Saving blobs is crucial for anyone interested in downgrading their devices. It's the key to downgrading iOS to an unsigned version, allowing you to switch between different iOS releases freely.
For years, Apple tried to prevent this downgrade process with new security measures, including a unique seed (generator) and nonce called Cryptex1, which was introduced with iOS 16.
Now, with the latest update, TSSChecker supports saving Cryptex1 blobs. You can use the x8A4 tool to encrypt the cryptex seed. Here's how it works: you'll need to dump the 0x8A4 key to encrypt this seed.
Download TSSChecker: Get the Latest Version
Get the latest version of TSSChecker for Linux and macOS. You can download the tool from our website, which links directly to the official source. TSSChecker was never reelased for Windows PCs. There is also available a debug version for researchers. The new releases add Cryptex1 blob saving support!
TSSChecker is a tool designed to check the TSS signing status for various combinations of Apple devices and firmware versions. It supports a wide range of devices, including Apple TV, Apple Watch, HomePod, iPad, iPhone, iPod touch, M1 Macs, and the T2 Coprocessor.
With TSSChecker, you can retrieve lists of supported devices along with their corresponding firmwares and OTA (Over-The-Air) versions for any specified Apple device. You can check the signing status of any firmware version by providing either the firmware version or a BuildManifest.
Although it works without specifying device-specific values, it can also save blobs when provided with an ECID and the --print-tss-response option, though there are more specialized tools for this purpose.
Beyond merely checking firmware signing status, TSSChecker is useful for exploring Apple's TSS servers. By fully utilizing its customization options, you might uncover previously unsigned combinations of devices and firmware versions that are now being signed. TSSChecker v434 adds Cryptex1 blob saving support.
Cryptex1 Blobs: Encrypting Protocol by Apple
iOS 16 introduced a new component named Cryptex1, which comes with its own seed (generator) and nonce. This seed is intricately entangled even on devices equipped with A10(X)/A11 chips, utilizing the 0x8A4 key.
To interact with Cryptex1, a jailbreak is necessary to both save and utilize cryptex blobs. You'll need the checkm8 exploit to work with these blobs in the first place. If your device is jailbroken, you can employ the x8A4 tool to encrypt the cryptex seed. The process involves dumping the 0x8A4 key to prepare for encrypting the seed.
Kuba has over 20 years of experience in journalism, focusing on jailbreak since 2012. He has interviewed professionals from various companies. Besides journalism, Kuba specializes in video editing and drone flying. He studied IT at university before his writing career.
Saving blobs is crucial for anyone interested in downgrading their devices. It's the key to downgrading iOS to an unsigned version, allowing you to switch between different iOS releases freely.
For years, Apple tried to prevent this...
Creating compelling product demos is a powerful way to engage potential customers and showcase your product's value. In today’s visually-driven world, having an eye-catching and professional-looking product demo can set your brand apart. CapCut desktop...
SkyNet has gained prominence for their iCloud bypass tools, both with and without signal support, catering to iPhones. Recently, they released a new Windows utility called SkyNet Purple Configurator absolutely...
