apple-data 1.0.653 → 1.0.655

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 482821ec962f4b074c21d5f0af855bb40a9c184abc02896489e825a882bafb65
-  data.tar.gz: d0f6b9232b2be836b4062ac088e75725437f703b093e7a511f1a9d9cc1c13e6e
+  metadata.gz: dd195565f6a763dd7e17ea456f1a44eb8ddb894c6b36cd6753faac16c777af40
+  data.tar.gz: 84c0d2fa71fa5f150e4b0e257ca44f53e4b613e700f6652a833f08e0f59ed353
 SHA512:
-  metadata.gz: ce1b5bcdfc7b2484efe583a56d171dd2ef7b9c71774e60d51cdc08fae9e8c8cb7f14279f26f195d0a646643e5b0324ad8c6c569f6f1a69bc42c27283105043bb
-  data.tar.gz: f2d9137bbafb0ff882773a591bc98c73bfe4459a4933b3da1c70c0e7b36be78aad5219ec51197e7bfef16322a8c6f35ee9f7ae6f79c57c70a907298d0882567a
+  metadata.gz: 77f9f3c7f763cba126c1001d415933b4e3ca2fad2ad4246c759f5c929e0d371028d456888492d8118f418dae15911792e847c9c7ab68b6241542aeaeaf9fe787
+  data.tar.gz: 804f30a89390ed1d21cff30d6710ff1367dc4db08311a5624bb7599070570caf9d34f1a6c0224aa72c53b5d88c04643d060c64c8aacf0ee1bd7e89477cb97282

data/lib/apple_data/asn1_definition.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+module AppleData
+  # An ASN1 definition
+  class ASN1Definition
+    attr_reader :path
+
+    def initialize(path)
+      @path = path
+    end
+
+    def self.all
+      Dir[AppleData.get_path('asn1', '**', '*.asn')].map { |file| File.expand_path(file) }.map { |file| new(file) }
+    end
+  end
+end

data/lib/apple_data/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AppleData
-  VERSION = '1.0.653'
+  VERSION = '1.0.655'
 end

data/lib/apple_data.rb

@@ -10,11 +10,12 @@ module AppleData
   LOADER = Zeitwerk::Loader.new.tap do |loader|
     loader.push_dir(__dir__)
     loader.tag = 'apple-data'
-    loader.inflector.tap do |inflector|
-      inflector.inflect 'dsl' => 'DSL'
-      inflector.inflect 'img4' => 'IMG4'
-      inflector.inflect 'pki' => 'PKI'
-    end
+    loader.inflector.inflect(
+      'dsl' => 'DSL',
+      'img4' => 'IMG4',
+      'pki' => 'PKI',
+      'asn1_definition' => 'ASN1Definition'
+    )
     loader.setup
 
     loader.eager_load_dir(File.join(__dir__, 'apple_data/schemas'))
@@ -22,15 +23,19 @@ module AppleData
 
   DEFAULT_APPLE_DATA_SHARE = File.join(File.dirname(__FILE__), '../share/')
 
-  def get_data(file)
-    YAML.load_file(File.join(@apple_data, file))
+  def self.get_data(file)
+    YAML.load_file(File.join(AppleData.data_location, file))
+  end
+
+  def self.get_path(*parts)
+    File.join(AppleData.data_location, *parts)
   end
 
   def self.data_location=(location)
-    @apple_data = location
+    @data_location = location
   end
 
   def self.data_location
-    @apple_data || AppleData::DEFAULT_APPLE_DATA_SHARE
+    @data_location ||= AppleData::DEFAULT_APPLE_DATA_SHARE
   end
 end

data/share/img4.yaml

@@ -173,24 +173,6 @@ types:
           with a `secb` object with a `trst` object), `rssl` (Factory SSL root CA),
           `rvok` (Revocation list) and `trpk` (trusted public keys?)
 lpol_properties:
-  AMNM:
-  BNCH:
-  BORD:
-  CEPO:
-  CHIP:
-  CPRO:
-  CSEC:
-  DGST:
-    title: Hash Digest
-  DPRO:
-  DSEC:
-  ECID:
-  EPRO:
-  ESEC:
-  LCST:
-  LNCH:
-  RNCH:
-  SDOM:
   auxi:
     title: Auxiliary Image4 Manifest Hash (`auxi`)
     description: After the system verifies that the UAKL hash matches what’s found
@@ -241,11 +223,6 @@ lpol_properties:
     access:
       write:
       - macOS
-  bat0:
-  bat1:
-  batf:
-  chg0:
-  chg1:
   coih:
     title: CustomOS Image4 Manifest Hash (coih)
     description: The `coih` is an SHA384 hash of CustomOS Image4 manifest. The payload
@@ -257,12 +234,8 @@ lpol_properties:
     access:
       write:
       - 1TR
-  diag:
-  dtre:
   gaid:
     description: Gaia Authentication ID (Apple Internal)
-  glyc:
-  glyp:
   hrlp:
     title: Has recoveryOS Local Policy
     description: The `hrlp` indicates whether or not the `prot` value is the measurement
@@ -275,9 +248,6 @@ lpol_properties:
       - 1TR
       - recoveryOS
       - macOS
-  ibot:
-  illb:
-  krnl:
   kuid:
     title: Key Encryption Key
     description: The kuid indicates the volume that was booted. The key encryption
@@ -296,7 +266,6 @@ lpol_properties:
     description: Local Boot Object.  Indicates that the object is to be used as the
       target of a local boot only and not provided by the server for remote / DFU
       boots.
-  logo:
   lpnh:
     title: LocalPolicy Nonce Hash
     description: The lpnh is used for anti-replay of the LocalPolicy. This is an SHA384
@@ -357,7 +326,6 @@ lpol_properties:
       - 1TR
       - recoveryOS
       - macOS
-  recm:
   rolp:
     description: recoveryOS local policy
     type: boolean
@@ -392,8 +360,6 @@ lpol_properties:
       - 1TR
       - recoveryOS
       - macOS
-  rsep:
-  sepi:
   sip0:
     title: System Integrity Protection (SIP) 0 Status - Overall
     description: The sip0 holds the existing System Integrity Protection (SIP) policy
@@ -433,7 +399,6 @@ lpol_properties:
     description: Secure Multi-Boot 3 - DEP-allowed MDM Control
   smb5:
     description: Unknown - but known to exist in Factory signing
-  snon:
   snuf:
     description: Staged Nonce For Update Firmware
   spih:
@@ -655,7 +620,10 @@ manifest_properties:
   LNCH:
     description: Local Policy Next Cryptographic Hash
     name: ApLocalNonceHash
+  META:
+    title: Metadata
   Mod#:
+    title: Model ID
   RNCH:
     description: Remote Nonce Cryptographic Hash
   RSCH:
@@ -679,6 +647,8 @@ manifest_properties:
     description: Security Mode
   SNON:
     description: SEP Nonce
+  SPAY:
+    title: SysCfg Payload
   SrNm:
     description: Unit Serial Number
     manifest: true
@@ -740,6 +710,8 @@ manifest_properties:
   lpol:
     description: Local Policy
   manx:
+  mlb#:
+    title: Main Logic Board Serial
   mmap:
     description: Memory Map
   nsih:
@@ -762,6 +734,7 @@ manifest_properties:
       Potentially indicates that the policy is for a recovery boot only.
     type: boolean
   rfcg:
+    title: Reconfigure Mode
     type: boolean
   rsch:
     description: research mode
@@ -804,7 +777,7 @@ manifest_properties:
     roots:
     - ManifestKey-DataCenter
   uidm:
-    description: UID Mode (Enabled)
+    description: UID Mixing (Entanglement)
     type: boolean
     roots:
     - ManifestKey-DataCenter
@@ -1123,6 +1096,8 @@ img4_tags:
     description: Chained LocalPolicy Hash String
   Coor:
     title: Country of Origin
+  DGST:
+    title: Object Digest
   DPCl:
     title: Primary Calibration Matrix
   DPRO:
@@ -1158,6 +1133,8 @@ img4_tags:
     title: Proximity Calibration Data
   RMd#:
     title: Regional Model Number
+  SDOM:
+    title: Security Domain
   SPTM:
     description: Secure Page Table Monitor
   SpTS:
@@ -1194,10 +1171,12 @@ img4_tags:
   auac:
     description:
   batf:
+    title: Battery Firmware
   berb:
   bles:
     description:
   cfel:
+    title: CFELoader
     description:
     firmware_name: CFELoader
   cker:
@@ -1287,6 +1266,18 @@ img4_tags:
     description:
   itst:
     description: Installer Test?
+  kcrf:
+    name: Kernel Cache Read-Only File Offset
+  kcrz:
+    name: Kernel Cache Read-Only File Size
+  kcwf:
+    name: Kernel Cache Write File Offset
+  kcwz:
+    name: Kernel Cache Write File Size
+  kcxf:
+    name: Kernel Cache Execute File Offset
+  kcxz:
+    name: Kernel Cache Execute File Size
   kdlv:
     description: Kernel Linker Version
   lamo:
@@ -1397,6 +1388,8 @@ img4_tags:
     description:
   tics:
     description:
+  time:
+    title: Timestamp
   tstp:
     title: Testing Product
   tz0s:

data/share/pki.yaml

@@ -92,7 +92,7 @@ oids:
     symbol: oidAppleSecureBootTicketCertSpec
   1.2.840.113635.100.6.1.15:
     title: IMG4 Manifest Certificate Specification
-    name: appleImg4Manifest
+    name: appleImg4ManifestSpecification
     type: sequence
     description: "Constriction on values that can be specified or signed by this certificate.
       \ Conatins two sub-sequesnces, \nthe MANP (Manifest Properties) and the OBJP
@@ -144,11 +144,13 @@ oids:
     apple_description: Apple World Wide Developer Relations Certificates for Code
       Signing GM from developer to Apple
   1.2.840.113635.100.6.16:
+    name: appleSecureEnclaveFDRCommands
     description: A sequence of FDR programming commands, seperated by ";".  Each command
       is "PUT" or "GET" prior to a 4CC value, followed by a ":" then the value of
       the key.
     example: PUT/FSCl:sik-FXFYFXFFYFFEX-QQRRRDEETFEFYCEIESLIREILCILESCLSELRESERSER
   1.2.840.113635.100.6.17:
+    name: appleKeyInstanceName
     description: Contains the name of the key
   1.2.840.113635.100.6.2:
     title: Apple Security Algorithm
@@ -158,6 +160,7 @@ oids:
   1.2.840.113635.100.6.2.10:
     symbol: oidAppleIntmMarkerAppleSystemIntg2
   1.2.840.113635.100.6.2.12:
+    name: appleIntmMarkerAppleServerAuthentication
     symbol: oidAppleIntmMarkerAppleServerAuthentication
   1.2.840.113635.100.6.2.13:
     symbol: oidAppleIntmMarkerAppleSystemIntgG3
@@ -258,6 +261,10 @@ oids:
   1.2.840.113635.100.6.71.1:
     description: Made for iDevice (MFi) - Authentication v4 - Apple Accessory Properties
       Extension
+  1.2.840.113635.100.6.8:
+    name: appleImg4Manifest
+  1.2.840.113635.100.6.9:
+    title: appleSomeSHA256Hash
   1.2.840.113635.100.7.1.1:
     apple_description: 'Apple FairPlay certificate extended Application Authentication
       & Authorization: Policy'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: apple-data
 version: !ruby/object:Gem::Version
-  version: 1.0.653
+  version: 1.0.655
 platform: ruby
 authors:
 - Rick Mark
@@ -92,6 +92,7 @@ extra_rdoc_files:
 files:
 - README.md
 - lib/apple_data.rb
+- lib/apple_data/asn1_definition.rb
 - lib/apple_data/data_file.rb
 - lib/apple_data/dsl/collection_definition.rb
 - lib/apple_data/dsl/data_file_definition.rb