Talk:Firmware Keys/2009

Comments from deleted page VFDecrypt Keys: 3.x (BETA)

What's about ramdisk decrypt keys for beta 1? --The preceding unsigned comment was added by Cartman (talk) 15:22, April 15, 2009. Please consult this page for more info on how to sign pages, and how to fix this.

There were no ramdisk decrypt keys for beta 1, beta 1 firmware files were not encrypted, only wrapped in an IMG3 container with no encryption.--Cool name 15:39, 15 April 2009 (UTC)

James

James, would you mind explaining this last edit for me? I don't see any problem with leaving the iPod touch & iPhone 3G keys both on the page....--The preceding unsigned comment was added by Cool name (talk) 01:02, April 17, 2009. Please consult this page for more info on how to sign pages, and how to fix this.

Those are the ramdisk keys and they're exactly the same. They have always been the same and I was waiting for someone to post another model and confirm that. The only model that will have different keys will be the iPod 2G, which I should really edit in. --James 01:51, 17 April 2009 (UTC)

Ahh, my bad with that. I didn't realize they were the same keys :P Feel free to edit the page however you want --Cool name 02:08, 17 April 2009 (UTC)

Octothorpe

Why cleanup the ramdisk keys? They are split into bytes on the 2.x page also, so changing them just makes formatting inconsistent. I can why the rest of the changes were needed though. --James 03:55, 18 April 2009 (UTC)

I like them not separated, I only did that at first because I was lazy. --The preceding unsigned comment was added by Geohot (talk) 05:46, April 18, 2009. Please consult this page for more info on how to sign pages, and how to fix this.

Well, it's all corrected now on the 2.x page. If anyone has a problem, feel free to revert. --James 09:40, 18 April 2009 (UTC)

@Octothorpe: thanks for moving this page, I thought about doing it earlier, i'm just a lazy bastard --posixninja 02:23, 18 June 2009 (UTC)

@OmegaRazor: about VFDecrypt Keys: 3.x, not VFDecrypt Keys: 3.x BETA, chronic has a better idea about orginizing the key/iv for each firmware, see Kirkwood_7A341_(iPhone_3G) so this page will probably be deleted in the future. also you didn't really explain how the kbag key was used, or mentions GIDecrypt --posixninja 14:57, 18 June 2009 (UTC)

all these keys are over at Kirkwood 7A341 (iPhone 3G) and Kirkwood 7A341 (iPod touch 2G) --The preceding unsigned comment was added by posixninja (talk) 15:51, June 21, 2009. Please consult this page for more info on how to sign pages, and how to fix this.

Would you please post vfdecrypt keys for 3.1 beta firmware? --Redart

Here they are:

2G: dd832e7ce186077bf0b4c5934c1b38b6d55c01c1f04e1ffde721792b1fe06e68e1125f29

3G: f526d42d44dcf61dadf5a0b4be7eb18dafd66c88ec6d91e3ac2f08d3179b63ce64108530

Not sure where is the proper place to put them.... --Redart

How did you get these anyways? I didn't even look into it until today, and you certainly didn't use any of our tools as they're all broke as of 3.1. I'm just curious, i've noticed a couple people posting fsroot keys while genpass has been broke for awhile, is there another group out there making their own private tools or something? --posixninja 18:50, 10 July 2009 (UTC)

The man who got them said that he used GenPass. I assume that he is the one who made custom quickPwns for 3.0 betas from Russia. --Redart

This vfdecrypt key for iPod Touch 2G 3.1 Beta Software doesn't work for me.I'm trying it on iPod2,1_3.1_7C97d Software Please post another vfdecrypt key.Thanks. --The preceding unsigned comment was added by Delstam (talk) 08:04, August 3, 2009. Please consult this page for more info on how to sign pages, and how to fix this.

S5L8900

Obviously, the iPod touch 1G runs the 8900, but are the keys the same? To decrypt the KBAG, I run:

echo "key" | openssl enc -d aes-128-cbc -K 5F650295E1FFFC97CE77ABD49DD955B3 -iv 0

But I get an error:

bad decrypt
3590:error:0606506D:digital envelope routines:EVP_DecryptFinal_ex:wrong final block length:evp_enc.c:454:

It's probably a syntax error, but I don't know. --The preceding unsigned comment was added by [[User:{{{1}}}|{{{1}}}]] ([[User talk:{{{1}}}|talk]]). Please consult this page for more info on how to sign pages, and how to fix this.

Yeah, you'll always get that error. Although, you should probably enter the KBAG into a file and pass that into OpenSSL, but you are on the right tack! --posixninja 02:10, 18 June 2009 (UTC)