iOS firmware signature – what is it, how to check and can it be bypassed? What is SHSH? Why save SHSH? How to save SHSH? Where can I get shsh from 6.1 3.

Everyone has at one time or another upgraded their device to newer firmware. In most cases, firmware adds new features and fixes bugs, but this does not always happen. Recently, after updates, some users' Wi-Fi begins to drop out, the network is lost, or the battery runs out for a couple of hours. Apple does not release iOS updates very often, during which time you can have a lot of trouble with the problem that has arisen. In such cases, there are two options: wait for the update or roll back to the old iOS.

It is currently impossible to officially roll back to the previous iOS. I’ll try to tell you why and when Apple started prohibiting rolling back to a previous version of iOS.

The concept of SHSH (hash) appeared in 2009, along with the release of the iPhone 3GS.

SHSH— a digital signature that is used to sign the firmware file before it is written to the device. The SHSH hash is issued by a special Apple server (gs.apple.com) in response to the identifier of the device being flashed, sent to it by iTunes.

Scheme of interaction between iTunes and Apple servers:

Then, starting with iOS 3.1.1, the signing system was extended to iPod touch 2G and 3G, and since the release of iOS 4.0 SHSH, iPhone 3G also began to be signed. iPhone 2G, iPod touch 1G and Apple TV 1G do not use SHSH, so these devices can always be flashed to any available version of iOS.

Hackers were able to bypass total firmware control. It turned out that SHSH with the Apple server can be requested not only by iTunes, but also by any other program. So it became possible to make a backup, and with this, in turn, roll back the firmware.

  1. Programs that store SHSH on your PC
  2. Programs that save hashes on Cydia servers (in the cloud)

Both methods have their pros and cons. For example, programs that store your digital signature on Cydia servers sometimes crash or, due to server overload, the hash simply cannot be saved. But each has its own advantages! For example, by saving it on your PC, SHSH will always be available to you, regardless of the functionality of the Cydia servers or the availability of the Internet! Everyone chooses for themselves what they like, what is convenient for them!

Let me introduce a number of some programs with which you can save SHSH:

Cydia


When you jailbreak your iOS device, Cydia, a tweak store, is immediately installed. In addition to installing those same tweaks, Cydia will automatically save your firmware hash! Saving occurs when the Internet or Wi-Fi is connected.

Saving occurs directly from your iOS device to the Cydia server. Above shows that my iPod has SHSH stored on it since iOS 3.3.3. A little trick, if the hash is not saved automatically, just click the “Reload” button a couple of times.

The only disadvantage of this method of saving a digital signature is the periodic overload of the server. For example, after the release of Evasi0n, Cydia was not stable and the Cydia servers had no time for it.

TinyUmbrella is one of the most famous programs for saving SHSH from your PC, Mac. The main feature of this application is the ability to send your SHSH directly to the Cydia servers, so as not to lose the saved certificates on your PC in the future. This program is also often used for firmware downgrade itself. I will tell you about this in future articles!

iFaith (developer iH8sn0w) - A unique program that allows you to save a hash from any iOS device running an old version of firmware that does not have an Apple digital signature.

When Apple stops signing older versions of firmware, there is no way to download the hash; the iFaith utility allows you to dump SHSH files for any version of iOS and thereby restore to the iOS firmware you need!

Saving occurs on your PC in the location specified to you, so SHSH will be available to you even when you do not have an Internet connection, but there is a save!

Instructions for use will appear later.

That's all you need to know about firmware rollback, this page will be updated as new information becomes available!!

Good day, dear visitors of our site.
In this article, our website will tell you how to save electronic certificates (SHSH) for all types of iDevices.

So, what is it and what is it eaten with?

SHSH- this is an electronic certificate (signature) of the firmware unique for all iPhones, iPod Touches and iPads. At the very beginning, this restriction was introduced for the iPhone 3GS and iPod Touch 3G, and with the release of iOS 4.0, the restriction affected the iPhone 3G and iPod Touch 2G. Now owners of iPhone 4, iPad and iPod Touch 4 also need to maintain SHSH certificates.

What is it for?

The principle of operation of this limitation is simple. When you try to downgrade (downgrade the firmware), iTunes contacts the Apple server and sends to it some data about your device, including the unique identifier of its chip. The response comes with a certificate (SHSH) required for the boot module (iBoot). If this does not happen, iTunes will throw an error and interrupt the recovery process. If you have saved a certificate for the firmware to which you want to restore, then you can always do this without going through the Apple server.

Who needs to save certificates and on what firmware:
* Owners of iPhone 4/3GS and iPod Touch 4/3G for all firmware.
* Owners of iPhone 3G and iPod Touch 2G with firmware from iOS 4.0 and higher.

Our site will tell you about two main ways to perform this operation:

Method #1 - Through Cydia

The easiest and fastest way.
We go to Cydia, find the inscription Make my life easier, thanks! and click on it.

In this case, the certificate is sent to the servers of Saurik (the creator of Cydia) and after that you can breathe a sigh of relief. With the certificates saved, the message This Device Has a 3.1/3.1.2/3.1.3/4.0/4.0.1 ECID SHSH On File should appear on the Cydia main page

If the message “This device has pendng TSS request” is displayed there, this means that the certificates have been sent, but have not yet been processed.


Processing may take from a few minutes to several days.

Method number 2 - TinyUmbrella

TinyUmbrella does not download SHSH, but only downloads them, which means that it is useless to select the firmware for which you did not have time or were unable to save SHSH. If you want to get SHSH from the Cydia server, then select only the firmware that Cydia saved (you can check this in Cydia itself), if you want to get SHSH from Apple, then select only the latest stable firmware. They simply won’t give you another one.
TinyUmbrella and, as it turns out, helps upload SHSH files to the Saurik server, i.e. in cydia, from firmware 4.0.
So here's a mini F.A.Q.:

1. First you need to download TinyUmbrella and also install JAVA machine.
2. After downloading and installing JAVA, connect your 3G/3GS iPhone or iPod Touch 2G to your computer.
3. Now launch TinyUmbrella and click Save My SHSH.
All! You now have SHSH files on Cydia servers, which will be useful if you ever want to downgrade an iPhone 3G/3GS or iPod Touch 2G from iOS 4 to the later 3.1.2/3.1.3 firmware.
If you click on more options in the TinyUmbrella interface, you can also save them locally on your computer.

Rollback
1. Enter your iDevice (any) into DFU mode
2. Open TinyUmbrella
3. Click “Display SHSH” and see if there are SHSH for 4.0 and 4.0.1, if not, save them, or if saved locally, then simply copy the SHSH from 4.0 along the path C:\Users\your account\.shsh
4. Click “Start TSS Server”, then go to C:\Windows\System32\drivers\etc\ open the hosts file using Notepad, if at the very end there is no 74.208.105.171 gs.apple.com, then in the very last one add or correct the line (I had 127.0.0.1 gs.apple.com, corrected the IP and everything worked)
5. Open iTunes 9.2, hold down Shift and click "Restore"
6. Select iOS 4.0 and wait for the process to complete
7. After finishing, iTunes will display error 1015, 1013 or 101, just click “OK”
8. Switch to TinyUmbrella and click "Kick Device Out of Recovery", or launch the RecBoot program and click "Exit Recovery Mode"
That's all.

In December, developers announced the Prometheus application, which allows you to downgrade the OS version on your iPhone, iPod touch or iPad. We are talking about versions of the operating system that Apple has stopped signing. In order to use the tool, you must save the SHSH blob certificates in advance.

SHSH blob is a digital signature file that the company uses to verify the iOS version on the device. Certificates saved using TinyUmbrella or savethemblobs are not suitable for use with Prometheus. Files in a special shsh2 format are required; they can be obtained using the TSSSaver service utility. The online tool TSSSaver Checker allows you to check the functionality of digital certificates

How to Save SHSH2 Blobs for iPhone and iPad Using TSSSaver

Step 1: Connect your gadget to iTunes and find out the ECID number on the main page (click on the “Serial number” field). Copy it to the clipboard with a right click.

Step 2: Find out the model of your device here.

Step 3: Open the website in your browser https://tsssaver.1conan.com/.

Step 4: In the “Type ECID Here” field, paste the ECID for your device.

Step 5: In the Identifier field, select your device model.

Step 6

Step 7: Wait until it completes, after which you will receive a link to the blobs. Click the link to download the certificate.

How to verify SHSH2 signature using TSSSaver Checker

Step 2: In the Blob field, click the Browse button and select the digital signature file on your PC.

Step 3: In the Identifier and iOS Version fields, specify the version of your device and operating system, respectively.

Step 4: Click the "I'm not a robot" button and then Submit.

Step 5: If the configuration parameters are selected correctly and you see “true” next to the “rosi” label, then everything is in order - the certificate can be used. Otherwise, repeat the previous step, saving the SHSH2 Blobs.

The iPhone 4 is quite an old phone now, but lots of people still own and even use them. The latest, and the only signed, version of iOS for the iPhone 4 is iOS 7.1.2. This is quite an old operating system, but can still sometimes lag behind on the iPhone 4. Lots of people, including myself, would rather have iOS 6 running on their iPhone 4. This tutorial will show you how to do just that, without the need of SHSH blobs.

Requirements & Notes

  • This will restore your device to iOS 6.1.3.
  • This with ONLY work with the iPhone 4. No other devices are compatible.
  • This requires a Windows PC.
  • Any data currently on the device will be erased, so make sure to back it up before attempting this.
  • Once downgraded, you will need to plug your device in and follow step 10 every time you reboot it.
  • Only do this with spare devices that you don’t use all the time.

Download Links

Written Guide

  1. Download and install the latest version of 3uTools on your Windows PC from .
  2. Once installed, open the 3uTools application. Make sure your iPhone 4 is plugged into your computer using the 30-pin USB cable.
  3. In the 3uTools application, click on the Flash & JB tab at the top of the window, followed by the Firmwares button under it to the right. Select iPhone and iPhone 4 in the two drop down boxes in the top left area.
  4. A list of iOS versions show now appear for the iPhone 4. Download iOS 6.1.3 by clicking the green download icon to the right, making sure to get the correct one for your devices product version (e.g. iPhone3,1).

  5. Once the download has completed, click on the Pro Flash tab at the top of the app (under Flash & JB). On the left hand side, click the Import Firmware button. Browse for and select the iOS 6.1.3 IPSW file you just downloaded.

  6. Now you need to put the iPhone into DFU mode. To do this, hold down the power button and the home button together for 10 seconds. After 10 seconds, let go of the power button but keep holding the home button. After a few seconds, 3uTools should detect the iPhone in DFU mode. iTunes may also pop up saying the iPhone is in recovery mode. If it does, just close it.
  7. Once the firmware version is selected and the iPhone is in DFU mode, click the Flash button on the right. 3uTools should now begin flashing iOS 6.1.3 onto the iPhone 4.

  8. The tool will check for SHSH blobs 3 times before asking if you want to force the install without SHSH blobs. When you are asked if you would like to force the install, click Yes. The install should now proceed.

  9. Once the install has finished, you won’t be able to boot the device. To boot it, you will first need to put it into DFU mode again using the same method as step 6 (if it is already in DFU mode then you don’t need to do it again), then jailbreak it using a tethered jailbreak. To do this, click on the Jailbreak tab under Flash & JB. In here, click the iOS 4.x/5.x Jailbreak button on the right hand side. The device should now begin to be jailbroken.

  10. The device will show lots of code on the screen and when done, the screen should go black again. To boot the device, you need to do a tethered boot. To do this, make sure the device is in DFU mode, and click the Advanced tab under Flash & JB. Then click the Tethered Boot button on the right hand side. The device should now begin to boot. You will need to do this every time you reboot the device.

  11. That's it! Your iPhone 4 should now be running iOS 6.1.3!

As we wrote earlier, hacker tihmstar announced the release of a new utility Prometheus, which allows you to roll back to older, no longer Apple-signed versions of iOS. To successfully use Prometheus you will need saved SHSH2 blobs digital signature files. Learn how to save SHSH2 blobs for iPhone, iPad or iPod touch on a computer running Windows in this instruction.

Why save SHSH2 blobs

By saving the SHSH2 blobs of your device for the currently current firmware (iOS 10.1.1 and iOS 10.2 as of December 19, 2016), in the future, using the Prometheus utility, you can easily return to the specified old versions of iOS, even if Apple has already will not sign. This will be especially useful if the remedy for jailbreak iOS 10.1.1 will still appear. With the saved SHSH2 blobs, everyone can easily return to iOS 10.1.1 and install jailbreak on their mobile device.

Important! Previously saved SHSH blobs using TinyUmbrella or savethemblobs will not work with Prometheus.

Step 1: Connect your iPhone, iPad or iPod touch to your computer, launch iTunes and find out ECID And model id your mobile device. To do this, click on the column “ Serial number» until the required items appear.

Note: If the offered iTunes ECID contains only numbers, it must be recoded using this converter .

Step 2. Download the archive with the utility auto-tsschecker and unpack it anywhere.

Step 3: Run the file Start.bat from the unpacked archive.

Step 4: Write or Paste model your device, obtained from iTunes, for example, iPad4,1. Click Enter.

Step 5: Write or Paste ECID your device, obtained from iTunes, for example, 7F68B33F8D0. Click Enter. Important! Make sure the ECID is not just numbers.

Step 6: Check that the ECID entered is correct and click Y.

Step 7. Enter folder name, into which the SHSH2 blobs of the device will be saved and click Enter.

Step 8: When prompted to skip cache creation, enter N and press Enter. The process of saving SHSH2 blobs will begin.