blobsaver icon indicating copy to clipboard operation
blobsaver copied to clipboard

Support for latest iPhone 16

Open BoulderLou opened this issue 8 months ago • 4 comments

Describe the bug The latest version of Blobsaver v3.6.0 does not currently support the latest iPhone 16 models. Thus, users are not able to save blobs for Apple's newest iPhone 16 devices at this time. It's not a bug per se, but the code needs to be updated to support the latest iPhone 16 models.

Screenshots The pull down menu does not have the latest iPhone 16 models:

Image

Desktop:

OS Version: Win 11 iOS Device: iPhone16Pro Max

Checklist (place an x between the brackets to mark as completed):

[x] I have made sure I am on the latest version of blobsaver

[x] have checked other open issues to see if my problem has already been reported

[x] I have tried common troubleshooting tactics such as restarting my computer and reinstalling blobsaver

FYI: Apparently the blobsaver app doesn't seem to be supported any longer. I modified the blobsaver 3.6.0 code locally on my system to support the latest iPhone 16 models. The enhancement is fairly simple and has been tested on my iPhone 16 PM

BoulderLou avatar Mar 31 '25 02:03 BoulderLou

Please tell me how you did it.

airat90 avatar Apr 13 '25 11:04 airat90

Airat90 here are my mods for the new iPhone16 devices. I can only test on a Win 11 OS and with the iPhone16Pro Max as that's the only phone I have. You will also have to set up your system to be able to build the source code for your specific OS.

The data within these additions can be found on ipsw.me.

Image

Image

To change the version number/project name (not required unless planning on creating a released version for the masses):

Image

Image

Image

BoulderLou avatar Apr 13 '25 15:04 BoulderLou

Airat90 here are my mods for the new iPhone16 devices. I can only test on a Win 11 OS and with the iPhone16Pro Max as that's the only phone I have. You will also have to set up your system to be able to build the source code for your specific OS.

The data within these additions can be found on ipsw.me.

Image

Image

To change the version number/project name (not required unless planning on creating a released version for the masses):

Image

Image

Image

Yeah it does work after manually filled in identifier and board configuration. The blob is also valid using img4tool to verify it.

Image

I saved blob for iphone 16 pro max of iOS 18.4 (22E240), the result of verification is:

lan123deMBP-6:TSS lan$ /Users/lan/Desktop/TSS/img4tool -v /Users/lan/Desktop/TSS/iPhone17,2_18.4_22E240_Restore/BuildManifest.plist -s /Users/lan/Desktop/TSS/6311566137557020_iPhone17,2_d94ap_18.4-22E240_57d1c77aeb78d6967918fd528d316c4f96df9f2904ddca11f9749825f198bcf5.shsh2 img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f Compiled with plist: YES [IMG4TOOL] checking buildidentity 0: [IMG4TOOL] checking buildidentity matches board ... YES [IMG4TOOL] checking buildidentity has all required hashes: [IMG4TOOL] checking hash for "ANE" OK (found "anef" with matching hash) [IMG4TOOL] checking hash for "ANS" OK (found "ansf" with matching hash) [IMG4TOOL] checking hash for "AOP" OK (found "aopf" with matching hash) [IMG4TOOL] checking hash for "AOP2" OK (found "aop2" with matching hash) [IMG4TOOL] checking hash for "AVE" OK (found "avef" with matching hash) [IMG4TOOL] checking hash for "Ap,ApplePMCFirmware" OK (found "pmcf" with matching hash) [IMG4TOOL] checking hash for "Ap,AudioBootChime" OK (found "aubt" with matching hash) [IMG4TOOL] checking hash for "Ap,ExclaveOS" OK (found "exos" with matching hash) [IMG4TOOL] checking hash for "Ap,ExclaveOSIntegrityCatalog"OK (found "exic" with matching hash) [IMG4TOOL] checking hash for "Ap,ExclaveOSTrustCache" OK (found "extc" with matching hash) [IMG4TOOL] checking hash for "Ap,ExclaveOSVolume" OK (found "exvl" with matching hash) [IMG4TOOL] checking hash for "Ap,GFX1Firmware" OK (found "gf1f" with matching hash) [IMG4TOOL] checking hash for "Ap,HapticAssets" OK (untrusted) [IMG4TOOL] checking hash for "Ap,LowPowerMode" OK (untrusted) [IMG4TOOL] checking hash for "Ap,RestoreSecureM3Firmware"OK (found "rsm3" with matching hash) [IMG4TOOL] checking hash for "Ap,RestoreSecurePageTableMonitor"OK (found "rspt" with matching hash) [IMG4TOOL] checking hash for "Ap,RestoreTrustedExecutionMonitor"OK (found "rtrx" with matching hash) [IMG4TOOL] checking hash for "Ap,RestorecL4" OK (found "rxcl" with matching hash) [IMG4TOOL] checking hash for "Ap,SecureM3Firmware" OK (found "sm3f" with matching hash) [IMG4TOOL] checking hash for "Ap,SecurePageTableMonitor"OK (found "sptm" with matching hash) [IMG4TOOL] checking hash for "Ap,SystemVolumeCanonicalMetadata"OK (found "msys" with matching hash) [IMG4TOOL] checking hash for "Ap,TrustedExecutionMonitor"OK (found "trxm" with matching hash) [IMG4TOOL] checking hash for "Ap,cL4" OK (found "excl" with matching hash) [IMG4TOOL] checking hash for "AppleLogo" OK (found "logo" with matching hash) [IMG4TOOL] checking hash for "BMU,DigestMap" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "BMU,FirmwareMap" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "BasebandFirmware" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "Cryptex1,AppOS" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Cryptex1,AppTrustCache" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Cryptex1,AppVolume" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Cryptex1,SystemOS" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Cryptex1,SystemTrustCache"IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Cryptex1,SystemVolume" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "DCP" OK (found "dcpf" with matching hash) [IMG4TOOL] checking hash for "DeviceTree" OK (found "dtre" with matching hash) [IMG4TOOL] checking hash for "GFX" OK (found "gfxf" with matching hash) [IMG4TOOL] checking hash for "ISP" OK (found "ispf" with matching hash) [IMG4TOOL] checking hash for "KernelCache" OK (found "krnl" with matching hash) [IMG4TOOL] checking hash for "LLB" OK (found "illb" with matching hash) [IMG4TOOL] checking hash for "LeapHaptics" OK (untrusted) [IMG4TOOL] checking hash for "Liquid" OK (found "liqd" with matching hash) [IMG4TOOL] checking hash for "MtpFirmware" OK (found "mtpf" with matching hash) [IMG4TOOL] checking hash for "Multitouch" OK (untrusted) [IMG4TOOL] checking hash for "OS" OK (found "rosi" with matching hash) [IMG4TOOL] checking hash for "PMP" OK (found "pmpf" with matching hash) [IMG4TOOL] checking hash for "Rap,RTKitIOConfig" OK (found "icnf" with matching hash) [IMG4TOOL] checking hash for "Rap,RTKitOS" OK (found "rkos" with matching hash) [IMG4TOOL] checking hash for "Rap,SoftwareBinaryDsp1" OK (found "sbd1" with matching hash) [IMG4TOOL] checking hash for "RecoveryMode" OK (found "recm" with matching hash) [IMG4TOOL] checking hash for "RestoreANS" OK (found "rans" with matching hash) [IMG4TOOL] checking hash for "RestoreDCP" OK (found "rdcp" with matching hash) [IMG4TOOL] checking hash for "RestoreDeviceTree" OK (found "rdtr" with matching hash) [IMG4TOOL] checking hash for "RestoreKernelCache" OK (found "rkrn" with matching hash) [IMG4TOOL] checking hash for "RestoreLogo" OK (found "rlgo" with matching hash) [IMG4TOOL] checking hash for "RestoreRamDisk" OK (found "rdsk" with matching hash) [IMG4TOOL] checking hash for "RestoreSEP" OK (found "rsep" with matching hash) [IMG4TOOL] checking hash for "RestoreTrustCache" OK (found "rtsc" with matching hash) [IMG4TOOL] checking hash for "SE,RapRTKitOS" OK (found "rkos" with matching hash) [IMG4TOOL] checking hash for "SE,RapSwBinDsp" OK (found "sbd1" with matching hash) [IMG4TOOL] checking hash for "SE,UpdatePayload" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "SEP" OK (found "sepi" with matching hash) [IMG4TOOL] checking hash for "SIO" OK (found "siof" with matching hash) [IMG4TOOL] checking hash for "Savage,B0-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,B0-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,B2-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,B2-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,BA-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,BA-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,BE-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,BE-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,BF-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Savage,BF-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "SepStage1" OK (found "stg1" with matching hash) [IMG4TOOL] checking hash for "StaticTrustCache" OK (found "trst" with matching hash) [IMG4TOOL] checking hash for "SystemVolume" OK (found "isys" with matching hash) [IMG4TOOL] checking hash for "USBPortController1,USBFirmware"IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "WCHFirmwareUpdater" OK (found "wchf" with matching hash) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch0" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch1" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch2" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch3" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch4" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch5" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch6" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch7" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch8" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatch9" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatchA" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatchB" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatchC" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatchD" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatchE" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "Yonkers,SysTopPatchF" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "eUICC,Gold" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "eUICC,Main" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag) [IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "iBEC" OK (found "ibec" with matching hash) [IMG4TOOL] checking hash for "iBSS" OK (found "ibss" with matching hash) [IMG4TOOL] checking hash for "iBoot" OK (found "ibot" with matching hash) [IMG4TOOL] checking hash for "iBootData" OK (found "ibdt" with matching hash) [IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest)

[IMG4TOOL] IM4M signature is verified by TssAuthority [IMG4TOOL] IM4M is valid for the given BuildManifest for the following restore: BuildNumber : 22E240 BuildTrain : CrystalE ContentEncoding : aea DeviceClass : d94ap FDRSupport : YES MobileDeviceMinVersion : 1774 RecoveryVariant : Recovery Customer Install RequiresNonceSlot : YES RequiresUIDMode : YES RestoreBehavior : Erase Variant : Customer Erase Install (IPSW)

[IMG4TOOL] APTicket is GOOD! [IMG4TOOL] SHSH2 contains generator 0x6a369a858d3b73ee which is BAD for nonce in IM4M!

I don't know why it said "BAD for nonce in IM4M", maybe due to the format change in blobs, needs research.

Anyway, this method does work for iphone 16 series. But the blobsaver do needs to be updated because most people don't know the value of identifier and board configuration for iphone 16 series, so they have to google them.

Also, new users don't save the device information for iphone 16 series devices, so they may have misunderstanding that the tool is not available with new iphone 16 series. It is appreciated if the author can supplement these values into next release.

Lanurence666 avatar Apr 17 '25 07:04 Lanurence666

Airat90 here are my mods for the new iPhone16 devices. I can only test on a Win 11 OS and with the iPhone16Pro Max as that's the only phone I have. You will also have to set up your system to be able to build the source code for your specific OS.

The data within these additions can be found on ipsw.me.

Image

Image

To change the version number/project name (not required unless planning on creating a released version for the masses):

Image

Image

Image

My knowledge of programming is little. Can you post the .exe here?

airat90 avatar Apr 19 '25 11:04 airat90

This will be added in the next version. To use it now, you can use the latest nightly release.

airsquared avatar Jul 28 '25 20:07 airsquared