? 8C148a Unavailable 4.2.1 Unavailable
20101122 8C150 4.1 Unavailable
20101214 8C154 4.1.1
? 8E128 Unavailable 4.2.5 Unavailable
? 8E200 4.2.6
? 8E303 4.2.7
? 8E401 4.2.8
? 8E501 4.2.9
? 8E600 4.2.10
? 8F190 Unavailable 4.3 Unavailable Unavailable 4.3 4.3 Unavailable 4.3 4.3
? 8F191 Unavailable 4.3 4.3 4.3 Unavailable Unavailable
20110311 8F191m 4.2 Unavailable
20110322 8F202 4.2.1
20110311 8F305 4.2.2
20110801 8F455 4.3
? 8G4 Unavailable 4.3.1 4.3.1 4.3.1 4.3.1 4.3.1 4.3.1 4.3.1 4.3.1
? 8H7 4.3.2 4.3.2 4.3.2 Unavailable 4.3.2 4.3.2 4.3.2 4.3.2
? 8H8 Unavailable 4.3.2 Unavailable Unavailable
? 8J2 Unavailable 4.3.3 4.3.3 4.3.3 4.3.3 4.3.3 4.3.3 4.3.3
? 8J3 4.3.3 Unavailable Unavailable Unavailable
? 8K2 4.3.4 4.3.4 4.3.4 4.3.4 4.3.4 4.3.4 4.3.4 4.3.4
? 8L1 4.3.5 4.3.5 4.3.5 4.3.5 4.3.5 4.3.5 4.3.5 4.3.5

5.x

Please note that for the Apple TV the firmware listed in this table is the one that your Apple TV reports. See also Apple TV Firmware Versions.

Date (YYYY/MM/DD) Build Apple TV 2G Apple TV 3G iPad iPad 2 (Wi-Fi) iPad 2 (GSM) iPad 2 (CDMA) iPad 2 R2 iPad 3 (Wi-Fi) iPad 3 (CDMA) iPad 3 (Global) iPhone 3GS iPhone 4 (GSM) iPhone 4 (CDMA) iPhone 4S iPod touch 3G iPod touch 4G
2011/10/12 9A334 Unavailable 5.0 5.0 5.0 5.0 Unavailable 5.0 5.0 5.0 5.0 5.0 5.0
2011/10/12 9A334v 4.4 Unavailable
2011/10/18 9A335a 4.4.1
2011/11/02 9A336a 4.4.2
2011/11/10 9A405 Unavailable 5.0.1 5.0.1 5.0.1 5.0.1 Unavailable 5.0.1 5.0.1 5.0.1 5.0.1 5.0.1 5.0.1
2011/11/17 9A405l 4.4.3 Unavailable
2011/12/15 9A406 Unavailable 5.0.1 Unavailable
2011/12/15 9A406a 4.4.4 Unavailable
2012/03/07 9B176 Unavailable 5.1 5.1 5.1 5.1 5.1 5.1 5.1 5.1 5.1 5.1 5.1 Unavailable 5.1 5.1
2012/03/07 9B179 Unavailable 5.1 Unavailable
2012/03/07 9B179b 5.0 5.0 Unavailable
2012/05/10 9B206 Unavailable 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1
2012/05/10 9B206f 5.0.1 5.0.1 Unavailable
2012/05/25 9B208 Unavailable 5.1.1 Unavailable
2012/06/05 9B830 5.1.2 5.1.2 Unavailable

Beta

Main article: Beta Firmware

1.x/2.x

Date Build iPhone iPhone 3G iPod touch
? 5A147p 1.2b1 Unavailable 1.2b1
? 5A225c 2.0b2 2.0b2
? 5A240d 2.0b3 2.0b3
? 5A258f 2.0b4 2.0b4
? 5A274d 2.0b5 2.0b5
? 5A292g 2.0b6P 2.0b6P
? 5A308 2.0b6F 2.0b6F
? 5A331 2.0b7 2.0b7
? 5A345 2.0b8GM 2.0b8GM
? 5F90 2.1b1 2.1b1
? 5G26 2.2b1 2.2b1 2.2b1

3.x

Date Build iPhone iPhone 3G iPhone 3GS iPod touch iPod touch 2G
? 7A238j 3.0b1 3.0b1 Unavailable 3.0b1 3.0b1
? 7A259g 3.0b2 3.0b2 3.0b2 3.0b2
? 7A280f 3.0b3 3.0b3 3.0b3 3.0b3
? 7A300g 3.0b4 3.0b4 3.0b4 3.0b4
? 7A312g 3.0b5 3.0b5 3.0b5 3.0b5
? 7C97d 3.1b1 3.1b1 3.1b1 3.1b1 3.1b1
? 7C106c 3.1b2 3.1b2 3.1b2 3.1b2 3.1b2
? 7C116a 3.1b3 3.1b3 3.1b3 3.1b3 3.1b3

4.x

Please note that for the Apple TV the firmware listed in this table is the one that your Apple TV reports. See also Apple TV Firmware Versions.

Date Build Apple TV 2G iPad iPhone 3G iPhone 3GS iPhone 4 (GSM) iPod touch 2G iPod touch 3G iPod touch 4G
? 8A230m Unavailable 4.0b1 4.0b1 Unavailable 4.0b1 4.0b1 Unavailable
? 8A248c 4.0b2 4.0b2 4.0b2 4.0b2
? 8A260b 4.0b3 4.0b3 4.0b3 4.0b3
? 8A274b 4.0b4 4.0b4 4.0b4 4.0b4
? 8A293 4.0GM 4.0GM 4.0GM 4.0GM
? 8B5080 Unavailable 4.1b1 4.1b1
? 8B5080c 4.1b1 4.1b1 4.1b1 Unavailable
? 8B5091b 4.1b2 4.1b2 4.1b2 4.1b2 4.1b2
? 8C5091e Unavailable 4.2b1 4.2b1 4.2b1 4.2b1 4.2b1 4.2b1 4.2b1
? 8C5101c 4.2b2 4.2b2 4.2b2 4.2b2 4.2b2 4.2b2 4.2b2
? 8C5115c 4.2b3 4.2b3 4.2b3 4.2b3 4.2b3 4.2b3 4.2b3
? 8C134 4.2GM 4.2GM 4.2GM 4.2GM 4.2GM 4.2GM 4.2GM
? 8C134b 4.2GM Unavailable
? 8C148 4.2.1GM 4.2.1GM 4.2.1GM 4.2.1GM 4.2.1GM 4.2.1GM 4.2.1GM
? 8F5148b Unavailable 4.3b1 Unavailable 4.3b1 4.3b1 Unavailable 4.3b1 4.3b1
20110112 8F5148c 4.2b1 Unavailable Unavailable Unavailable Unavailable Unavailable
20110119 8F5153d 4.2b2 4.3b2 4.3b2 4.3b2 4.3b2 4.3b2
20110201 8F5166b 4.2b3 4.3b3 4.3b3 4.3b3 4.3b3 4.3b3
? 8F190 Unavailable 4.3GM 4.3GM 4.3GM 4.3GM 4.3GM

5.x

Please note that for the Apple TV the firmware listed in this table is the one that your Apple TV reports. See also Apple TV Firmware Versions.

Date Build Apple TV 2G Apple TV 3G iPad iPad 2 (Wi-Fi) iPad 2 (GSM) iPad 2 (CDMA) iPhone 3GS iPhone 4 (GSM) iPhone 4 (CDMA) iPod touch 3G iPod touch 4G
20110607 9A5220p 4.4b1 Unavailable 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1
20110624 9A5248d 4.4b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2
20110712 9A5259f 4.4b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3
? 9A5274d Unavailable 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4
20110806 9A5288d 4.4b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5
20110819 9A5302b 4.4b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6
20110831 9A5313e 4.4b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7
? 9A334 Unavailable 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM
20111212 9B5127c 5.0b1 Unavailable
20111212 9B5141a 5.0b2