Prometheus

Prometheus is a tool that can be used to upgrade/downgrade unsigned iOS versions on 64-bit devices.

Requirements

• jailbroken 64-bit device (except iPhone 5s and iPad Air that generate the same nonce multiple times
• SHSH2 saved with tsschecher

FAQ

This FAQ guide was written by tihmstar.

Q: What iOS's does it support? A: Prometheus is not really limited to any specifiy iOS. promethues itself is the idea to restore a firmware by using replayed tickets and upgrading sep+baseband. futurerestore allows you to select an ios and apticket which is being used during restore, as well as baseband and sep which will get a fresh ticket and also restored. Right now it only makes sense to restore to iOS 10.x firmware, as the iOS 10 SEP does not work with iOS 9 (and probably lower). You need to be careful though, because if apple stops signing iOS 10.2 and lets say iOS 10.3 SEP is not compatible with 10.1.1 anymore, than you can't even really restore to 10.1.1

Q. Do I need to be currently jailbroken? A: If you're jailbroken (with tfp0) you can use the generator method. This allows you to put a generator to nvram to force generate a specifiy APNonce. This makes it really convinient to make the device generate the same APNonce which is also inside your APTicket. (in case you know the generator for that nonce). I personally did run noncestatistics to figure out what nonce is generated the most on my iPhone5s (this only works with devices which do have collisions). Then i requested an 10.1.1 ticket for that specific nonce while it was signed. So now i can use the reboot-until-nonce-matches method for restoring my iPhone5s. If you didn't do all this, you probably can't restore without a jailbreak

Q. Which jailbreaks support TFP0? A: Afaik ios 7 and ios 8 have tfpo, iOS 9.1 by pangu has host_get_special_port and qwerty's jbme has host_get_special_port. the 10.x has tfp0

Q. What devices are supported? A: In theory all 64bit device should be supported. Right now iPhone7 and iPhone7+ are not supported, but that is something which could probably be fixed with an update. Also there are some bugs in futurerestore, but once everything is ruled out, all 64bit device should be supported. Right now i have no plans in testing 32bit, but i think that the method could work with 32bit. If someone wants to adjust futurerestore for 32bit, go ahead, sourcecode is on github

External links

tutorial
tihmstar's talk
noncestatistics