Difference between revisions of "Seczone"

From The iPhone Wiki
Jump to: navigation, search
Line 8: Line 8:
   
 
The locks table is identical for every device.
 
The locks table is identical for every device.
  +
  +
==Locks Table==
  +
Type Offset Size Entry
  +
0002 0028 0018 102F0100 00000001 7F200000 FFFF6F07 0000FFFF 00000009
  +
0010 0040 0010 15220100 06310830 00010432 00001F10
  +
8001 0050 0008 FF010001 FFFFFFFF
  +
0001 0058 00e0 00250100 00000000 00000000 00000000 00000000 00000001 01050101
  +
00000000 00000009 00000000 00000000 00000000 00000029 00000000
  +
00000000 00000000 00000505 00000000 00000000 00000000 00000000
  +
00000000 00000000 00000000 00000000 00000000 00000505 00000000
  +
00000000 00000000 00000000 00000000 00000000 00000000 00000000
  +
00000000 00000505 00000000 00000000 00000000 00000000 00000000
  +
00000000 00000000 00000000 00000000 00000505 00000000 00000000
  +
00000000 00000000 00000000 00000000 00000000 00000000 00000000
  +
  +
0003 0138 00b8 00000100 00000000 00000000 00000000 00000000 00000000 00000000
  +
00000000 00000000 00000000 00000000 00000000 00000000 00000000
  +
00000000 00000000 00000000 00000000 00000000 00000000 00000000
  +
00000000 00000000 00000000 00000000 00000000 00000000 00000000
  +
00000000 00000000 00000000 00000000 00000000 00000000 00000000
  +
00000000 00000000 00000000 00000000 00000000 00000000 00000000
  +
00000000 00000000 00000000 00000000
   
 
==Encryption==
 
==Encryption==

Revision as of 18:14, 9 August 2010

This is the area in the baseband where the lock state is stored.

Layout

0x400--NCK token
0xA00--IMEI signature
0xB00--IMEI
0xC00--Locks table

The locks table is identical for every device.

Locks Table

 Type Offset Size  Entry
 0002  0028  0018  102F0100 00000001 7F200000 FFFF6F07 0000FFFF 00000009 
 0010  0040  0010  15220100 06310830 00010432 00001F10 
 8001  0050  0008  FF010001 FFFFFFFF 
 0001  0058  00e0  00250100 00000000 00000000 00000000 00000000 00000001 01050101 
                   00000000 00000009 00000000 00000000 00000000 00000029 00000000 
                   00000000 00000000 00000505 00000000 00000000 00000000 00000000 
                   00000000 00000000 00000000 00000000 00000000 00000505 00000000 
                   00000000 00000000 00000000 00000000 00000000 00000000 00000000 
                   00000000 00000505 00000000 00000000 00000000 00000000 00000000 
                   00000000 00000000 00000000 00000000 00000505 00000000 00000000 
                   00000000 00000000 00000000 00000000 00000000 00000000 00000000 
                
  0003  0138 00b8  00000100 00000000 00000000 00000000 00000000 00000000 00000000 
                   00000000 00000000 00000000 00000000 00000000 00000000 00000000 
                   00000000 00000000 00000000 00000000 00000000 00000000 00000000 
                   00000000 00000000 00000000 00000000 00000000 00000000 00000000 
                   00000000 00000000 00000000 00000000 00000000 00000000 00000000 
                   00000000 00000000 00000000 00000000 00000000 00000000 00000000 
                   00000000 00000000 00000000 00000000

Encryption

Many of the sections are encrypted using TEA based off the hashed chipID and/or norID. See NCK Brute Force for more info.