Difference between revisions of "Talk:Firmware Keys"

From The iPhone Wiki
Jump to: navigation, search
m (archiving and rewriting discussion to fix grammar)
m (added sign)
 
(17 intermediate revisions by 5 users not shown)
Line 1: Line 1:
{{Talk Archive|2009|2010|2011|2012|2013}}
+
{{Talk Archive}}
   
==iKeys==
+
== iKeys ==
 
I was wondering if anyone had any info on "iKeys". It's mentioned [http://pastie.org/1161868 here] at the bottom. I'd imagine it's like GenPass but just wondering. Any info is appreciated. --[[User:OMEGA_RAZER|OMEGA_RAZER]]
 
I was wondering if anyone had any info on "iKeys". It's mentioned [http://pastie.org/1161868 here] at the bottom. I'd imagine it's like GenPass but just wondering. Any info is appreciated. --[[User:OMEGA_RAZER|OMEGA_RAZER]]
   
 
== Exploit? ==
 
== Exploit? ==
 
Am I to understand that a low level exploit is needed to get the VFDecrypt key? --[[User:Shengis14|Shengis14]] 18:50, 8 October 2010 (UTC)
 
Am I to understand that a low level exploit is needed to get the VFDecrypt key? --[[User:Shengis14|Shengis14]] 18:50, 8 October 2010 (UTC)
:No, that's not completely true. :P One has to manage to get the key/IV for a ramdisk, and then use [[Genpass]] to get the VFDecrypt key. --[[User:Dra1nerdrake|dra1nerdrake]] 21:27, 8 October 2010 (UTC)
+
:No, that's not completely true. :P One has to manage to get the key/IV for a ramdisk, and then use [[GenPass]] to get the VFDecrypt key. --[[User:Dra1nerdrake|dra1nerdrake]] 21:27, 8 October 2010 (UTC)
 
::How would someone like myself go about geting the key/IV for a ramdisk? --[[User:Shengis14|Shengis14]] 22:13, 8 October 2010 (UTC)
 
::How would someone like myself go about geting the key/IV for a ramdisk? --[[User:Shengis14|Shengis14]] 22:13, 8 October 2010 (UTC)
 
:::You would need (at the very least) an iBoot exploit and a payload to upload that is able to access the AES engine of the device. --[[User:OMEGA RAZER|OMEGA RAZER]] 22:16, 8 October 2010 (UTC)
 
:::You would need (at the very least) an iBoot exploit and a payload to upload that is able to access the AES engine of the device. --[[User:OMEGA RAZER|OMEGA RAZER]] 22:16, 8 October 2010 (UTC)
Line 15: Line 15:
 
I think we should make a new page detailing how to utilise [[User:Gojohnnyboi|Gojohnnyboi]]'s AES payload to get the keys including screenies on opening up an img3 in a hex editor and getting the [[KBAG]] etc. Then the keys won't be left to the main devs and [[User:iH8sn0w|iH8sn0w]] to post. Then all these beta FWs can be decrypted faster and more keys can be posted. I myself would definitely be interested in getting the KBAG etc. and if anybody could create such a page then I would definitely be interested in posting keys myself. Once created the page shouldn't need too much housekeeping either since the process won't change until IMG4 comes along which I will dread :P Who's up to it?? [[User:Windows Helpdesk|blackthund3r]] 11:43, 20 October 2010 (UTC)
 
I think we should make a new page detailing how to utilise [[User:Gojohnnyboi|Gojohnnyboi]]'s AES payload to get the keys including screenies on opening up an img3 in a hex editor and getting the [[KBAG]] etc. Then the keys won't be left to the main devs and [[User:iH8sn0w|iH8sn0w]] to post. Then all these beta FWs can be decrypted faster and more keys can be posted. I myself would definitely be interested in getting the KBAG etc. and if anybody could create such a page then I would definitely be interested in posting keys myself. Once created the page shouldn't need too much housekeeping either since the process won't change until IMG4 comes along which I will dread :P Who's up to it?? [[User:Windows Helpdesk|blackthund3r]] 11:43, 20 October 2010 (UTC)
   
  +
==New table format.==
== [http://theiphonewiki.com/wiki/index.php?title=Firmware_Keys&curid=87&diff=21727&oldid=21725 http's edit] ==
 
  +
I was thinking, because the tables do not fit into the normal view (7.x beta's for example), maybe we could think of a new design. I had an idea of maybe using device tables, so we could have something like the below (of course we would have a beta and public sections and all devices would be added);
Where did 3140 come from? Was it a typo? --[[User:5urd|5urd]] 18:01, 13 October 2011 (MDT)
 
:That's what the ATV displays. I didn't look at the ipsw yet. -- [[User:Http|http]] 18:03, 13 October 2011 (MDT)
 
::Well, there may be two firmwares, the original 4.4 9A334v and not 3140... but that doesn't seem like apple to break a standard like build codes... --[[User:5urd|5urd]] 18:05, 13 October 2011 (MDT)
 
:::No, not two firmwares, just the display. -- [[User:Http|http]] 11:49, 18 October 2011 (MDT)
 
:The display shows this (in About menu):
 
Apple TV-Software 4.4 (3140)
 
Apple TV-Software 4.4.2 (3160)
 
:As this is obviously not a build number, any idea what this is? --[[User:Http|http]] 16:30, 24 October 2011 (MDT)
 
::I will assume that 4.4.1 would be (3150)... @[[User:http|http]], I would assume that the reason you couldn't update was that Apple had briefly pulled it... --[[User:5urd|5urd]] 17:12, 24 October 2011 (MDT)
 
:::Well, shortly after 4.4.2 came out, I clicked on update. After the update the version shown was still 4.0 (3140). But a few minutes later, a push update came through and asked me to update again. After that was through, the above mentioned 4.4.2 (3160) was shown. Quite strange. --[[User:Http|http]] 06:13, 25 October 2011 (MDT)
 
::::Fail in build? --[[User:5urd|5urd]] 14:04, 26 October 2011 (MDT)
 
   
  +
iPhone (As a heading, since actually adding this would break the topic, making it two.)
== Moving "VFDecrypt Keys" to "[[Firmware Keys]]" ==
 
  +
{| class="wikitable"
This page now encompasses more than just [[VFDecrypt]]'s keys. To an extent, it encompasses [[xpwntool]]'s keys also. We also don't list the keys here, but just a link to the article that does. I think that this warrants a rename to [[Firmware Keys]]. It will be a big task to fix the redirects, but it ''can'' be done. Any ideas or objections? --[[User:5urd|5urd]] ([[User talk:5urd|talk]]) 20:03, 13 August 2013 (UTC)
 
  +
|-
:I am for the idea of this. If you want, I could help too. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 11:19, 14 August 2013 (UTC)
 
  +
! rowspan="2" | Date
:Done. --[[User:IAdam1n|IAdam1n]] ([[User talk:IAdam1n|talk]]) 15:52, 20 August 2013 (UTC)
 
  +
! rowspan="2" | Build
::All links fixed. --[[User:5urd|5urd]] ([[User talk:5urd|talk]]) 20:48, 20 August 2013 (UTC)
 
  +
! colspan="3" | [[iPhone 4]]
  +
! rowspan="2" | [[N94AP|iPhone 4S]]
  +
! colspan="2" | [[iPhone 5]]
  +
|-
  +
! [[N90AP|iPhone3,1]]
  +
! [[N90BAP|iPhone3,2]]
  +
! [[N92AP|iPhone3,3]]
  +
! [[N41AP|iPhone5,1]]
  +
! [[N42AP|iPhone5,2]]
  +
|-
  +
| 10 Jun 2013
  +
! style="text-align:left;" | 11A4372q
  +
| [[InnsbruckVailPrime 11A4372q (iPhone3,1)|7.0b]]
  +
| [[InnsbruckVailPrime 11A4372q (iPhone3,2)|7.0b]]
  +
| [[InnsbruckVailPrime 11A4372q (iPhone3,3)|7.0b]]
  +
| [[InnsbruckVailPrime 11A4372q (iPhone4,1)|7.0b]]
  +
| [[InnsbruckVailPrime 11A4372q (iPhone5,1)|7.0b]]
  +
| [[InnsbruckVailPrime 11A4372q (iPhone5,2)|7.0b]]
  +
|-
  +
| 24 Jun 2013
  +
! style="text-align:left;" | 11A4400f
  +
| [[InnsbruckVailPrime 11A4400f (iPhone3,1)|7.0b2]]
  +
| [[InnsbruckVailPrime 11A4400f (iPhone3,2)|7.0b2]]
  +
| [[InnsbruckVailPrime 11A4400f (iPhone3,3)|7.0b2]]
  +
| [[InnsbruckVailPrime 11A4400f (iPhone4,1)|7.0b2]]
  +
| [[InnsbruckVailPrime 11A4400f (iPhone5,1)|7.0b2]]
  +
| [[InnsbruckVailPrime 11A4400f (iPhone5,2)|7.0b2]]
  +
|-
  +
| 8 Jul 2013
  +
! style="text-align:left;" | 11A4414e
  +
| [[InnsbruckVailPrime 11A4414e (iPhone3,1)|7.0b3]]
  +
| [[InnsbruckVailPrime 11A4414e (iPhone3,2)|7.0b3]]
  +
| [[InnsbruckVailPrime 11A4414e (iPhone3,3)|7.0b3]]
  +
| [[InnsbruckVailPrime 11A4414e (iPhone3,1)|7.0b3]]
  +
| [[InnsbruckVailPrime 11A4414e (iPhone5,1)|7.0b3]]
  +
| [[InnsbruckVailPrime 11A4414e (iPhone5,2)|7.0b3]]
  +
|-
  +
| 29 Jul 2013
  +
! style="text-align:left;" | 11A4435d
  +
| [[InnsbruckVailPrime 11A4435d (iPhone3,1)|7.0b4]]
  +
| [[InnsbruckVailPrime 11A4435d (iPhone3,2)|7.0b4]]
  +
| [[InnsbruckVailPrime 11A4435d (iPhone3,3)|7.0b4]]
  +
| [[InnsbruckVailPrime 11A4435d (iPhone4,1)|7.0b4]]
  +
| [[InnsbruckVailPrime 11A4435d (iPhone5,1)|7.0b4]]
  +
| [[InnsbruckVailPrime 11A4435d (iPhone5,2)|7.0b4]]
  +
|}
  +
We would also break this down into .x still, so 6.x Apple TV, iPad, iPad mini, iPhone, iPod touch then 7.x and repeat. This would also work well with the new format of listing "iPhone 5 GSM" and "iPhone5,1". Let me know your thoughts. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 23:10, 7 March 2014 (UTC)
  +
:+1. Could still overflow (that example already occupies over half of a 1024px wide window), but of course still better than the current format. [[User:Thekirbylover|kirb]] ([[User talk:Thekirbylover|talk]]) 02:37, 8 March 2014 (UTC)
  +
::I have taken a screenshot of what it will look like with the current suggestions [http://imgur.com/9UNiwuH here]. This will be completed on the 15th March if nobody objects.--[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 01:12, 9 March 2014 (UTC)
  +
:::This has been completed. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 10:11, 15 March 2014 (UTC)
  +
  +
== [[Internal Firmware]] Keys ==
  +
  +
Should there be a keys page just for SwitchBoard firmwares that also have NOR dumps/are restore bundles, so that people can decrypt these firmwares (if they have them and don't have a device with the same SoC) and explore files themselves? --[[User:Ilikeiphone123|Ilikeiphone123]] ([[User talk:Ilikeiphone123|talk]]) 16:12, 13 March 2021 (UTC)

Latest revision as of 16:13, 13 March 2021

Archives
 • 2009 • 2010 • 2011 • 2012 • 2013 •

iKeys

I was wondering if anyone had any info on "iKeys". It's mentioned here at the bottom. I'd imagine it's like GenPass but just wondering. Any info is appreciated. --OMEGA_RAZER

Exploit?

Am I to understand that a low level exploit is needed to get the VFDecrypt key? --Shengis14 18:50, 8 October 2010 (UTC)

No, that's not completely true. :P One has to manage to get the key/IV for a ramdisk, and then use GenPass to get the VFDecrypt key. --dra1nerdrake 21:27, 8 October 2010 (UTC)
How would someone like myself go about geting the key/IV for a ramdisk? --Shengis14 22:13, 8 October 2010 (UTC)
You would need (at the very least) an iBoot exploit and a payload to upload that is able to access the AES engine of the device. --OMEGA RAZER 22:16, 8 October 2010 (UTC)
It's just that one of the reasons I'm confused is why there is a sudden jump in the number of keys for the iPod touch 3G on 4.0-4.1?
There isn't an exploit that is iBoot level or lower for that device. --Shengis14 22:50, 8 October 2010 (UTC)

New page?

I think we should make a new page detailing how to utilise Gojohnnyboi's AES payload to get the keys including screenies on opening up an img3 in a hex editor and getting the KBAG etc. Then the keys won't be left to the main devs and iH8sn0w to post. Then all these beta FWs can be decrypted faster and more keys can be posted. I myself would definitely be interested in getting the KBAG etc. and if anybody could create such a page then I would definitely be interested in posting keys myself. Once created the page shouldn't need too much housekeeping either since the process won't change until IMG4 comes along which I will dread :P Who's up to it?? blackthund3r 11:43, 20 October 2010 (UTC)

New table format.

I was thinking, because the tables do not fit into the normal view (7.x beta's for example), maybe we could think of a new design. I had an idea of maybe using device tables, so we could have something like the below (of course we would have a beta and public sections and all devices would be added);

iPhone (As a heading, since actually adding this would break the topic, making it two.)

Date Build iPhone 4 iPhone 4S iPhone 5
iPhone3,1 iPhone3,2 iPhone3,3 iPhone5,1 iPhone5,2
10 Jun 2013 11A4372q 7.0b 7.0b 7.0b 7.0b 7.0b 7.0b
24 Jun 2013 11A4400f 7.0b2 7.0b2 7.0b2 7.0b2 7.0b2 7.0b2
8 Jul 2013 11A4414e 7.0b3 7.0b3 7.0b3 7.0b3 7.0b3 7.0b3
29 Jul 2013 11A4435d 7.0b4 7.0b4 7.0b4 7.0b4 7.0b4 7.0b4

We would also break this down into .x still, so 6.x Apple TV, iPad, iPad mini, iPhone, iPod touch then 7.x and repeat. This would also work well with the new format of listing "iPhone 5 GSM" and "iPhone5,1". Let me know your thoughts. --iAdam1n (talk) 23:10, 7 March 2014 (UTC)

+1. Could still overflow (that example already occupies over half of a 1024px wide window), but of course still better than the current format. kirb (talk) 02:37, 8 March 2014 (UTC)
I have taken a screenshot of what it will look like with the current suggestions here. This will be completed on the 15th March if nobody objects.--iAdam1n (talk) 01:12, 9 March 2014 (UTC)
This has been completed. --iAdam1n (talk) 10:11, 15 March 2014 (UTC)

Internal Firmware Keys

Should there be a keys page just for SwitchBoard firmwares that also have NOR dumps/are restore bundles, so that people can decrypt these firmwares (if they have them and don't have a device with the same SoC) and explore files themselves? --Ilikeiphone123 (talk) 16:12, 13 March 2021 (UTC)