apple-data 1.0.653 → 1.0.654
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/apple_data/version.rb +1 -1
- data/share/img4.yaml +17 -36
- data/share/pki.yaml +8 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 2a9a4557101c6b1cfa93f50f7c8f75553eb4deff64b8566598efcb8d229444f9
|
|
4
|
+
data.tar.gz: 8b13fc5b491e2cd3713b1cfb83c8318327bb677330a2e15c2b69976160a3a6c6
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: a72dffd68298ea36df7094ef1fee1037eefc2bc1b227968b65a1156bc3278e6550a670b91d11149336d8285eb2549b10928e5c837b71bc61827a3ecae981eed4
|
|
7
|
+
data.tar.gz: be813ddc316539dbaedd7bbec127041fa665c987afb49b697d2874535b3e8ca5d35b4fd0b35b62be9f349e61763a150570769029bb0d15b0951b572896cfadd8
|
data/lib/apple_data/version.rb
CHANGED
data/share/img4.yaml
CHANGED
|
@@ -173,24 +173,6 @@ types:
|
|
|
173
173
|
with a `secb` object with a `trst` object), `rssl` (Factory SSL root CA),
|
|
174
174
|
`rvok` (Revocation list) and `trpk` (trusted public keys?)
|
|
175
175
|
lpol_properties:
|
|
176
|
-
AMNM:
|
|
177
|
-
BNCH:
|
|
178
|
-
BORD:
|
|
179
|
-
CEPO:
|
|
180
|
-
CHIP:
|
|
181
|
-
CPRO:
|
|
182
|
-
CSEC:
|
|
183
|
-
DGST:
|
|
184
|
-
title: Hash Digest
|
|
185
|
-
DPRO:
|
|
186
|
-
DSEC:
|
|
187
|
-
ECID:
|
|
188
|
-
EPRO:
|
|
189
|
-
ESEC:
|
|
190
|
-
LCST:
|
|
191
|
-
LNCH:
|
|
192
|
-
RNCH:
|
|
193
|
-
SDOM:
|
|
194
176
|
auxi:
|
|
195
177
|
title: Auxiliary Image4 Manifest Hash (`auxi`)
|
|
196
178
|
description: After the system verifies that the UAKL hash matches what’s found
|
|
@@ -241,11 +223,6 @@ lpol_properties:
|
|
|
241
223
|
access:
|
|
242
224
|
write:
|
|
243
225
|
- macOS
|
|
244
|
-
bat0:
|
|
245
|
-
bat1:
|
|
246
|
-
batf:
|
|
247
|
-
chg0:
|
|
248
|
-
chg1:
|
|
249
226
|
coih:
|
|
250
227
|
title: CustomOS Image4 Manifest Hash (coih)
|
|
251
228
|
description: The `coih` is an SHA384 hash of CustomOS Image4 manifest. The payload
|
|
@@ -257,12 +234,8 @@ lpol_properties:
|
|
|
257
234
|
access:
|
|
258
235
|
write:
|
|
259
236
|
- 1TR
|
|
260
|
-
diag:
|
|
261
|
-
dtre:
|
|
262
237
|
gaid:
|
|
263
238
|
description: Gaia Authentication ID (Apple Internal)
|
|
264
|
-
glyc:
|
|
265
|
-
glyp:
|
|
266
239
|
hrlp:
|
|
267
240
|
title: Has recoveryOS Local Policy
|
|
268
241
|
description: The `hrlp` indicates whether or not the `prot` value is the measurement
|
|
@@ -275,9 +248,6 @@ lpol_properties:
|
|
|
275
248
|
- 1TR
|
|
276
249
|
- recoveryOS
|
|
277
250
|
- macOS
|
|
278
|
-
ibot:
|
|
279
|
-
illb:
|
|
280
|
-
krnl:
|
|
281
251
|
kuid:
|
|
282
252
|
title: Key Encryption Key
|
|
283
253
|
description: The kuid indicates the volume that was booted. The key encryption
|
|
@@ -296,7 +266,6 @@ lpol_properties:
|
|
|
296
266
|
description: Local Boot Object. Indicates that the object is to be used as the
|
|
297
267
|
target of a local boot only and not provided by the server for remote / DFU
|
|
298
268
|
boots.
|
|
299
|
-
logo:
|
|
300
269
|
lpnh:
|
|
301
270
|
title: LocalPolicy Nonce Hash
|
|
302
271
|
description: The lpnh is used for anti-replay of the LocalPolicy. This is an SHA384
|
|
@@ -357,7 +326,6 @@ lpol_properties:
|
|
|
357
326
|
- 1TR
|
|
358
327
|
- recoveryOS
|
|
359
328
|
- macOS
|
|
360
|
-
recm:
|
|
361
329
|
rolp:
|
|
362
330
|
description: recoveryOS local policy
|
|
363
331
|
type: boolean
|
|
@@ -392,8 +360,6 @@ lpol_properties:
|
|
|
392
360
|
- 1TR
|
|
393
361
|
- recoveryOS
|
|
394
362
|
- macOS
|
|
395
|
-
rsep:
|
|
396
|
-
sepi:
|
|
397
363
|
sip0:
|
|
398
364
|
title: System Integrity Protection (SIP) 0 Status - Overall
|
|
399
365
|
description: The sip0 holds the existing System Integrity Protection (SIP) policy
|
|
@@ -433,7 +399,6 @@ lpol_properties:
|
|
|
433
399
|
description: Secure Multi-Boot 3 - DEP-allowed MDM Control
|
|
434
400
|
smb5:
|
|
435
401
|
description: Unknown - but known to exist in Factory signing
|
|
436
|
-
snon:
|
|
437
402
|
snuf:
|
|
438
403
|
description: Staged Nonce For Update Firmware
|
|
439
404
|
spih:
|
|
@@ -656,6 +621,9 @@ manifest_properties:
|
|
|
656
621
|
description: Local Policy Next Cryptographic Hash
|
|
657
622
|
name: ApLocalNonceHash
|
|
658
623
|
Mod#:
|
|
624
|
+
title: Model ID
|
|
625
|
+
mlb#:
|
|
626
|
+
title: Main Logic Board Serial
|
|
659
627
|
RNCH:
|
|
660
628
|
description: Remote Nonce Cryptographic Hash
|
|
661
629
|
RSCH:
|
|
@@ -762,6 +730,7 @@ manifest_properties:
|
|
|
762
730
|
Potentially indicates that the policy is for a recovery boot only.
|
|
763
731
|
type: boolean
|
|
764
732
|
rfcg:
|
|
733
|
+
title: Reconfigure Mode
|
|
765
734
|
type: boolean
|
|
766
735
|
rsch:
|
|
767
736
|
description: research mode
|
|
@@ -803,8 +772,12 @@ manifest_properties:
|
|
|
803
772
|
name: Ap,TargetType
|
|
804
773
|
roots:
|
|
805
774
|
- ManifestKey-DataCenter
|
|
775
|
+
META:
|
|
776
|
+
title: Metadata
|
|
777
|
+
SPAY:
|
|
778
|
+
title: SysCfg Payload
|
|
806
779
|
uidm:
|
|
807
|
-
description: UID
|
|
780
|
+
description: UID Mixing (Entanglement)
|
|
808
781
|
type: boolean
|
|
809
782
|
roots:
|
|
810
783
|
- ManifestKey-DataCenter
|
|
@@ -1121,6 +1094,8 @@ img4_tags:
|
|
|
1121
1094
|
title: Charger Input Limit Calibration
|
|
1122
1095
|
CLHS:
|
|
1123
1096
|
description: Chained LocalPolicy Hash String
|
|
1097
|
+
SDOM:
|
|
1098
|
+
title: Security Domain
|
|
1124
1099
|
Coor:
|
|
1125
1100
|
title: Country of Origin
|
|
1126
1101
|
DPCl:
|
|
@@ -1158,6 +1133,8 @@ img4_tags:
|
|
|
1158
1133
|
title: Proximity Calibration Data
|
|
1159
1134
|
RMd#:
|
|
1160
1135
|
title: Regional Model Number
|
|
1136
|
+
DGST:
|
|
1137
|
+
title: Object Digest
|
|
1161
1138
|
SPTM:
|
|
1162
1139
|
description: Secure Page Table Monitor
|
|
1163
1140
|
SpTS:
|
|
@@ -1194,10 +1171,14 @@ img4_tags:
|
|
|
1194
1171
|
auac:
|
|
1195
1172
|
description:
|
|
1196
1173
|
batf:
|
|
1174
|
+
title: Battery Firmware
|
|
1197
1175
|
berb:
|
|
1176
|
+
time:
|
|
1177
|
+
title: Timestamp
|
|
1198
1178
|
bles:
|
|
1199
1179
|
description:
|
|
1200
1180
|
cfel:
|
|
1181
|
+
title: CFELoader
|
|
1201
1182
|
description:
|
|
1202
1183
|
firmware_name: CFELoader
|
|
1203
1184
|
cker:
|
data/share/pki.yaml
CHANGED
|
@@ -92,7 +92,7 @@ oids:
|
|
|
92
92
|
symbol: oidAppleSecureBootTicketCertSpec
|
|
93
93
|
1.2.840.113635.100.6.1.15:
|
|
94
94
|
title: IMG4 Manifest Certificate Specification
|
|
95
|
-
name:
|
|
95
|
+
name: appleImg4ManifestSpecification
|
|
96
96
|
type: sequence
|
|
97
97
|
description: "Constriction on values that can be specified or signed by this certificate.
|
|
98
98
|
\ Conatins two sub-sequesnces, \nthe MANP (Manifest Properties) and the OBJP
|
|
@@ -143,12 +143,16 @@ oids:
|
|
|
143
143
|
1.2.840.113635.100.6.1.4:
|
|
144
144
|
apple_description: Apple World Wide Developer Relations Certificates for Code
|
|
145
145
|
Signing GM from developer to Apple
|
|
146
|
+
1.2.840.113635.100.6.8:
|
|
147
|
+
name: appleImg4Manifest
|
|
146
148
|
1.2.840.113635.100.6.16:
|
|
149
|
+
name: appleSecureEnclaveFDRCommands
|
|
147
150
|
description: A sequence of FDR programming commands, seperated by ";". Each command
|
|
148
151
|
is "PUT" or "GET" prior to a 4CC value, followed by a ":" then the value of
|
|
149
152
|
the key.
|
|
150
153
|
example: PUT/FSCl:sik-FXFYFXFFYFFEX-QQRRRDEETFEFYCEIESLIREILCILESCLSELRESERSER
|
|
151
154
|
1.2.840.113635.100.6.17:
|
|
155
|
+
name: appleKeyInstanceName
|
|
152
156
|
description: Contains the name of the key
|
|
153
157
|
1.2.840.113635.100.6.2:
|
|
154
158
|
title: Apple Security Algorithm
|
|
@@ -158,6 +162,7 @@ oids:
|
|
|
158
162
|
1.2.840.113635.100.6.2.10:
|
|
159
163
|
symbol: oidAppleIntmMarkerAppleSystemIntg2
|
|
160
164
|
1.2.840.113635.100.6.2.12:
|
|
165
|
+
name: appleIntmMarkerAppleServerAuthentication
|
|
161
166
|
symbol: oidAppleIntmMarkerAppleServerAuthentication
|
|
162
167
|
1.2.840.113635.100.6.2.13:
|
|
163
168
|
symbol: oidAppleIntmMarkerAppleSystemIntgG3
|
|
@@ -258,6 +263,8 @@ oids:
|
|
|
258
263
|
1.2.840.113635.100.6.71.1:
|
|
259
264
|
description: Made for iDevice (MFi) - Authentication v4 - Apple Accessory Properties
|
|
260
265
|
Extension
|
|
266
|
+
1.2.840.113635.100.6.9:
|
|
267
|
+
title: appleSomeSHA256Hash
|
|
261
268
|
1.2.840.113635.100.7.1.1:
|
|
262
269
|
apple_description: 'Apple FairPlay certificate extended Application Authentication
|
|
263
270
|
& Authorization: Policy'
|