Really interesting link: http://code.google.com/p/iphone-elite/wiki/8900decryptercode
This code doesn't work, because I was wrong: the struct fields do not match... However I found something interesting: WTF.x1223.RELEASE.dfu[0x00 : 0x40] SHA = 71 17 1F 4F 29 96 AD 49 B4 8A BF E0 A9 C7 1A 1C 19 24 21 AC WTF.x1223.RELEASE.dfu[0x40 : 0x54] Content = 4D BC CE 2E 72 E0 C1 8D 59 E9 31 39 D7 57 79 71 19 24 21 AC Have you seen the last 4 bytes? Identical. So I xored the digest with the second value, removed the ending zeros and tried RC4 / AES decryption (in various way), but the resulting file seems incorrect. I also tried without removing the ending 0s without success. (There's the possibility that I made something wrong while coding in python, too) >From what I read, the 8900 format depends on some static value in the firmware (IV in particular)... I hope this is not the iPod case. I also found this link while searching on google: http://rs12.rapidshare.com/files/101234522/S5L8700X-DS.pdf (not yet read it... it's 10MB, too much for me :D) 3mpty _______________________________________________ Linux4nano-dev mailing list [email protected] https://mail.gna.org/listinfo/linux4nano-dev http://www.linux4nano.org
