Save SHSH for all iDevays
SHSH certificate (
Shsh blobs ) - digital signature,
unique to each iDevice , Which is signed by the firmware file before it is poured into the device. SHSH Apple issues a special server (gs.apple.com) in response to the identifier of the device sewn, sent him to iTunes. signing system debuted in the summer of 2009, with the release of iPhone 3GS. Starting with firmware 3.1.1, signing system was extended to the iPod touch 2G and 3G, and since the release of iOS 4.0 SHSH steel subscribe and iPhone 3G. For iPhone 2G, iPod touch 1G, and Apple TV 1G SHSH is not used, so these devices can always flash at any available version of iOS.
The operating principle of this limitation is simple. When you try to downgrade (downgrade firmware), iTunes server communicates with the company Apple and sends him some of the data on your device, including the unique identifier of its chip. The answer comes SHSH certificate is required for the load module (iBoot). If it does not, then iTunes will give an error and will abort the recovery process. If you have saved the certificate for the firmware to which you want to recover, then you will always be able to do it without going through Apple's servers.
Using SHSH in iOS 5
APTicket
Up until the release of iOS 5.0 in the fall of 2011, the availability of SHSH provided a guaranteed opportunity to roll back any gadget to any old version of iOS. But then Apple significantly modified the firmware signing system.
But if before iTunes transferred only the device identifier and the firmware version to the Apple server, then before flashing the iOS device generates a random number, which also participates in the creation of SHSH. This new type is calledAPTicket .
Implications of the APTicket
The consequences were very serious. Previously, SHSH had no shelf life and could be used an unlimited number of times. Starting with iOS 5.0, any SHSH is valid only once. The next time you restart, the iOS gadget generates a new random number, and the old SHSH will no longer work for it. It is almost impossible to decrypt an APTicket — for this, you need to crack the Apple security key, and this can only be done by brute force.
According to the idea of ​​Apple programmers, APTicket will make it impossible to restore any Apple devices to unsigned firmware. However, it is not.
Anti-APTicket checkout
As it turned out, APTicket can also be bypassed, but only on devices with Apple A4 processors and weaker - on iPhone 3G, iPhone 3GS, iPhone 4, iPod touch 3G, iPod touch 4G, iPad 1G and Apple TV 2G. During the firmware of these devices, you can turn off random number generation and force iTunes to accept the old SHSH from the same device.
In addition, in all iOS 5.x firmware found a vulnerability that opens up additional opportunities for rollback firmware even on new Apple devices. iPad 2, iPad 3 and iPhone 4S can be flashed to any version of iOS 5.x from any other version of iOS 5.x under two conditions:
пїЅ You must have SHSH from the version of iOS with which you are flashing and the version of iOS to which you are flashing.
пїЅ The firmware that you have installed should not be installed via an update over the air. If you updated or restored to it through iTunes, then everything is fine.
Is it possible to roll back from iOS 6?
пїЅ iPhone 3GS, iPhone 4, iPod touch 4G and Apple TV 2G can be rolled back from iOS 6 (for Apple TV this is software 5.1) to any old version of iOS provided that you have there is a SHSH from this old version
пїЅ iPad 2 can be rolled back from iOS 6 on iOS 4.3.x provided availability Shsh from fourth firmware
пїЅ iPad 2 can be rolled back from iOS 6 to iOS 5.x while the presence of you Shsh from any firmware iOS 4.3.x and that firmware 5.x to which you want to roll back
пїЅ iPhone 4S and iPad 3 roll back from iOS 6 is impossible , even with all the SHSH. For these gadgets firmware rollback is possible only within iOS 5.x
пїЅ iPhone 5, iPod touch 5G, iPad mini and iPad 4 impossible to roll back with iOS 6 , because iOS 5.x firmware for these devices were not released
Using SHSH in iOS 6
If you have saved SHSH certificates for iOS 6.0 - iOS 6.1.2 in Cydia in order to roll back the firmware to the previous version, we hasten to disappoint you, but the saved data is completely unsuitable for use.пїЅ
Now, if you have a hacked device running iOS 6.0 - iOS 6.1.2, you can no longer downgrade "Saurik reported on its web page.
All SHSH certificates of the latest version of iOS that were stored in Cydia have become useless. . Jay Freeman (aka Saurik) also provides some background information on how SHSH certificates work and what features and new limitations of the SHSH digital certificates blobs and APTickets have appeared.
Saurik removed broken iOS 6 certificates and improved SHSH retentionThe following information is important for every jailbreaker user.
If you own a relatively updated device, iOS 6 SHSH certificates are completely useless. If, before the release of iOS 5.0, the saved SHSH – certificates guaranteed the rollback of the gadget to any previous version of iOS, now this is impossible, since Apple has significantly changed the entire system of firmware signing.
It is impossible to roll back to iOS 6.1.2 or iOS 6.0 from iOS 6.1.3 and higher for devices running on A5 / A5X / A6 / A6X processors .
If earlier, in order to make a downgrade, it was enough to keep SHSH certificates, now, before each firmware, your device generates random numbers, which later take part in the creation of certificates. This type of hash is
APTicket - digital signature.
It is this digital signature that was introduced into the updated iOS 6.1.3 operating system.
Now users will not be able to use iOS 6 SHSH certificates to downgrade or upgrade firmware. .
The user will not even be able to use them to restore the current version of iOS on his device. .
Saurik cites the following data: about 25.8% of jailbreakers suffered from this. The remaining 74.2% of iPhone users (3GS, 4), iPod touch (4G) will have no effect. But, if iOS 6 SHSH – certificates were downloaded locally, by using tools like TinyUmbrella, redsn0w or iFaith, you can roll back from iOS 6.1.3 for iPhone devices (3GS, 4), iPod touch (4G).
Original text ->
http://www.saurik.com/id/15 Who and on what firmwares need to save certificates: пїЅ IPhone owners (3GS, 4, 4S, 5, 5C, 5S, 6, 6 Plus, 6S, 6S Plus, SE), iPod touch (4G, 5G, 6G), iPad (2, 3, 4, Air, Air 2 ), iPad Pro (9.7, 12.9), iPad mini (1, 2, 3, 4) ->for all firmware. Save SHSH is possible only for the latest, current at the moment firmware available on the Apple server!At the moment it is>iOS 10.3.3! Ways to save SHSH
For safety, send certificates to your email!
Using TinyUmbrellaTinymbrellarequires availability
Java Save the certificate. Run TinyUmbrella, then in the upper left corner of the program
Connected choose our device and click ->
Fetch OTA for All .
instruction ->Actual for iPhone (5S, 6, 6 Plus), iPad (Air 2), iPad mini (2, 3) with Jailbreak TinyUmbrella allows you to save certificates (SHSH) from the version of iOS that is installed on your iDevice (with the A7 / A8 processor) regardless of its relevance, this requires the presence of ->
Apple File Conduit “2”from Cydia.
By default, stored certificates are stored:Windows XP - C: \ Documents and Settings \ UserName \ .tu \ .shsh
Windows Vista / 7/8 - C: \ Users \ UserName \ .tu \ .shsh
Mac OS X - ~ / .tu / .shsh
For safekeeping, send the certificate to your email.
[OSX] tinyumbrella_macos_9_3_4.zip (36.88 MB)
[WIN] tinyumbrella_windows_9_3_4.zip (35.74 MB)
[WINx64] tinyumbrella_windows-x64_9_3_4.zip (39.1 MB)
Using iFaith(not relevant for devices with an A7 / A8 processor)iFaithallows you to save certificates (SHSH) from the version of iOS that is installed on your device regardless of its relevance, as well as to keep the latest relevant.
Download certificates from Cydia server and save new ones. ->Actually for all iDevaysLaunch iFaith ->
Show Available SHSH Caches on Server , iFaith recognizes our device and prompts you to select the desired action:
1. To save certificates for the latest, current firmware, select ->
Fetch the latest SHSH blobs Apple is actively signing .
2. If you have certificates that you need to send to Cydia server, select ->
Submit SHSH blobs to Cydia for this device .
3. To save certificates from Cydia server, select ->
Show list of available SHSH blobs on TSS server (s) . iFaith will show available certificates on Cydia server that you can upload ->
Download all available blobs , then save them to the specified location and check.
instruction Extract the certificate. ->Actual for iPhone (3GS, 4), iPod touch (4G)Launch iFaith ->
Dump SHSH Blobs enter the device into
DFU mode, waiting for the end of the process and get a certificate from the installed firmware.
instruction For safekeeping, send the certificate to your email.
Sign the firmware. ->Actual for iPhone (3GS, 4), iPod touch (4G)Launch iFaith ->
Build * signed * IPSW w / Blobs ->
Browse for SHSH blobs specify the path to
* .ifaith, * .shsh, * .plist the file (previously saved certificate), then iFaith will determine for which device, which version of iOS the certificate belongs to and offer to specify the firmware ->
Browse for an IPSW or download firmware ->
Download it for me . iFaith will verify the certificate and firmware. After successful verification, iFaith will offer to create a signed firmware ->
Build ipsw . We are waiting for iFaith to sign the firmware. After creating the firmware, iFaith will offer to enter the device into
DFU mode, then run iTunes (
version required no later than11.0.0 ), hold SHIFT (ALT on Mac OS) + “Restore” and specify the signed firmware
(B5CD_iFaith_iPhone_4-4.3.3_ (8J2) _signed.ipsw) . We are waiting for the end of the firmware, we are happy.
instruction [WIN32] iTunesSetup_11.0.0.exe (83.01 MB)
[WIN64] iTunes64Setup_11.0.0.exe (84.72 MB)
Old topic ->
iFaith[WIN] iFaith-v1.5.9.zip (4.75 MB)
With BeehindBeehindSave the certificate. Run Beehind as administrator ->
Select mode ->
Save SHSH ->
Save SHSH [WIN] beehindBETA_v0.5-1f02db583f13e8b103dfd7e50ff95ca1d356225a.zip (22.79 MB)
Attention!
Rollback for iPhone (4S, 5, 5C, 5S, 6, 6 Plus, 6S, 6S Plus), iPod touch (5G, 6G), iPad (2, 3, 4, Air, Air 2), iPad mini (1 , 2, 3, 4) ->
impossibleeven with SHSH certificates.
Rollback for these devices
impossiblefrom 9.xx to 9.xx, 9.xx to 8.xx, 8.xx to 8.xx, 8.xx to 7.xx, 7.xx to 7.xx, 7.xx to 6.xx, 6 .xx at 6.xx, 6.xx at 5.xx, etc., rollback in any direction
impossible.
Rollbackis availableonly for iPhone (3GS, 4, 4S*), iPad 2*and iPod touch 4G with SHSH certificates.
*exclusively on iOS 6.1.3, using ->OdysseusOTA
Question
I have an iPhone (4S*, 5, 5C, 5S, 6, 6 Plus, 6S, 6S Plus), iPod touch (5G, 6G), iPad (2*, 3, 4, Air, Air 2), iPad mini (1, 2, 3, 4)
With iOS firmware (5.1.1, 6.0, 6.0.1, 6.0.2, 6.1, 6.1.1, 6.1.2, 6.1.3, 7.1, 7.1.1, 7.1.2, 8.x.x, 9.x.x)
All SHSH saved!
Will I be able to roll back to iOS (6.0, 6.0.1, 6.0.2, 6.1, 6.1.1, 6.1.2, 6.1.3, 7.0.6, 7.1, 7.1.1, 7.1.2, 8.xx, 9 .xx)?
Answer
No, you can not! The tool allows you to do this - no!
IOS 6 Certificate Verification
Launch iFaith ->
Build * signed * IPSW w / Blobs ->Browse for SHSH blobs specify the path to the * .ifaith, * .shsh, * .plist file (the previously saved certificate) and see what the program says.
Work certificate Certificate is not working Theme Rules
- In this topic are allForum Rulessavagemessiahzine.com!
- If a forum member gave you good advice that helped you solve your problem, do not post a message with the text “Thank you! You are super !!!thank"by increasing reputation by clicking on the button
If you have less than 15 messages, click on the button.(under reputation) and let us know who helped you, whom to put"+ ".
- Forbidden abuse of quoting (overquoting, overquoting). It is not necessary to quote fully opponent posts - just select the main points and press the button
- Help make the branch cleaner and more useful! UseBy mod - buttons for posting evaluation. Minus: flooding, offtopic, breaking the rules. Plus: useful posts, instructions, etc. So much easier and more convenient to keep the branch clean and tidy.Thank you for understanding!
- Before asking a question,MANDATORYuse the search on the topic in the upper right corner of the page, MANDATORYread the capREPEATEDLY.
- If you have a problem - describe it as you canmore! The more information from you - themorechances that they will help you!
- Messages that contain grammatical and / or syntactic errors can cause a negative reaction from forum members.
Try hardwrite correctly.
- Any post off topic (offtop) or not carrying a meaning (flood), as well as questions, the answers to which are in the cap -will be deleted without warning
Archive
Using redsn0w(currently irrelevant)
redsn0w
Save the certificate.Run redsn0w ->
Extras ->
Shsh blobs ->
New,
instruction(You will need to specify the firmware! If updated via iTunes, there is no need to download again ->
Where does iTunes store firmware?)
redsn0w saves the certificate to the address ->C: \ Users \ UserName \ AppData \ Roaming \ redsn0w \ shsh ->It is advisable to send yourself to the post office for safekeeping.
[OSX]redsn0w_mac_0.9.15b3.zip(17.18 MB)
[WIN]redsn0w_win_0.9.15b3.zip(16.48 MB)
Using 25PP(currently irrelevant)
25PPSave the certificate.Run 25PP ->
, then click on the umbrella ->
, choose our device and click ->
waiting for the end of the process and you will see a list of stored certificates, click ->
A folder with saved certificates will open.
instructionFor safekeeping, send the certificate to your email.
[WIN]ppsetup_2.3.5.4805.exe(19.69 MB)
Using W | NbR3LL @(currently irrelevant)
W | NbR3LL @requires availability
.Net Framwork 4.0Save the certificate.Run W | NbR3LL @ ->
Check blobs, the program will check the presence of previously saved certificates and show the possibility of saving the certificate from the latest, current firmware ->
Latest iOS - Apple, then select the latest version of iOS and click ->
Download from Apple, the certificate will be saved in the folder
Appleblobswith the program.
instructionFor safekeeping, send the certificate to your email.
[WIN]Winbrella_1.3.2.zip(755.21 KB)
Using iSHSHit(currently irrelevant)
->Actual for devices with jailbreakiSHSHitallows you to save certificates (SHSH) directly from your device. This program automatically sends your certificates to Cydia's server, and can also send saved certificates (SHSH) by email. Download and install iSHSHit through Cydia in the repository
Bigbossabsolutely free.
Save the certificate.Launch iSHSHit ->
Firmwarechoose
All versions, we press
Save. After saving certificates ->
Manage shsh, we press
Send Alland send to your email.
Main theme ->
iSHSHit[DEB]ishshit_1.1.5.deb(492.91 KB)
Old hat
Method в„– 1 - After CydiaThe easiest and fastest way.
We go in Cydia, we find the inscription
Make my life easier, thanks! and click on it.
In this case, the certificate is sent to the servers of Saurik (the creator of Cydia) and after that you can breathe a sigh of relief. When you save certificates, on the main page of Cydia should appear
This Device Has a 3.1 / 3.1.2 / 3.1.3 / 4.0 / 4.0.1 ECID SHSH On File If there is an inscription
This device has pendng TSS request - this means that certificates have been sent, but not yet processed.
Processing can take from several minutes to several days.
Method number 2 - Usbview and Umbrella How to get and save ECID in Windows
To obtain an ECID:
1. Enter your device in Recovery Mode
A. Completely turn off the device with the Power button (at the top on the end).
B. Hold the Home button (round, below) and hold it.
C. We connect the USB cable, continue to hold the Home button until the image with the USB cable and iTunes appears.
iTunes should warn you that the iPhone is in recovery mode. Click OK.
2. Download and run
usbview.rar(30.18 KB)
and then in the menu in the "Options" section, select "Config Descriptors" (a check mark will appear next to it).
3. Press on the F5 (update) keyboard and scroll down to the “Apple Recovery (iBoot) USB drive” line, and click on it.
4. Rewrite the 16-digit ECID code.
5. Exit Recovery Mode by holding Home and Power for 10 seconds.
To save ECID:
1. Enter the device in Recovery Mode, connect to the computer and launch iTunes.
2. Download and run
umbrella.zip(4.94 MB)
3. In the ECID field, enter the number obtained above, and in the “SHSH Repository” box, enter Saurik-Cydia.
[attachment = "467725: iPadJailbreak.png"]
4. Click the “Submit” button, the file you need will be saved in the folder with the Umbrella utility.
5. Save and save this file if you do not want to lose the ability to roll back the firmware.
How to roll back the firmware:
1. Open the Hosts file (C: WindowsSystem32driversetchosts), after making it backup.
2. We add at the very bottom 74.208.105.171 gs.apple.com
3. Download the desired firmware, enter the device in DFU or Recovery Mode, then Shif + Restore and select the downloaded firmware.
Do not forget that later it will be necessary to remove the prescribed line in the Hosts file. .
Method number 3 - AutoSHSH RC2 3.1.33.2 (thank
wesStyle )
AutoSHSH RC2 3.1.33.2
Not so long ago, the iH8sn0w team posted an AutoSHSH program on its website, designed to help users
iPod touch 3G ,
iPhone 3GS or
iPad with firmware
3.1.3 and
3.2 It's easy to get SHSH certificates for your firmware and save them to the servers of Saurik (Cydia). The program is an add-on for Umbrella Firmware (thanks
Spuner 'u for opening)
The program is very important due to the release of user-landed DJ
Spirit A small FAQ: Q: And what is this SHSH?
A: This is a set of certificates that allows you to install a specific firmware on a specific device, regardless of Apple's wishes: rolleyes:
Q: And how to use these?
A: Very simple:
[FAQ] Rollback firmware. Q: Is my SHSH suitable for other devices?
A: No, it is issued on a specific device and on a specific firmware.
Using
After launching the program, you will be warned that the program requires an Internet connection and that it can work with only one device connected in Recovery mode.
Next, the program will ask if you have Java RunTime installed on your machine. If there is none, or for some reason you do not know what it is, then click "No". After that, the browser will open and the latest version of the java machine will be downloaded.
In my case, even with the java machine installed, the program gave an error, so I just reinstalled it by clicking "No"After that, transfer your device to Recovery mode.
How to transfer the device to Recovery - mode?
To do this, connect the cable to the device and hold down the lock button with the central key until the device turns off (about 5-7 seconds). Then wait 3 seconds and release the lock button.
After a while, iTunes will report that it has found i * in recovery mode, and the screen will not be lit.
To turn on the device in normal mode, it is enough to hold down the two buttons again until the display lights up
Now you just have to click on the big button "Grab my SHSH Blobs Automattcalyy". After a while, you will be prompted to save your SHSH. I advise you to keep them in a safe place, not on the desktop;)
Everything, now you can not be afraid of updating / restoring the firmware and losing the Jail.
Method number 4 - TinyUmbrella (thank
aristos86 )
Just say, TinyUmbrella
does not upload shsh, but only downloads them, which means that it is useless to choose the firmware for which you
did not have time or could not save SHSH.If you want to get SHSH from the Sidia server, then choose only the firmware that Sidia saved (you can check it in Sidia itself), if you want to get SHSH from Apple, then choose only the latest stable firmware. Another you just will not give up.
Tinymbrella and as it turned out, it helps to upload SHSH files to the Saurik server, i.e. in cydia, from firmware 4.0.
And so here is the mini F.A.Q .:
1. First you need to download TinyUmbrella, and also
install java machine.
2. After downloading and installing JAVA, connect your iPhone 3G / 3GS or iPod Touch 2G to your computer.
3. Now launch TinyUmbrella and click Save My SHSH.
Everything! Now you have SHSH files on Cydia servers, which will be useful if you ever want to downgrade an iPhone 3G / 3GS or iPod Touch 2G from iOS 4 to later firmware 3.1.2 / 3.1.3.
If you click on additional options in the TinyUmbrella interface, you can also save them locally on your computer.
Here is the program itself -
Version 5.01.00 for WindowsVersion 6.01.01 for Win 8 x641/6/01 for MacHere is a JAVA machineJAVA_6.exe(854.28 KB)
Rollback 1. Enter the iPhone (any) in DFU mode
2. Open TinyUmbrella
3. Click "Display SHSH", see if there are SHSH for 4.0 and 4.0.1, if there is no saving them, or if they are saved locally, then just copy SHSH from 4.0 on the path C: Users your account.shsh
4. Click "Start TSS Server", then go to C: WindowsSystem32driversetc open the hosts file using Notepad, if at the very end there is no 74.208.105.171 gs.apple.com, then in the very last line we add or fix it (I had 127.0.0.1 gs.apple.com, corrected the IP and it all worked)
5. Open iTunes 9.2, hold Shift and click Restore.
6. Select iOS 4.0 and wait for the process to finish.
7. After the end of iTunes will generate an error 1015, 1013 or 101, simply click "OK"
8. Switch to TinyUmbrella and click "Kick Device Out of Recovery", or run the RecBoot program and click "Exit Recovery Mode"
That's all.
For windowsFor mac Post has been editedT0ugh - 19.07.17, 22:36Reason for editing: iOS 10.3.3