apple-data 1.0.654 → 1.0.656

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2a9a4557101c6b1cfa93f50f7c8f75553eb4deff64b8566598efcb8d229444f9
-  data.tar.gz: 8b13fc5b491e2cd3713b1cfb83c8318327bb677330a2e15c2b69976160a3a6c6
+  metadata.gz: 030fa8174d371cbce5172af52b8c8f43f7a744e99edb76ea2146172708a71379
+  data.tar.gz: 645a2bb1ae70ffe24633d00f5a46a0fe61759655ab542adcbc5f92bfa4789c59
 SHA512:
-  metadata.gz: a72dffd68298ea36df7094ef1fee1037eefc2bc1b227968b65a1156bc3278e6550a670b91d11149336d8285eb2549b10928e5c837b71bc61827a3ecae981eed4
-  data.tar.gz: be813ddc316539dbaedd7bbec127041fa665c987afb49b697d2874535b3e8ca5d35b4fd0b35b62be9f349e61763a150570769029bb0d15b0951b572896cfadd8
+  metadata.gz: 13545b91451163d67c0a8c7e070a06dbec468579ec025235d036adaded5d73b6f03b23f9a3cff22751130530b456ed8b1f6b06cfc1a10f1b58d34d32f2d9cedf
+  data.tar.gz: 7175850e98af8ba60225c245969112c94c1dd871ec7aa45bb78ee5be59e1d9b1ec3e26b63a9144ed0b1293903611926d08b1366bb259a78788e9fbd4dc6fa272

data/lib/apple_data/asn1_definition.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+module AppleData
+  # An ASN1 definition
+  class ASN1Definition
+    attr_reader :path
+
+    def initialize(path)
+      @path = path
+    end
+
+    def self.all
+      Dir[AppleData.get_path('asn1', '**', '*.asn')].map { |file| File.expand_path(file) }.map { |file| new(file) }
+    end
+  end
+end

data/lib/apple_data/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AppleData
-  VERSION = '1.0.654'
+  VERSION = '1.0.656'
 end

data/lib/apple_data.rb

@@ -10,11 +10,12 @@ module AppleData
   LOADER = Zeitwerk::Loader.new.tap do |loader|
     loader.push_dir(__dir__)
     loader.tag = 'apple-data'
-    loader.inflector.tap do |inflector|
-      inflector.inflect 'dsl' => 'DSL'
-      inflector.inflect 'img4' => 'IMG4'
-      inflector.inflect 'pki' => 'PKI'
-    end
+    loader.inflector.inflect(
+      'dsl' => 'DSL',
+      'img4' => 'IMG4',
+      'pki' => 'PKI',
+      'asn1_definition' => 'ASN1Definition'
+    )
     loader.setup
 
     loader.eager_load_dir(File.join(__dir__, 'apple_data/schemas'))
@@ -22,15 +23,19 @@ module AppleData
 
   DEFAULT_APPLE_DATA_SHARE = File.join(File.dirname(__FILE__), '../share/')
 
-  def get_data(file)
-    YAML.load_file(File.join(@apple_data, file))
+  def self.get_data(file)
+    YAML.load_file(File.join(AppleData.data_location, file))
+  end
+
+  def self.get_path(*parts)
+    File.join(AppleData.data_location, *parts)
   end
 
   def self.data_location=(location)
-    @apple_data = location
+    @data_location = location
   end
 
   def self.data_location
-    @apple_data || AppleData::DEFAULT_APPLE_DATA_SHARE
+    @data_location ||= AppleData::DEFAULT_APPLE_DATA_SHARE
   end
 end

data/share/cryptex.yaml

@@ -0,0 +1,103 @@
+---
+unknown:
+  srtl:
+    title: Security Research Trust List
+  vdrt:
+    title: Virtual Device Runtime Trust
+team-ids:
+  59GAB85EFG: Xcode
+  9B9BMM756K:
+  ZL6BUSYGB3: Apple News
+  C294W6Q7VB:
+  WWDCDEMO14: WorldWide Developer Confrence 2014
+  XPSUQMMH5W:
+  4GDX6FKXZ3:
+  9JA89QQLNQ: Apple App Site Association (AASA
+  243LU875E5: Podcasts
+  5L582GG73E:
+  J465JVPK26:
+  J7YC8MX52C:
+  5YE77W7KK6:
+  64UH4UY526:
+  CTL9M94Q8X:
+  DK9N2M2GK6: PassKit
+  B32K2C2Y92:
+  8HPC9RB4KE:
+  BDFWW8L6QE:
+  859WDYTPW2:
+  HW8W63F6SA:
+  DUMMYTEAM:
+cryptexes:
+  cryptex1:
+    generic:
+      types:
+        dctg:
+      supplemental:
+        types:
+          dctg:
+    preboot:
+      app:
+        types:
+          acrt:
+      os:
+        types:
+          scrt:
+    safari-downlevel:
+      types:
+        acrt:
+    boot:
+      os:
+        types:
+          scrt: System Cryptex Runtime Trust
+      app:
+        types:
+          acrt: Application Cryptex Runtime Trust
+  global:
+    pdi:
+      types:
+        srtl:
+    bootability-brain:
+      types:
+        bbrt: Bootability Brain Runtime Trust
+    install-assistant:
+      types:
+        srtl:
+    ota-update-brain:
+      types:
+        srtl:
+  personalized:
+    supplemental-ephemeral:
+      types:
+        srtl:
+    supplemental-persistent:
+      types:
+        srtl:
+    ephemeral-cryptex:
+      types:
+        srtl:
+    cryptex-research:
+      types:
+        srtl:
+    mobile-asset-code:
+      types:
+        dctg:
+    mobile-asset-brain:
+      types:
+        bart:
+    engineering-root:
+      types:
+        srtd:
+    trust-cache:
+      type:
+        srtl:
+    pdi:
+      type:
+        srtl:
+    ddi:
+      types:
+        vdrt:
+        srtl:
+metadata:
+  description:
+  credits: []
+  collections: []

data/share/curves.yaml

@@ -0,0 +1,8 @@
+---
+credits:
+- rickmark
+- https://std.neuromancer.sk
+metadata:
+  description:
+  credits: []
+  collections: []

data/share/fdr.yaml

@@ -110,7 +110,7 @@ fdr_properties:
   eeid:
     description: eSIM Embedded ID (EID)
   esdm:
-    description: Extended Security Domain Fuse
+    description: Effective Security Domain Mode
   fCfg:
     description:
     contexts:

data/share/img4.yaml

@@ -110,6 +110,7 @@ types:
       are object specific.
     common_properties:
       DGST:
+        title: Object Digest
         description: The cryptographic digest of the object
         name: Digest
       EKEY:
@@ -223,6 +224,8 @@ lpol_properties:
     access:
       write:
       - macOS
+  c1md:
+    title: chip cryptex1 mobile asset dfu ap
   coih:
     title: CustomOS Image4 Manifest Hash (coih)
     description: The `coih` is an SHA384 hash of CustomOS Image4 manifest. The payload
@@ -399,10 +402,8 @@ lpol_properties:
     description: Secure Multi-Boot 3 - DEP-allowed MDM Control
   smb5:
     description: Unknown - but known to exist in Factory signing
-  snuf:
-    description: Staged Nonce For Update Firmware
   spih:
-    title: Supplimental Image Hash
+    title: Cryptex1 manifest Hash
     description: Cryptex1 Image4 Hash (supplimental image hash)
   tbmr:
   tbms:
@@ -464,7 +465,7 @@ cryptex_properties:
     roots:
     - ExtraContent
   snuf:
-    title: Software Nonce for Update Firmware
+    title: Software Update Freshness Nonce
     description: SoftwareNonceForUpdateFreshness
   styp:
     title: Cryptex Subtype
@@ -620,10 +621,10 @@ manifest_properties:
   LNCH:
     description: Local Policy Next Cryptographic Hash
     name: ApLocalNonceHash
+  META:
+    title: Metadata
   Mod#:
     title: Model ID
-  mlb#:
-    title: Main Logic Board Serial
   RNCH:
     description: Remote Nonce Cryptographic Hash
   RSCH:
@@ -647,6 +648,8 @@ manifest_properties:
     description: Security Mode
   SNON:
     description: SEP Nonce
+  SPAY:
+    title: SysCfg Payload
   SrNm:
     description: Unit Serial Number
     manifest: true
@@ -672,7 +675,7 @@ manifest_properties:
     description: Apple Connect ID (AppleInternal)
     type: integer
   esdm:
-    description: Extended Security Domain Mode
+    description: Extended Security Domain
     type: integer
     alias:
     - esdm-fuses
@@ -708,12 +711,14 @@ manifest_properties:
   lpol:
     description: Local Policy
   manx:
+  mlb#:
+    title: Main Logic Board Serial
   mmap:
     description: Memory Map
   nsih:
     description: Next Stage Image4 Hash
   nsph:
-    description: Next Stage pre-boot splat manifest hash
+    description: prospective cryptex1 manifest hash
   oppd:
     title: Owner Password Permission Delegation
   prtp:
@@ -764,7 +769,7 @@ manifest_properties:
     description: SHA2 os some kind - sep/system subject key identifier?
     type: binary
   stng:
-    description: Cryptex1 Generation / Cryptex type?
+    description: Prospective Local Policy Generation
   svrn:
     description: Server nonce
   tatp:
@@ -772,10 +777,6 @@ manifest_properties:
     name: Ap,TargetType
     roots:
     - ManifestKey-DataCenter
-  META:
-    title: Metadata
-  SPAY:
-    title: SysCfg Payload
   uidm:
     description: UID Mixing (Entanglement)
     type: boolean
@@ -1080,24 +1081,34 @@ objects:
   xsys:
     description: x86 System Root Hash
 img4_tags:
+  0Cfg:
   ADCL:
     description: Apple Display Calibration
+  ADDA:
+  AMNM:
+    title: Allow Mix-n-Match
   BCAL:
     title: Bluetooth Calibration
+  BICS:
   BLDS:
     description: Boot LocalPolicy Digest String?
+  BNCH:
+    title: Boot Nonce
   BNCN:
     title: Board Nonce
   BTBF:
     title: Bluetooth Taurus Calibration Data
   CBAT:
     title: Charger Input Limit Calibration
+  CEPO:
+    title: Certificate Epoch
   CLHS:
     description: Chained LocalPolicy Hash String
-  SDOM:
-    title: Security Domain
   Coor:
     title: Country of Origin
+  Csta:
+  DGST:
+    title: Object Digest
   DPCl:
     title: Primary Calibration Matrix
   DPRO:
@@ -1114,33 +1125,44 @@ img4_tags:
   EKEY:
     title: Effective Key Type
   EPRO:
-    title: Effective Promotion Value
+    title: Effective Production Status
   ESEC:
-    title: Effective Security
+    title: Effective Security Mode
   GLCl:
     title: Gamma Tables Calibration
   GYTT:
     title: Gyroscope Temperature Calibration
+  HMHC:
+    title: Chained Manifest Hash
+  HmCA:
+  HmCl:
+  LCfg:
+  LPEM:
   MLB#:
     title: Main Logic Board Serial Number
   MdlC:
     title: Model Configuration
   PAYP:
     description:
+  PRST:
   PRTT:
     title: Pressure Temperature Compensation Table
   PxCL:
     title: Proximity Calibration Data
   RMd#:
     title: Regional Model Number
-  DGST:
-    title: Object Digest
+  Rcvr:
+  SDOM:
+    title: Security Domain
+  SPAY:
   SPTM:
     description: Secure Page Table Monitor
   SpTS:
     title: Speaker Thiele-Small Parameters
   SwBh:
     title: Software Behaviour (GreenTea)
+  TBIC:
+  UCAL:
   WCAL:
     title: Wireless Calibration
   ache:
@@ -1150,18 +1172,47 @@ img4_tags:
   aciw:
     description:
   adba:
+  add2:
+    title: Chip AP DDI SHA2 384
   ader:
     description:
   agfi:
     description:
+  am1d:
+    title: cryptex1 mobile asset dfu
   anid:
   anrd:
     description: Apple Notarized Ram Disk
   aofi:
     description: Always on Firmware Image
+  ap00:
+    title: Chip AP Software FF00
+  ap01:
+    title: Chip AP Software FF01
+  ap06:
+    title: Chip AP Software FF06
+  apc0:
+    title: Chip AP Cryptex0
+  apd2:
+    title: Chip AP PDI SHA2 384
+  apdc:
+    title: Chip AP ACDC
+  apin:
+  apkc:
+    title: Chip AP KCInstall
+  apln:
+    title: Chip AP Local Prospective
   apmv:
     title: OS Version
     description:
+  aprd:
+    title: Chip AP Reduced
+  aps2:
+    title: Chip AP SHA2 384
+  apsr:
+    title: AP Security Research Cryptex Nonce
+  aptk:
+    title: AP Ticket
   arms:
     title: ARM Size
   ater:
@@ -1170,39 +1221,94 @@ img4_tags:
     description:
   auac:
     description:
+  bCfg:
   batf:
     title: Battery Firmware
   berb:
-  time:
-    title: Timestamp
   bles:
     description:
+  bmfh:
+    title: Boot Manifest Hash
+  boid:
+    title: Boot UUID
+  c1ab:
+    title: Chip Cryptex1 Asset Brain
+  c1ai:
+    title: Chip Cryptex1 Mobile Asset Code Installer AP
+  c1am:
+    title: Chip Cryptex1 Mobile Asset
+  c1br:
+    title: Chip Cryptex1 Boot Reduced
+  c1bt:
+    title: Chip Cryptex1 Boot AP
+  c1bv:
+    title: Chip Cryptex1 Boot Verification
+  c1fs:
+    title: Chip Cryptex1 Safari Downlevel
+  c1g0:
+    title: Chip Cryptex1 Generic Cryptex0
+  c1gn:
+    title: Chip Cryptex1 Generic AP
+  c1nb:
+    title: CHIP_CRYPTEX1_BOOT_AP_PROSPECTIVE
+  c1rp:
+    title: Chip Cryptex1 Reduced Prospective
+  c1sm:
+    title: Cryptex1 simulator
+  c1v2:
+    title: Chip Cryptex1 Boot VMA2
+  c1vn:
+    title: Chip Cryptex1 Boot VMA2 Clone
+  c1vr:
+    title: Chip Cryptex1 Boot Boot AV Reduced Verification
+  c1vv:
+    title: Chip Cryptex1 Boot VMA2 Verification
+  cCfg:
+  cLTH:
   cfel:
     title: CFELoader
     description:
     firmware_name: CFELoader
+  ciof:
   cker:
     description: Chained Kernel for Recovery
     recovery: true
   ckih:
     description: Chained Kernel Image4 Hash
+  clas:
+    title: Cryptex1 product class
   clid:
     description: Class Identifier
   cmsv:
     description:
+  cnch:
+    title: cryptex1 boot nonce hash
+  cncn:
+    title: Cryptex1 boot nonce
   cphy:
     title: USB-C Physical Controller
+  cptx:
+    title: srdp cryptex
+  dBIC:
   dCfg:
     title: Device Configuration
+  dLTH:
+  dPSF:
+  dSrc:
   dali:
     description:
   data:
     description:
+  dcpf:
   diag:
     description: Diagnostic (AHT) Image
     firmware_name: Diags
   disk:
     description:
+  dvdi:
+    title: Developer Disk Image
+  eCfg:
+  edcp:
   efib:
     description: EFI Bootloader
   eg0n:
@@ -1220,6 +1326,9 @@ img4_tags:
   eply:
   esca:
     description: Emulated System Certificate Authority
+  faus:
+  fdr1:
+  fdr2:
   fdrs:
     description: Factory Debug Recovery System
   fdrt:
@@ -1229,7 +1338,8 @@ img4_tags:
   file:
     description:
   fpgt:
-    description:
+    description: Factory Pre-Release Global Trust
+  fsca:
   ftot:
     description: Factory Trust Operations Test
   fuos:
@@ -1241,6 +1351,8 @@ img4_tags:
     description:
   glyc:
     description: Gyroscope Calibration
+  gmdp:
+    title: Personalized Disk Image
   gtcd:
   gtgv:
   hash:
@@ -1258,16 +1370,35 @@ img4_tags:
     description: Hypervisor OS Partition 0 (`dom0`)
   hypr:
     description: Hypervisor Related
+  i4ct:
+    title: Image4 Certificate Type
   iCCl:
     title: iCloud Activation Lock Clear
+  iLAC:
+  idia:
   ienv:
     description: Install Environment?
+  ifw1:
+  ifw2:
   inst:
     title: Key Instance
   isor:
     description:
   itst:
     description: Installer Test?
+  jCfg:
+  kcrf:
+    name: Kernel Cache Read-Only File Offset
+  kcrz:
+    name: Kernel Cache Read-Only File Size
+  kcwf:
+    name: Kernel Cache Write File Offset
+  kcwz:
+    name: Kernel Cache Write File Size
+  kcxf:
+    name: Kernel Cache Execute File Offset
+  kcxz:
+    name: Kernel Cache Execute File Size
   kdlv:
     description: Kernel Linker Version
   lamo:
@@ -1276,11 +1407,17 @@ img4_tags:
     description: Locker - Used for Effaceable Storage end Obliteration
   lcrt:
     title: Lynx Certificate
+  lnch:
+    title: Cryptex1 live nonce hash
+  lndm:
+    title: Nonce Domain
+  lpbt:
   lphp:
     description: Local Policy Hash Protection?
   lpol:
   ltrs:
     description: Local TrustStore Recovery System?
+  mCfg:
   manx:
     description:
   ment:
@@ -1299,6 +1436,9 @@ img4_tags:
     title: Machine Specific Register Filter
   name:
     description:
+  ndom:
+    description: Nonce Domain
+  nefw:
   nrde:
     description: Native Ramdisk Environment
   nsrv:
@@ -1336,12 +1476,19 @@ img4_tags:
     description: Encrypted Private Key / Private Key Info / Private Recovery Identity?
   prot:
   ptrp:
+  rLAS:
   rbmt:
     description: Restore Boot Monitor?
     firmware_name: RBM
   rddg:
     description: Ramdisk for Debugging
   refk:
+  ros0:
+  ros1:
+  ros2:
+  ros3:
+  rsch:
+    title: Research Mode
   rspt:
     title: Restore Secure Page Table Monitor
   rtpf:
@@ -1378,8 +1525,15 @@ img4_tags:
     description:
   tics:
     description:
+  time:
+    title: Timestamp
+  tmuf:
+  trxm:
+    title: Trusted Execution Monitor
   tstp:
     title: Testing Product
+  type:
+    title: Cryptex1 Chip Type
   tz0s:
     title: TrustZone EL0 Size
   ucer:
@@ -1392,10 +1546,21 @@ img4_tags:
     description:
   vkdl:
     description: Virtual Kernel Linker
+  vma2:
+    title: Chip VMA2
+  vman:
+    title: Chip VMA2 Clone
+  vnum:
+    title: Long OS Version
+  vpdc:
+    title: Chip VMA2 ACDC
   ware:
     description: VMWare?
+  xDCl:
   xugs:
     description: x64 User System Disk
+  zine:
+    title: Magazine psudo-descriptor
 der:
   uikp:
     description: UIK Public

data/share/keys.yaml

@@ -12,9 +12,7 @@ derrived_keys:
   2101:
     type: uid
     data: 1334440654591915542993625911497130241
-    description: 'Used for data protection.
-
-      '
+    description: Used for data protection.
   2102:
     type: uid
     data: 1192299414131223233912285359034425728
@@ -44,16 +42,12 @@ derrived_keys:
   2202:
     type: uid
     data: 291263742049262950426416465193106933345
-    description: 'Used on A4 devices. A device-specific key. It is used to encrypt
+    description: Used on A4 devices. A device-specific key. It is used to encrypt
       the SHSH blobs on the device.
-
-      '
   2203:
     type: uid
     data: 32226505706565189832158137978565999945
-    description: 'It is used to encrypt the data partition key.
-
-      '
+    description: It is used to encrypt the data partition key.
   2211:
     type: uid
     mode: AES-256-CBC

data/share/pki.yaml

@@ -108,7 +108,8 @@ oids:
     found_in:
     - ucrt
     - dcrt-oid
-    symbol: oidAppleImg4ManifestCertSpec
+    symbols:
+    - CTOidItemAppleImg4Manifest
     issuers:
     - Basic Attestation User Sub CA2
     - FDRDC-UCRT-SUBCA
@@ -143,8 +144,6 @@ oids:
   1.2.840.113635.100.6.1.4:
     apple_description: Apple World Wide Developer Relations Certificates for Code
       Signing GM from developer to Apple
-  1.2.840.113635.100.6.8:
-    name: appleImg4Manifest
   1.2.840.113635.100.6.16:
     name: appleSecureEnclaveFDRCommands
     description: A sequence of FDR programming commands, seperated by ";".  Each command
@@ -263,6 +262,8 @@ oids:
   1.2.840.113635.100.6.71.1:
     description: Made for iDevice (MFi) - Authentication v4 - Apple Accessory Properties
       Extension
+  1.2.840.113635.100.6.8:
+    name: appleImg4Manifest
   1.2.840.113635.100.6.9:
     title: appleSomeSHA256Hash
   1.2.840.113635.100.7.1.1:

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: apple-data
 version: !ruby/object:Gem::Version
-  version: 1.0.654
+  version: 1.0.656
 platform: ruby
 authors:
 - Rick Mark
@@ -92,6 +92,7 @@ extra_rdoc_files:
 files:
 - README.md
 - lib/apple_data.rb
+- lib/apple_data/asn1_definition.rb
 - lib/apple_data/data_file.rb
 - lib/apple_data/dsl/collection_definition.rb
 - lib/apple_data/dsl/data_file_definition.rb
@@ -123,6 +124,8 @@ files:
 - share/coprocessor.yaml
 - share/cores.yaml
 - share/credits.yaml
+- share/cryptex.yaml
+- share/curves.yaml
 - share/debug.yaml
 - share/defaults.yaml
 - share/device_tree.yaml