apple-data 1.0.655 → 1.0.656

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dd195565f6a763dd7e17ea456f1a44eb8ddb894c6b36cd6753faac16c777af40
-  data.tar.gz: 84c0d2fa71fa5f150e4b0e257ca44f53e4b613e700f6652a833f08e0f59ed353
+  metadata.gz: 030fa8174d371cbce5172af52b8c8f43f7a744e99edb76ea2146172708a71379
+  data.tar.gz: 645a2bb1ae70ffe24633d00f5a46a0fe61759655ab542adcbc5f92bfa4789c59
 SHA512:
-  metadata.gz: 77f9f3c7f763cba126c1001d415933b4e3ca2fad2ad4246c759f5c929e0d371028d456888492d8118f418dae15911792e847c9c7ab68b6241542aeaeaf9fe787
-  data.tar.gz: 804f30a89390ed1d21cff30d6710ff1367dc4db08311a5624bb7599070570caf9d34f1a6c0224aa72c53b5d88c04643d060c64c8aacf0ee1bd7e89477cb97282
+  metadata.gz: 13545b91451163d67c0a8c7e070a06dbec468579ec025235d036adaded5d73b6f03b23f9a3cff22751130530b456ed8b1f6b06cfc1a10f1b58d34d32f2d9cedf
+  data.tar.gz: 7175850e98af8ba60225c245969112c94c1dd871ec7aa45bb78ee5be59e1d9b1ec3e26b63a9144ed0b1293903611926d08b1366bb259a78788e9fbd4dc6fa272

data/lib/apple_data/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AppleData
-  VERSION = '1.0.655'
+  VERSION = '1.0.656'
 end

data/share/cryptex.yaml

@@ -0,0 +1,103 @@
+---
+unknown:
+  srtl:
+    title: Security Research Trust List
+  vdrt:
+    title: Virtual Device Runtime Trust
+team-ids:
+  59GAB85EFG: Xcode
+  9B9BMM756K:
+  ZL6BUSYGB3: Apple News
+  C294W6Q7VB:
+  WWDCDEMO14: WorldWide Developer Confrence 2014
+  XPSUQMMH5W:
+  4GDX6FKXZ3:
+  9JA89QQLNQ: Apple App Site Association (AASA
+  243LU875E5: Podcasts
+  5L582GG73E:
+  J465JVPK26:
+  J7YC8MX52C:
+  5YE77W7KK6:
+  64UH4UY526:
+  CTL9M94Q8X:
+  DK9N2M2GK6: PassKit
+  B32K2C2Y92:
+  8HPC9RB4KE:
+  BDFWW8L6QE:
+  859WDYTPW2:
+  HW8W63F6SA:
+  DUMMYTEAM:
+cryptexes:
+  cryptex1:
+    generic:
+      types:
+        dctg:
+      supplemental:
+        types:
+          dctg:
+    preboot:
+      app:
+        types:
+          acrt:
+      os:
+        types:
+          scrt:
+    safari-downlevel:
+      types:
+        acrt:
+    boot:
+      os:
+        types:
+          scrt: System Cryptex Runtime Trust
+      app:
+        types:
+          acrt: Application Cryptex Runtime Trust
+  global:
+    pdi:
+      types:
+        srtl:
+    bootability-brain:
+      types:
+        bbrt: Bootability Brain Runtime Trust
+    install-assistant:
+      types:
+        srtl:
+    ota-update-brain:
+      types:
+        srtl:
+  personalized:
+    supplemental-ephemeral:
+      types:
+        srtl:
+    supplemental-persistent:
+      types:
+        srtl:
+    ephemeral-cryptex:
+      types:
+        srtl:
+    cryptex-research:
+      types:
+        srtl:
+    mobile-asset-code:
+      types:
+        dctg:
+    mobile-asset-brain:
+      types:
+        bart:
+    engineering-root:
+      types:
+        srtd:
+    trust-cache:
+      type:
+        srtl:
+    pdi:
+      type:
+        srtl:
+    ddi:
+      types:
+        vdrt:
+        srtl:
+metadata:
+  description:
+  credits: []
+  collections: []

data/share/curves.yaml

@@ -0,0 +1,8 @@
+---
+credits:
+- rickmark
+- https://std.neuromancer.sk
+metadata:
+  description:
+  credits: []
+  collections: []

data/share/fdr.yaml

@@ -110,7 +110,7 @@ fdr_properties:
   eeid:
     description: eSIM Embedded ID (EID)
   esdm:
-    description: Extended Security Domain Fuse
+    description: Effective Security Domain Mode
   fCfg:
     description:
     contexts:

data/share/img4.yaml

@@ -110,6 +110,7 @@ types:
       are object specific.
     common_properties:
       DGST:
+        title: Object Digest
         description: The cryptographic digest of the object
         name: Digest
       EKEY:
@@ -223,6 +224,8 @@ lpol_properties:
     access:
       write:
       - macOS
+  c1md:
+    title: chip cryptex1 mobile asset dfu ap
   coih:
     title: CustomOS Image4 Manifest Hash (coih)
     description: The `coih` is an SHA384 hash of CustomOS Image4 manifest. The payload
@@ -399,10 +402,8 @@ lpol_properties:
     description: Secure Multi-Boot 3 - DEP-allowed MDM Control
   smb5:
     description: Unknown - but known to exist in Factory signing
-  snuf:
-    description: Staged Nonce For Update Firmware
   spih:
-    title: Supplimental Image Hash
+    title: Cryptex1 manifest Hash
     description: Cryptex1 Image4 Hash (supplimental image hash)
   tbmr:
   tbms:
@@ -464,7 +465,7 @@ cryptex_properties:
     roots:
     - ExtraContent
   snuf:
-    title: Software Nonce for Update Firmware
+    title: Software Update Freshness Nonce
     description: SoftwareNonceForUpdateFreshness
   styp:
     title: Cryptex Subtype
@@ -674,7 +675,7 @@ manifest_properties:
     description: Apple Connect ID (AppleInternal)
     type: integer
   esdm:
-    description: Extended Security Domain Mode
+    description: Extended Security Domain
     type: integer
     alias:
     - esdm-fuses
@@ -717,7 +718,7 @@ manifest_properties:
   nsih:
     description: Next Stage Image4 Hash
   nsph:
-    description: Next Stage pre-boot splat manifest hash
+    description: prospective cryptex1 manifest hash
   oppd:
     title: Owner Password Permission Delegation
   prtp:
@@ -768,7 +769,7 @@ manifest_properties:
     description: SHA2 os some kind - sep/system subject key identifier?
     type: binary
   stng:
-    description: Cryptex1 Generation / Cryptex type?
+    description: Prospective Local Policy Generation
   svrn:
     description: Server nonce
   tatp:
@@ -1080,22 +1081,32 @@ objects:
   xsys:
     description: x86 System Root Hash
 img4_tags:
+  0Cfg:
   ADCL:
     description: Apple Display Calibration
+  ADDA:
+  AMNM:
+    title: Allow Mix-n-Match
   BCAL:
     title: Bluetooth Calibration
+  BICS:
   BLDS:
     description: Boot LocalPolicy Digest String?
+  BNCH:
+    title: Boot Nonce
   BNCN:
     title: Board Nonce
   BTBF:
     title: Bluetooth Taurus Calibration Data
   CBAT:
     title: Charger Input Limit Calibration
+  CEPO:
+    title: Certificate Epoch
   CLHS:
     description: Chained LocalPolicy Hash String
   Coor:
     title: Country of Origin
+  Csta:
   DGST:
     title: Object Digest
   DPCl:
@@ -1114,33 +1125,44 @@ img4_tags:
   EKEY:
     title: Effective Key Type
   EPRO:
-    title: Effective Promotion Value
+    title: Effective Production Status
   ESEC:
-    title: Effective Security
+    title: Effective Security Mode
   GLCl:
     title: Gamma Tables Calibration
   GYTT:
     title: Gyroscope Temperature Calibration
+  HMHC:
+    title: Chained Manifest Hash
+  HmCA:
+  HmCl:
+  LCfg:
+  LPEM:
   MLB#:
     title: Main Logic Board Serial Number
   MdlC:
     title: Model Configuration
   PAYP:
     description:
+  PRST:
   PRTT:
     title: Pressure Temperature Compensation Table
   PxCL:
     title: Proximity Calibration Data
   RMd#:
     title: Regional Model Number
+  Rcvr:
   SDOM:
     title: Security Domain
+  SPAY:
   SPTM:
     description: Secure Page Table Monitor
   SpTS:
     title: Speaker Thiele-Small Parameters
   SwBh:
     title: Software Behaviour (GreenTea)
+  TBIC:
+  UCAL:
   WCAL:
     title: Wireless Calibration
   ache:
@@ -1150,18 +1172,47 @@ img4_tags:
   aciw:
     description:
   adba:
+  add2:
+    title: Chip AP DDI SHA2 384
   ader:
     description:
   agfi:
     description:
+  am1d:
+    title: cryptex1 mobile asset dfu
   anid:
   anrd:
     description: Apple Notarized Ram Disk
   aofi:
     description: Always on Firmware Image
+  ap00:
+    title: Chip AP Software FF00
+  ap01:
+    title: Chip AP Software FF01
+  ap06:
+    title: Chip AP Software FF06
+  apc0:
+    title: Chip AP Cryptex0
+  apd2:
+    title: Chip AP PDI SHA2 384
+  apdc:
+    title: Chip AP ACDC
+  apin:
+  apkc:
+    title: Chip AP KCInstall
+  apln:
+    title: Chip AP Local Prospective
   apmv:
     title: OS Version
     description:
+  aprd:
+    title: Chip AP Reduced
+  aps2:
+    title: Chip AP SHA2 384
+  apsr:
+    title: AP Security Research Cryptex Nonce
+  aptk:
+    title: AP Ticket
   arms:
     title: ARM Size
   ater:
@@ -1170,37 +1221,94 @@ img4_tags:
     description:
   auac:
     description:
+  bCfg:
   batf:
     title: Battery Firmware
   berb:
   bles:
     description:
+  bmfh:
+    title: Boot Manifest Hash
+  boid:
+    title: Boot UUID
+  c1ab:
+    title: Chip Cryptex1 Asset Brain
+  c1ai:
+    title: Chip Cryptex1 Mobile Asset Code Installer AP
+  c1am:
+    title: Chip Cryptex1 Mobile Asset
+  c1br:
+    title: Chip Cryptex1 Boot Reduced
+  c1bt:
+    title: Chip Cryptex1 Boot AP
+  c1bv:
+    title: Chip Cryptex1 Boot Verification
+  c1fs:
+    title: Chip Cryptex1 Safari Downlevel
+  c1g0:
+    title: Chip Cryptex1 Generic Cryptex0
+  c1gn:
+    title: Chip Cryptex1 Generic AP
+  c1nb:
+    title: CHIP_CRYPTEX1_BOOT_AP_PROSPECTIVE
+  c1rp:
+    title: Chip Cryptex1 Reduced Prospective
+  c1sm:
+    title: Cryptex1 simulator
+  c1v2:
+    title: Chip Cryptex1 Boot VMA2
+  c1vn:
+    title: Chip Cryptex1 Boot VMA2 Clone
+  c1vr:
+    title: Chip Cryptex1 Boot Boot AV Reduced Verification
+  c1vv:
+    title: Chip Cryptex1 Boot VMA2 Verification
+  cCfg:
+  cLTH:
   cfel:
     title: CFELoader
     description:
     firmware_name: CFELoader
+  ciof:
   cker:
     description: Chained Kernel for Recovery
     recovery: true
   ckih:
     description: Chained Kernel Image4 Hash
+  clas:
+    title: Cryptex1 product class
   clid:
     description: Class Identifier
   cmsv:
     description:
+  cnch:
+    title: cryptex1 boot nonce hash
+  cncn:
+    title: Cryptex1 boot nonce
   cphy:
     title: USB-C Physical Controller
+  cptx:
+    title: srdp cryptex
+  dBIC:
   dCfg:
     title: Device Configuration
+  dLTH:
+  dPSF:
+  dSrc:
   dali:
     description:
   data:
     description:
+  dcpf:
   diag:
     description: Diagnostic (AHT) Image
     firmware_name: Diags
   disk:
     description:
+  dvdi:
+    title: Developer Disk Image
+  eCfg:
+  edcp:
   efib:
     description: EFI Bootloader
   eg0n:
@@ -1218,6 +1326,9 @@ img4_tags:
   eply:
   esca:
     description: Emulated System Certificate Authority
+  faus:
+  fdr1:
+  fdr2:
   fdrs:
     description: Factory Debug Recovery System
   fdrt:
@@ -1227,7 +1338,8 @@ img4_tags:
   file:
     description:
   fpgt:
-    description:
+    description: Factory Pre-Release Global Trust
+  fsca:
   ftot:
     description: Factory Trust Operations Test
   fuos:
@@ -1239,6 +1351,8 @@ img4_tags:
     description:
   glyc:
     description: Gyroscope Calibration
+  gmdp:
+    title: Personalized Disk Image
   gtcd:
   gtgv:
   hash:
@@ -1256,16 +1370,23 @@ img4_tags:
     description: Hypervisor OS Partition 0 (`dom0`)
   hypr:
     description: Hypervisor Related
+  i4ct:
+    title: Image4 Certificate Type
   iCCl:
     title: iCloud Activation Lock Clear
+  iLAC:
+  idia:
   ienv:
     description: Install Environment?
+  ifw1:
+  ifw2:
   inst:
     title: Key Instance
   isor:
     description:
   itst:
     description: Installer Test?
+  jCfg:
   kcrf:
     name: Kernel Cache Read-Only File Offset
   kcrz:
@@ -1286,11 +1407,17 @@ img4_tags:
     description: Locker - Used for Effaceable Storage end Obliteration
   lcrt:
     title: Lynx Certificate
+  lnch:
+    title: Cryptex1 live nonce hash
+  lndm:
+    title: Nonce Domain
+  lpbt:
   lphp:
     description: Local Policy Hash Protection?
   lpol:
   ltrs:
     description: Local TrustStore Recovery System?
+  mCfg:
   manx:
     description:
   ment:
@@ -1309,6 +1436,9 @@ img4_tags:
     title: Machine Specific Register Filter
   name:
     description:
+  ndom:
+    description: Nonce Domain
+  nefw:
   nrde:
     description: Native Ramdisk Environment
   nsrv:
@@ -1346,12 +1476,19 @@ img4_tags:
     description: Encrypted Private Key / Private Key Info / Private Recovery Identity?
   prot:
   ptrp:
+  rLAS:
   rbmt:
     description: Restore Boot Monitor?
     firmware_name: RBM
   rddg:
     description: Ramdisk for Debugging
   refk:
+  ros0:
+  ros1:
+  ros2:
+  ros3:
+  rsch:
+    title: Research Mode
   rspt:
     title: Restore Secure Page Table Monitor
   rtpf:
@@ -1390,8 +1527,13 @@ img4_tags:
     description:
   time:
     title: Timestamp
+  tmuf:
+  trxm:
+    title: Trusted Execution Monitor
   tstp:
     title: Testing Product
+  type:
+    title: Cryptex1 Chip Type
   tz0s:
     title: TrustZone EL0 Size
   ucer:
@@ -1404,10 +1546,21 @@ img4_tags:
     description:
   vkdl:
     description: Virtual Kernel Linker
+  vma2:
+    title: Chip VMA2
+  vman:
+    title: Chip VMA2 Clone
+  vnum:
+    title: Long OS Version
+  vpdc:
+    title: Chip VMA2 ACDC
   ware:
     description: VMWare?
+  xDCl:
   xugs:
     description: x64 User System Disk
+  zine:
+    title: Magazine psudo-descriptor
 der:
   uikp:
     description: UIK Public

data/share/keys.yaml

@@ -12,9 +12,7 @@ derrived_keys:
   2101:
     type: uid
     data: 1334440654591915542993625911497130241
-    description: 'Used for data protection.
-
-      '
+    description: Used for data protection.
   2102:
     type: uid
     data: 1192299414131223233912285359034425728
@@ -44,16 +42,12 @@ derrived_keys:
   2202:
     type: uid
     data: 291263742049262950426416465193106933345
-    description: 'Used on A4 devices. A device-specific key. It is used to encrypt
+    description: Used on A4 devices. A device-specific key. It is used to encrypt
       the SHSH blobs on the device.
-
-      '
   2203:
     type: uid
     data: 32226505706565189832158137978565999945
-    description: 'It is used to encrypt the data partition key.
-
-      '
+    description: It is used to encrypt the data partition key.
   2211:
     type: uid
     mode: AES-256-CBC

data/share/pki.yaml

@@ -108,7 +108,8 @@ oids:
     found_in:
     - ucrt
     - dcrt-oid
-    symbol: oidAppleImg4ManifestCertSpec
+    symbols:
+    - CTOidItemAppleImg4Manifest
     issuers:
     - Basic Attestation User Sub CA2
     - FDRDC-UCRT-SUBCA

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: apple-data
 version: !ruby/object:Gem::Version
-  version: 1.0.655
+  version: 1.0.656
 platform: ruby
 authors:
 - Rick Mark
@@ -124,6 +124,8 @@ files:
 - share/coprocessor.yaml
 - share/cores.yaml
 - share/credits.yaml
+- share/cryptex.yaml
+- share/curves.yaml
 - share/debug.yaml
 - share/defaults.yaml
 - share/device_tree.yaml