Firmware Keys

From The iPhone Wiki
Revision as of 18:48, 25 September 2012 by 5urd (talk | contribs) (reformated a bit)
Jump to: navigation, search

VFDecrypt Keys are the keys which can decrypt the files that come with the firmware. Apple uses a public-private key encryption to ensure the safety of their files. Over time Apple has changed the way to encrypt firmware files, thus the way to decrypt files as well as the way to get the VFDecrypt Keys has also.

IMG2 was the file format used prior to iOS 2.0. For iOS 1.1.x, IMG2 files were encrypted with Key 0x837.

IMG3 encrypted files contain encrypted versions of the VFDecrypt Keys as part of the KBAG (key bag). These can be decrypted with the GID-key. For jailbroken iDevices the VFDecrypt keys can be retrieved with the devices hardware AES engine. The VFDecrypt key for the root filesystem image of an iDevice (~500 MB to 800MB in the case of iOS 5) requires either a decrypted Restore Ramdisk or Update Ramdisk. Once you have a decrypted Restore or Update Ramdisk, GenPass can be used to gather the keys for the root filesystem. For the root filesystem there is one key per device model, with no IV. You can mount this once it has been decrypted using your program of choice. (For example, 7-zip on Windows (after extracting the DMG on Windows, extract the biggest file with 7-Zip)

Notes

Application Processor iDevice
S5L8900 iPhone 2G
iPhone 3G
iPod touch 1G
S5L8720 iPhone 2G
iPod touch 2G
S5L8920 iPhone 3GS
S5L8922 iPod touch 3G
S5L8930 (A4) iPad 1G
iPhone 4
iPod touch 4G
Apple TV 2G
S5L8940 (A5) iPad 2
iPhone 4S
S5L8942 (revised A5) iPad 2 (Wi‑Fi) [R2]
Apple TV 3G
iPod touch 5G
S5L8945 (A5X) iPad 3
S5L8950 (A6) iPhone 5

Certain files share the same key and IV per application processor (per build):

The table on the right lists the application processors and their corrosponding devices. This list is also accessable from the main page.

You can use img3decrypt[1] or xpwntool[2] to decrypt these files as described in Ramdisk Decryption. Once done, mount or extract using the tool of your choice.

When posting a key page, please use the key template (IN THE CORRECT ORDER) and do NOT substitute it.

The firmware version number for the Apple TV builds are the ones that the Apple TV reports.

All dates are relative to UTC.

iOS 6.0b1 and higher no longer work with VFDecrypt. You need to use dmg[3] to decrypt these. The decryption process is longer as it writes the progress to the terminal unlike VFDecrypt, but if you can stand a minute or two longer, you can decrypt the iOS 6 and higher firmware files.

Firmware versions

This is a full and comprehensive list of all firmwares Apple Inc. has made available to the public in some way, be it the dev center or iTunes.

Final

Main article: Firmware

1.x

Date Build iPhone 2G iPod touch 1G
? 1A420 1.0 N/A
29 Jun 2007 1A543a 1.0
31 Jul 2007 1C25 1.0.1
21 Aug 2007 1C28 1.0.2
? 3A100a N/A 1.1
? 3A101a 1.1
27 Sep 2007 3A109a 1.1.1 N/A
3A110a N/A 1.1.1
? 3B48b 1.1.2 1.1.2
15 Jan 2008 4A93 1.1.3 1.1.3
26 Feb 2008 4A102 1.1.4 1.1.4
15 Jul 2008 4B1 N/A 1.1.5

2.x

Date Build iPhone iPod touch
2G 3G 1G 2G
? 5A345 N/A 2.0 N/A
11 Jul 2008 5A347 2.0 2.0 2.0 N/A
? 5B108 2.0.1 2.0.1 2.0.1
? 5C1 2.0.2 2.0.2 2.0.2
? 5F136 2.1 2.1 N/A
? 5F137 N/A 2.1 N/A
? 5F138 N/A 2.1.1
? 5G77 2.2 2.2 2.2 N/A
? 5G77a N/A 2.2
? 5H11 2.2.1 2.2.1 2.2.1 N/A
? 5H11a N/A 2.2.1

3.x

Date Build iPad 1G iPhone 2G iPhone 3G iPhone 3GS iPod touch 1G iPod touch 2G iPod touch 3G
? 7A341 N/A 3.0 3.0 3.0 3.0 3.0 N/A
? 7A400 3.0.1 3.0.1 3.0.1 N/A
? 7C144 3.1 3.1 3.1
? 7C145 N/A 3.1.1 3.1.1 3.1.1
? 7C146 N/A 3.1.1
? 7D11 3.1.2 3.1.2 3.1.2 3.1.2 3.1.2 3.1.2
? 7E18 3.1.3 3.1.3 3.1.3 3.1.3 3.1.3 3.1.3
? 7B367 3.2 N/A
15 Jul 2010 7B405 3.2.1
? 7B500 3.2.2

4.x

Date Build Apple TV 2G iPad 1G iPad 2
(Wi‑Fi)
iPad 2
(GSM)
iPad 2
(CDMA)
iPhone 3G iPhone 3GS iPhone 4
(GSM)
iPhone 4
(CDMA)
iPod touch 2G iPod touch 3G iPod touch 4G
01 Sep 2010 8M89 4.0 N/A
21 Jun 2010 8A293 N/A 4.0 4.0 4.0 N/A 4.0 4.0 N/A
15 Jul 2010 8A306 4.0.1 4.0.1 4.0.1 N/A
11 Aug 2010 8A400 4.0.2 4.0.2 4.0.2 N/A 4.0.2 4.0.2 N/A
? 8B117 4.1 4.1 4.1 4.1 4.1 4.1
? 8B118 N/A 4.1 N/A
? 8C148 N/A 4.2.1 N/A 4.2.1 N/A 4.2.1 N/A 4.2.1 4.2.1 4.2.1
? 8C148a N/A 4.2.1 N/A
22 Nov 2010 8C150 4.1 N/A
14 Dec 2010 8C154 4.1.1
? 8E128 N/A 4.2.5 N/A
? 8E200 4.2.6
14 Apr 2011 8E303 4.2.7
04 May 2011 8E401 4.2.8
15 Jul 2011 8E501 4.2.9
25 Jul 2011 8E600 4.2.10
09 Mar 2011 8F190 N/A 4.3 N/A 4.3 4.3 N/A 4.3 4.3
8F191 N/A 4.3 4.3 4.3 N/A
11 Mar 2011 8F191m 4.2 N/A
22 Mar 2011? 8F202 4.2.1
11 Mar 2011? 8F305 4.2.2
01 Aug 2011 8F455 4.3
25 Mar 2011 8G4 N/A 4.3.1 4.3.1 4.3.1 4.3.1 N/A 4.3.1 4.3.1 N/A 4.3.1 4.3.1
14 Apr 2011 8H7 4.3.2 4.3.2 4.3.2 N/A 4.3.2 4.3.2 N/A 4.3.2 4.3.2
8H8 N/A 4.3.2 N/A
04 May 2011 8J2 N/A 4.3.3 4.3.3 4.3.3 N/A 4.3.3 4.3.3 N/A 4.3.3 4.3.3
8J3 4.3.3 N/A
15 Jul 2011 8K2 4.3.4 4.3.4 4.3.4 4.3.4 N/A 4.3.4 4.3.4 N/A 4.3.4 4.3.4
25 Jul 2011 8L1 4.3.5 4.3.5 4.3.5 4.3.5 N/A 4.3.5 4.3.5 N/A 4.3.5 4.3.5

5.x

Date Build Apple TV 2G Apple TV 3G iPad 1G iPad 2
(Wi‑Fi)
iPad 2
(GSM)
iPad 2
(CDMA)
iPad 2
(Wi‑Fi) [R2]
iPad 3
(Wi-Fi)
iPad 3
(CDMA)
iPad 3
(Global)
iPhone 3GS iPhone 4
(GSM)
iPhone 4
(CDMA)
iPhone 4S iPod touch 3G iPod touch 4G
12 Oct 2011 9A334 N/A 5.0 5.0 5.0 5.0 N/A 5.0 5.0 5.0 5.0 5.0 5.0
9A334v 4.4 N/A
18 Oct 2011 9A335a 4.4.1
02 Nov 2011 9A336a 4.4.2
10 Nov 2011 9A405 N/A 5.0.1 5.0.1 5.0.1 5.0.1 N/A 5.0.1 5.0.1 5.0.1 5.0.1 5.0.1 5.0.1
17 Nov 2011 9A405l 4.4.3 N/A
15 Dec 2011 9A406 N/A 5.0.1 N/A
9A406a 4.4.4 N/A
07 Mar 2012 9B176 N/A 5.1 5.1 5.1 5.1 5.1 5.1 5.1 5.1 5.1 5.1 5.1 N/A 5.1 5.1
9B179 N/A 5.1 N/A
9B179b 5.0 5.0 N/A
10 May 2012 9B206 N/A 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1 5.1.1
9B206f 5.0.1 5.0.1 N/A
25 May 2012 9B208 N/A 5.1.1 N/A
05 Jun 2012 9B830 5.0.2 5.0.2 N/A

6.x

Date Build Apple TV 2G Apple TV 3G iPad 2
(Wi‑Fi)
iPad 2
(GSM)
iPad 2
(CDMA)
iPad 2
(Wi‑Fi) [R2]
iPad 3
(Wi-Fi)
iPad 3
(CDMA)
iPad 3
(Global)
iPhone 3GS iPhone 4
(GSM)
iPhone 4
(CDMA)
iPhone 4S iPhone 5
(GSM)
iPhone 5
(Global)
iPod touch 4G iPod touch 5G
19 Sep 2012 10A403 N/A 6.0 6.0 6.0 6.0 6.0 6.0 6.0 6.0 6.0 6.0 6.0 N/A 6.0 N/A
10A405 N/A 6.0 6.0 N/A
10A406 N/A 6.0
24 Sep 2012 10A406e 5.1 5.1 N/A

Beta

Main article: Beta Firmware

1.x/2.x

Date
Build iPhone 2G iPhone 3G iPod touch 1G
? 5A147p 1.2b1 N/A 1.2b1
? 5A225c 2.0b2 2.0b2
? 5A240d 2.0b3 2.0b3
? 5A258f 2.0b4 2.0b4
? 5A274d 2.0b5 2.0b5
? 5A292g 2.0b6P 2.0b6P
? 5A308 2.0b6F 2.0b6F
? 5A331 2.0b7 2.0b7
? 5A345 2.0b8GM 2.0b8GM
? 5F90 2.1b1 2.1b1
? 5G26 2.2b1 2.2b1 2.2b1

3.x

Date Build iPhone 2G iPhone 3G iPhone 3GS iPod touch 1G iPod touch 2G
? 7A238j 3.0b1 3.0b1 N/A 3.0b1 3.0b1
? 7A259g 3.0b2 3.0b2 3.0b2 3.0b2
? 7A280f 3.0b3 3.0b3 3.0b3 3.0b3
? 7A300g 3.0b4 3.0b4 3.0b4 3.0b4
? 7A312g 3.0b5 3.0b5 3.0b5 3.0b5
? 7C97d 3.1b1 3.1b1 3.1b1 3.1b1 3.1b1
? 7C106c 3.1b2 3.1b2 3.1b2 3.1b2 3.1b2
? 7C116a 3.1b3 3.1b3 3.1b3 3.1b3 3.1b3

4.x

Date Build Apple TV 2G iPad 1G iPhone 3G iPhone 3GS iPhone 4
(GSM)
iPod touch 2G iPod touch 3G iPod touch 4G
? 8A230m N/A 4.0b1 4.0b1 N/A 4.0b1 4.0b1 N/A
? 8A248c 4.0b2 4.0b2 4.0b2 4.0b2
? 8A260b 4.0b3 4.0b3 4.0b3 4.0b3
? 8A274b 4.0b4 4.0b4 4.0b4 4.0b4
? 8A293 4.0GM 4.0GM 4.0GM 4.0GM
? 8B5080 N/A 4.1b1 4.1b1
? 8B5080c 4.1b1 4.1b1 4.1b1 N/A
27 Jul 2010 8B5091b 4.1b2 4.1b2 4.1b2 4.1b2 4.1b2
? 8C5091e N/A 4.2b1 4.2b1 4.2b1 4.2b1 4.2b1 4.2b1 4.2b1
? 8C5101c 4.2b2 4.2b2 4.2b2 4.2b2 4.2b2 4.2b2 4.2b2
? 8C5115c 4.2b3 4.2b3 4.2b3 4.2b3 4.2b3 4.2b3 4.2b3
? 8C134 4.2GM 4.2GM 4.2GM 4.2GM 4.2GM 4.2GM 4.2GM
? 8C134b 4.2GM N/A
? 8C148 4.2.1GM 4.2.1GM 4.2.1GM 4.2.1GM 4.2.1GM 4.2.1GM 4.2.1GM
12 Jan 2011 8F5148b N/A 4.3b1 N/A 4.3b1 4.3b1 N/A 4.3b1 4.3b1
12 Jan 2011 8F5148c 4.2b1 N/A N/A N/A
19 Jan 2011 8F5153d 4.2b2 4.3b2 4.3b2 4.3b2 4.3b2 4.3b2
01 Feb 2011 8F5166b 4.2b3 4.3b3 4.3b3 4.3b3 4.3b3 4.3b3
03 Mar 2011 8F190 N/A 4.3GM 4.3GM 4.3GM 4.3GM 4.3GM

5.x

Date Build Apple TV 2G Apple TV 3G iPad 1G iPad 2
(Wi‑Fi)
iPad 2
(GSM)
iPad 2
(CDMA)
iPhone 3GS iPhone 4
(GSM)
iPhone 4
(CDMA)
iPod touch 3G iPod touch 4G
07 Jun 2011 9A5220p 4.4b1 N/A 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1 5.0b1
24 Jun 2011 9A5248d 4.4b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2 5.0b2
11 Jul 2011 9A5259f 4.4b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3 5.0b3
22 Jul 2011 9A5274d N/A 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4 5.0b4
06 Aug 2011 9A5288d 4.4b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5 5.0b5
19 Aug 2011 9A5302b 4.4b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6 5.0b6
31 Aug 2011 9A5313e 4.4b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7 5.0b7
04 Oct 2011 9A334 N/A 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM 5.0GM
02 Nov 2011 9A402 5.0.1b1 5.0.1b1 5.0.1b1 5.0.1b1 5.0.1b1 5.0.1b1 5.0.1b1 5.0.1b1 5.0.1b1
04 Nov 2011 9A404 5.0.1b2 5.0.1b2 5.0.1b2 5.0.1b2 5.0.1b2 5.0.1b2 5.0.1b2 5.0.1b2 5.0.1b2
12 Dec 2011 9B5127c 5.0b1 N/A
09 Jan 2012 9B5141a 5.0b2

6.x

Date Build Apple TV 2G Apple TV 3G iPad 2
(Wi‑Fi)
iPad 2
(GSM)
iPad 2
(CDMA)
iPad 2
(Wi‑Fi) [R2]
iPad 3
(Wi‑Fi)
iPad 3
(CDMA)
iPad 3
(Global)
iPhone 3GS iPhone 4
(GSM)
iPhone 4
(CDMA)
iPhone 4S iPod touch 4G
11 Jun 2012 10A5316k 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1 6.0b1
25 Jun 2012 10A5338d 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2 6.0b2
16 Jul 2012 10A5355d 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3 6.0b3
06 Aug 2012 10A5376e 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4 6.0b4
12 Sep 2012 10A403 N/A 6.0GM 6.0GM 6.0GM 6.0GM 6.0GM 6.0GM 6.0GM 6.0GM 6.0GM 6.0GM 6.0GM 6.0GM