SHSH

From The iPhone Wiki
Revision as of 22:18, 20 December 2016 by AS967 (talk | contribs)
Jump to: navigation, search

As the SHSH blob article on Wikipedia summarizes it: "SHSH blob is a jargon term for a small piece of data that is part of Apple's digital signature protocol for iOS restores and updates, designed to control the iOS versions that users can install on their iOS devices (iPhones, iPads, iPod touches, and Apple TVs), generally only allowing the newest iOS version to be installable. "

Technically, the SHSH of a firmware image is a 1024-bit (0x80 bytes) RSA signature. This often also refers to backup files with the signature ("SHSH blobs"). This signature is needed to restore a specific iOS version; it is generated by Apple based on hardware keys of the device and the hash of the firmware. Apple only issues signatures for the currently-available iOS version, which disallows installing older iOS versions. But if you have saved signatures for an older iOS version, you may be able to use a replay attack to restore that version. Therefore it is recommended to save the signature for your device as long as Apple issues it.

With the tools mentioned below it is possible to backup the signature. It is not necessary that the device is jailbroken to do the backup. Usually the SHSH signature file is stored on Saurik's server. If it is stored there, then you can see in the top of Cydia (on jailbroken devices) for which version a backup exists. This moved to TSS Center which can be located on the main page and then they are shown at the top of that.

Users often misunderstand this system and think that the SHSH firmware version they back up depends on the firmware version they have installed on their device. This is the case for iFaith, but not for TinyUmbrella. iFaith dumps the SHSHs from your device's storage (whatever's installed on your device, e.g. 4.3.3), while TinyUmbrella gets SHSHs from Apple's servers (whatever firmwares Apple is currently signing).

Using SHSH

Older devices allow installation of any correctly signed firmware, so no backup of the certificate is necessary. Devices that need Apple signatures are: iPhone 3GS (new Bootrom), iPhone 4, iPod touch 3G, iPad, iPad 2, iPod touch 4G, Apple TV 2G and all newer devices. The iPhone 3G, iPhone 3GS Old Bootrom and iPod touch 2G bootroms do not require these SHSHs; however, newer versions of iOS require them (unless the chain of trust is broken and custom firmwares are installed). To restore to arbitrary versions of iOS 4.0, the SHSH is also needed for the iPod touch 2G and iPhone 3G. not only does DFU Mode require the iBSS/iBEC files to be signed with an SHSH that includes the device's ECID, but the normal boot-chain requires the LLB to be fully signed with an ECID+SHSH, so a downgrade IPSW is not possible without a bootrom exploit of normal boot-chain (e.g. 0x24000 Segment Overflow). See also the Dev Team Blog post about this.

To restore to iOS 3.x or 4.x, change your hosts file to map any request to an Apple server to point to saurik's server instead, if your device's signatures are hosted there. If you have the signature file on your computer, run TinyUmbrella's TSS Server on your local machine.

Since the limera1n Exploit is fixed in the bootrom since version Bootrom 838.3 and because iOS since 5.0 includes a nonce in their SHSH hashes, downgrading newer devices (iPhone 4S, iPad 2, iPad 3, Apple TV 3G) to earlier 5.x firmwares is not as simple. To restore to iOS 5.x on older devices, stitch iOS 5.x blobs into custom firmware (using redsn0w for example) and restore with that firmware. To restore to iOS 5.x on newer devices, use redsn0w's restore method. See the JailbreakQA guide to restoring to iOS 5.x using SHSH blobs (for all devices that can run iOS 5.x except Apple TV 3G).

Timeline

The original iPhone and iPod touch didn't use SHSH blobs.

Firmware For Device(s) From Until Status
10.2 iPad 4, iPad Air, iPad Air 2, iPad Pro (12.9 inch), iPad Pro (9.7 inch), iPad mini 2, iPad mini 3, iPad mini 4, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPhone SE, iPhone 7, iPhone 7 Plus, iPod touch 6G 12 December 2016 - Open
10.1.1 (14B150) 9 November 2016 - Closed
10.1.1 (14B100) 31 October 2016 - Closed
10.1 24 October 2016 - Closed
10.0.3 iPhone 7, iPhone 7 Plus 17 October 2016 31 October 2016 Closed
10.0.2 iPad 4, iPad Air, iPad Air 2, iPad Pro (12.9 inch), iPad Pro (9.7 inch), iPad mini 2, iPad mini 3, iPad mini 4, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPhone SE, iPhone 7, iPhone 7 Plus, iPod touch 6G 23 September 2016 31 October 2016 Closed
10.0.1 13 September 2016 18 October 2016 Closed
9.3.5 iPad 4, iPad Air, iPad Air 2, iPad Pro (12.9 inch), iPad Pro (9.7 inch), iPad mini 2, iPad mini 3, iPad mini 4, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPhone SE, iPod touch 6G 25 August 2016 18 October 2016 Closed
iPad 2, iPad 3, iPad mini, iPhone 4S, iPod touch 5G - Open
9.3.4 iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad Pro (12.9 inch), iPad Pro (9.7 inch), iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPhone SE, iPod touch 5G, iPod touch 6G 4 August 2016 7 September 2016 Closed
9.3.3 18 July 2016 24 August 2016 Closed
9.3.2 (13F72) iPad Pro (9.7 inch) 2 June 2016 24 August 2016 Closed
9.3.2 (13F69) iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad Pro (12.9 inch), iPad Pro (iPad6,4), iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPhone SE, iPod touch 5G, iPod touch 6G 16 May 2016 24 August 2016 Closed
iPad Pro (iPad6,3) 26 May 2016 Closed
9.3.1 iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad Pro (12.9 inch), iPad Pro (9.7 inch), iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPhone SE, iPod touch 5G, iPod touch 6G 31 March 2016 10 June 2016 Closed
9.3 (13E237) iPad 2 (iPad2,1), iPad 2 (iPad2,3), iPad 2 (iPad2,4), iPad 3, iPad 4, iPad Air, iPad mini, iPad mini 2, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPod touch 5G 28 March 2016 22 April 2016 Closed
9.3 (13E236) iPad 2 (iPad2,2) 25 March 2016 Closed
9.3 (13E234) iPad Pro (9.7 inch) 21 March 2016 18 April 2016 Closed
9.3 (13E233) iPad Air 2, iPad Pro (12.9 inch), iPad mini 3, iPad mini 4, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPhone SE, iPod touch 6G Closed
iPad 2, iPad 3, iPad 4, iPad Air, iPad mini, iPad mini 2, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPod touch 5G 24 March 2016 Closed
9.2.1 (13D20) iPad Air 2, iPad Pro (12.9 inch), iPad mini 3, iPad mini 4, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus 18 February 2016 5 April 2016 Closed
9.2.1 (13D15) iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad Pro (12.9 inch), iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPod touch 5G, iPod touch 6G 19 January 2016 5 April 2016 Closed
9.2 iPad 2 (iPad2,4), iPad 3 (iPad3,1), iPad 4, iPad Air, iPad Air 2, iPad Pro (12.9 inch), iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPod touch 5G, iPod touch 6G 8 December 2015 5 February 2016 Closed
iPad 2 (iPad2,1), iPad 2 (iPad2,2), iPad 2 (iPad2,3), iPad 3 (iPad3,2), iPad 3 (iPad3,3), iPhone 4S 4 February 2016 Closed
9.1 (13B144) iPad Pro (12.9 inch) 17 November 2015 21 December 2015 Closed
9.1 (13B143) iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPod touch 5G, iPod touch 6G 21 October 2015 Closed
iPad Pro 2 December 2015 Closed
9.0.2 iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPod touch 5G, iPod touch 6G 30 September 2015 29 October 2015 Closed
9.0.1 iPhone 6s, iPhone 6s Plus 24 September 2015 8 October 2015 Closed
iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPod touch 5G, iPod touch 6G 23 September 2015 Closed
9.0 iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad mini, iPad mini 2, iPad mini 3, iPad mini 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPhone 6s, iPhone 6s Plus, iPod touch 5G, iPod touch 6G 16 September 2015 30 September 2015 Closed
8.4.1 iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad mini, iPad mini 2, iPad mini 3, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPod touch 5G, iPod touch 6G 13 August 2015 Closed
8.4 iPod touch 6G 15 July 2015 23 August 2015 Closed
iPad 2, iPad 3, iPad 4, iPad Air, iPad Air 2, iPad mini, iPad mini 2, iPad mini 3, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPod touch 5G 30 June 2015 23 August 2015 Closed
8.3 8 April 2015 7 July 2015 Closed
8.2 9 March 2015 4 May 2015 Closed
8.1.3 27 January 2015 23 March 2015 Closed
8.1.2 9 December 2014 10 February 2015 Closed
8.1.1 17 November 2014 17 December 2014 Closed
8.1 20 October 2014 1 December 2014 Closed
8.0.2 iPad 2, iPad 3, iPad 4, iPad Air, iPad mini, iPad mini 2, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPhone 6, iPhone 6 Plus, iPod touch 5G 25 September 2014 20 October 2014 Closed
8.0.1 24 September 2014 24 September 2014 Closed
8.0 17 September 2014 22 October 2014 Closed
7.1.2 iPhone 4 30 June 2014 - Open
iPad 2, iPad 3, iPad 4, iPad Air, iPad mini, iPad mini 2, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPod touch 5G 26 September 2014 Closed
7.1.1 iPad 2, iPad 3, iPad 4, iPad Air, iPad mini, iPad mini 2, iPhone 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPod touch 5G 22 April 2014 12 August 2014 Closed
7.1 10 March 2014 30 April 2014 Closed
7.0.6 21 February 2014 10 March 2014 Closed
7.0.5 iPhone 5c (iPhone5,4), iPhone 5s (iPhone6,2) 29 January 2014 21 February 2014 Closed
7.0.4 iPad 2, iPad 3, iPad 4, iPad Air, iPad mini, iPad mini 2, iPhone 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPod touch 5G 14 November 2013 21 February 2014 Closed
7.0.3 22 October 2013 14 November 2013 Closed
7.0.2 iPad mini (iPad2,5) 26 September 2013 21 February 2014 Closed
iPad 2, iPad 3, iPad 4, iPad mini (iPad2,6), iPad mini (iPad2,7), iPhone 4, iPhone 4S, iPhone 5, iPhone 5c, iPhone 5s, iPod touch 5G 29 October 2013 Closed
7.0.1 iPhone 5c, iPhone 5s 18 September 2013 7 October 2013 Closed
7.0 iPad 2, iPad 3, iPad 4, iPad mini, iPhone 4, iPhone 4S, iPhone 5, iPod touch 5G 18 September 2013 7 October 2013 Closed
6.1.6 iPhone 3GS, iPod touch 4G 24 November 2013 - Open
6.1.5 iPod touch 4G 24 September 2013 21 February 2014 Closed
6.1.4 iPhone 5 2 May 2013 20 September 2013 Closed
6.1.3 iPhone 3GS 19 March 2013 21 February 2014 Closed
iPod touch 4G 14 November 2013 Closed
iPhone 5 2 May 2013 Closed
iPad mini (iPad2,6) 25 September 2013 Closed
iPad 2, iPad 3, iPad 4, iPad mini (iPad2,5), iPad mini (iPad2,7), iPhone 4, iPhone 4S, iPod touch 5G 20 September 2013 Closed
6.1.2 iPod touch 5G 19 February 2013 20 March 2013 Closed
iPad 2, iPad 3, iPad 4, iPad mini iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPod touch 4G 19 March 2013 Closed
6.1.1 iPhone 4S 11 February 2013 19 February 2013 Closed
6.1 iPad mini (iPad2,6), iPod touch 4G 28 January 2013 20 March 2013 Closed
iPad 2, iPad 3, iPad 4, iPad mini, iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPod touch 5G 28 January 2013 19 February 2013 Closed
6.0.2 iPad mini (iPad2,5), iPhone 5 26 July 2013 Closed
iPad mini, iPhone 5 18 December 2012 28 January 2013 Closed
6.0.1 iPad 2, iPad 3, iPad 4, iPad mini, iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPod touch 4G, iPod touch 5G 1 November 2012 28 January 2013 Closed
iPad 2, iPad 3, iPad 4 (iPad3,4), iPad mini (iPad2,5), iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPod touch 4G, iPod touch 5G 26 July 2013 Closed
iPad mini 1 November 2012 8 January 2013 Closed
iPad 4, iPad mini 9 November 2012 28 January 2013 Closed
6.0 iPad 4 (iPad3,4), iPad mini (iPad2,5) 30 October 2012 1 November 2012 Closed
iPad 2, iPad 3, iPad mini (iPad2,5), iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPod touch 4G, iPod touch 5G 26 July 2013 Closed
iPad 2, iPad 3, iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPod touch 4G, iPod touch 5G 19 September 2012 1 November 2012 Closed
5.1.1 (9B208) iPhone 4 (iPhone3,1) 25 May 2012 21 September 2012 Closed
5.1.1 (9B206) iPad, iPod touch 3G 7 May 2012 - Open
iPad 2, iPad 3, iPhone 3GS, iPhone 4, iPhone 4S, iPod touch 4G 21 September 2012 Closed
5.1 iPad, iPad 2, iPad 3, iPhone 3GS, iPhone 4, iPhone 4S, iPod touch 3G, iPod touch 4G 7 March 2012 14 May 2012 Closed
5.0.1 iPad, iPad 2, iPhone 3GS, iPhone 4, iPhone 4S, iPod touch 3G, iPod touch 4G 9 November 2011 8 February 2012 Closed
5.0 iPhone 4S 14 October 2011 10 November 2011(?) Closed
iPad, iPad 2, iPhone 3GS, iPhone 4, iPod touch 3G, iPod touch 4G 4 October 2011 10 November 2011(?) Closed
4.3.5 iPad, iPad 2, iPhone 3GS, iPhone 4(iPhone3,1), iPod touch 3G, iPod touch 4G 25 July 2011 18 October 2011 Closed
4.3.4 15 July 2011 27 July 2011 Closed
4.3.3 4 May 2011 18 July 2011 Closed
4.3.2 14 April 2011 6 May 2011 Closed
4.3.1 25 March 2011 19 April 2011 (?) Closed
4.3 9 March 2011 27 March 2011 (?) Closed
4.2.10 iPhone 4 (iPhone3,3) 25 July 2011 18 October 2011 Closed
4.2.9 15 July 2011 27 July 2011 Closed
4.2.8 4 May 2011 18 July 2011 Closed
4.2.7 14 April 2011 6 May 2011 Closed
4.2.6 1 February 2011 19 April 2011 (?) Closed
4.2.1 iPhone 3G, iPod touch 2G 22 November 2010 - Open
iPad, iPhone 3GS, iPhone 4 (iPhone3,1), iPod touch 3G, iPod touch 4G 11 March 2011 Closed
4.1 (8B118) iPod touch 4G 21 September 2010 2 December 2010 (?) Closed
4.1 (8B117) iPhone 3G, iPhone 3GS, iPod touch 2G, iPod touch 3G 8 September 2010 - Open
iPhone 4 (iPhone3,1), iPod touch 4G 2 December 2010 (?) Closed
4.0.2 iPhone 3GS, iPhone 4 (iPhone3,1), iPod touch 3G 11 August 2010 9 September 2010 Closed
iPhone 3G, iPod touch 2G 11 August 2010 18 September 2010 Closed
4.0.1 iPhone 3GS, iPhone 4 (iPhone3,1) 15 July 2010 19 August 2010 Closed
iPhone 3G 15 July 2010 9 September 2010 Closed
4.0 iPod touch 3G 21 June 2010 9 August 2010 Closed
iPod touch 2G 21 June 2010 9 September 2010 Closed
iPhone 3G, iPhone 3GS 21 June 2010 15 July 2010 Closed
iPhone 4 (iPhone3,1) 24 June 2010 15 July 2010 Closed
3.2.2 iPad 11 August 2010 2 December 2010 (?) Closed
3.2.1 15 July 2010 19 August 2010 Closed
3.2 3 April 2010 15 July 2010 Closed
3.1.3 iPhone 3GS, iPod touch 2G, iPod touch 3G 2 February 2010 21 June 2010 Closed
3.1.2 iPhone 3GS, iPod touch 3G 8 October 2009 2 February 2010 Closed
iPod touch 2G 8 October 2009 21 June 2010 Closed
3.1.1 (7C146) iPod touch 3G 17 September 2009 8 October 2009 (?) Closed
3.1.1 (7C145) 9 September 2009 8 October 2009 Closed
iPod touch 2G 9 September 2009 21 June 2010 Closed
3.1 iPhone 3GS 9 September 2009 8 October 2009 Closed
3.0.1 31 July 2009 9 September 2009 Closed
3.0 19 June 2009 Closed

Apple TV

Marketing Version OS Version For Device(s) From Until Status
N/A 10.1 Apple TV 4G 12 December 2016 - Open
10.0.1 24 October 2016 - Open
10.0 13 September 2016 31 October 2016 Closed
9.2.2 18 July 2016 18 October 2016 Closed
9.2.1 16 May 2016 23 September 2016 Closed
9.2 21 March 2016 10 June 2016 Closed
9.1.1 25 January 2016 5 April 2016 Closed
9.1 8 December 2015 4 February 2016 Closed
9.0.1 9 November 2015 21 December 2015 Closed
9.0 29 October 2015 14 December 2015 Closed
7.2.2 8.4.2 Apple TV 3G 12 December 2016 - Open
7.2.1 8.4.1 25 February 2016 - Open
7.2 8.3 8 April 2015 7 April 2016 Closed
7.1 8.2 9 March 2015 4 May 2015 Closed
7.0.3 8.1.3 27 January 2015 23 March 2015 Closed
7.0.2 8.1.1 17 November 2014 1 April 2015 Closed
7.0.1 8.1 20 October 2014 1 December 2014 Closed
7.0 8.0 17 September 2014 22 October 2014 Closed
6.2.1 7.1.2 Apple TV 2G 17 September 2014 - Open
6.2 Apple TV 2G, Apple TV 3G 30 June 2014 26 September 2014 Closed
6.1.1 7.1.1 22 April 2014 11 July 2014 Closed
6.1 7.1 10 March 2014 30 April 2014 Closed
6.0.2 7.0.6 21 February 2014 10 March 2014 Closed
7.0.4 14 November 2013 21 February 2014 Closed
6.0.1 7.0.3 24 October 2013 14 November 2013 Closed
6.0 7.0.2 24 September 2013 29 October 2013 Closed
7.0.1 20 September 2013 24 September 2013 Closed
5.3 6.1.4 Apple TV 3G (AppleTV3,2) 19 June 2013 21 September 2013 Closed
Apple TV 2G, Apple TV 3G (AppleTV3,1) 19 June 2013 - Open
5.2.1 6.1.3 Apple TV 2G, Apple TV 3G 19 March 2013 20 June 2013 Closed
5.2 6.1 28 January 2013 20 March 2013 Closed
5.1.1 6.0.1 Apple TV 2G, Apple TV 3G (AppleTV3,1) 26 November 2012 20 March 2013 Closed
5.1 6.0 24 September 2012 20 March 2013 Closed
5.0.2 5.1.1 5 June 2012 20 March 2013 Closed
5.0.1 10 May 2012 July 2012 (day unknown) Closed
5.0 5.1 7 March 2012 14 May 2012 Closed
4.4.4 5.0.1 Apple TV 2G 15 December 2011 8 March 2012 Closed
4.4.3 17 November 2011 11 January 2012(?) Closed
4.4.2 5.0 24 October 2011 11 January 2012(?) Closed
4.4.1 17 October 2011 ? Closed
4.4 4 October 2011 ? Closed
4.3 9 March 2011 ? Closed
4.2.2 4.3 11 May 2011 18 October 2011 (?) Closed
4.2.1 22 March 2011 28 May 2011 (?) Closed
4.2 9 March 2011 22 March 2011 (?) Closed
4.1.1 4.2.1 14 December 2010 28 May 2011 (?) Closed
4.1 4.2 22 November 2010 14 December 2010 Closed
4.0 4.1 29 September 2010 2 December 2010 (?) Closed

Protocol

To request a SHSH blob from Apple, a simple HTTP request can be made. For a full description, see the separate articles SHSH Protocol and Baseband SHSH Protocol.

See Also

External Links