ensingerphilipp

The MIT License (MIT)

Copyright (c) 2015 Felix Hummel

Permission is hereby granted, free of charge, to any person obtaining a copy of
this software and associated documentation files (the "Software"), to deal in
the Software without restriction, including without limitation the rights to
use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
of the Software, and to permit persons to whom the Software is furnished to do
so, subject to the following conditions:

ensingerphilipp

Note: I took this Guide from https://gist.github.com/dhinakg/5dc595e39440e6d68a24d38e6fea926d and added a way on how to find your AssetAudiences

Note: This writeup is for advanced users and developers. For a guide that will actually walk you through this, ios.cfw.guide is updated. guides.stkc.win should be soon™️.

13.x appears to have issues. 13.5 is confirmed to fail to check updates once you change the audience. If any other versions do this, please let me know.

So, I got bored and decided to do more research into alternates. Turns out you can still abuse it to update to a currently signed Version (15.4.1 as of writing) on iOS versions that don't support alternates. You're welcome.

This requires a jailbreak. Of course, you can do the backup editing stuff if you're not JBed but:

ensingerphilipp

#!/usr/bin/env zsh

set -e;
set +m; # Job control would've been nice, but manual round robin it is, sigh.

if [ -z "${ZSH_VERSION+x}" ]; then
    echo 'Try again with zsh.';
    exit 1;
fi;

ensingerphilipp

Keybase proof

I hereby claim:

• I am ensingerphilipp on github.
• I am ensi (https://keybase.io/ensi) on keybase.
• I have a public key ASBah2gTaUraxsNIrtV0T368yfrf0exny8VvbW9WOSTSqAo

To claim this, I am signing this object:

ensingerphilipp

Keybase proof

I hereby claim:

• I am exspir3 on github.
• I am ensi (https://keybase.io/ensi) on keybase.
• I have a public key ASBah2gTaUraxsNIrtV0T368yfrf0exny8VvbW9WOSTSqAo

To claim this, I am signing this object:

ensingerphilipp

package rsaSignature;

import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;

public class RsaKeyGenerator {

    //Generate RSA Key with size of at least 3072 bits

ensingerphilipp

package rsaEncryption;

import javax.crypto.BadPaddingException;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.NoSuchPaddingException;
import javax.crypto.spec.OAEPParameterSpec;
import javax.crypto.spec.PSource;
import java.security.*;
import java.security.spec.MGF1ParameterSpec;

ensingerphilipp

package ecdsaSignature;

import java.security.Security;
import java.util.Arrays;


//Helper Class to print all supported Epileptic Curves for use in ECDSA
//Refer to http://safecurves.cr.yp.to for a list of save epileptic curves

public class ShowSupportedCurves

ensingerphilipp

package ecdsaSignature;

import java.security.*;
import java.security.spec.ECGenParameterSpec;

public class ECDSAKeyGenerator {

    public static KeyPair generateKeyPair() throws NoSuchAlgorithmException, InvalidAlgorithmParameterException {

        //It is required to use an epileptic Curve with Security Strength <= Security Strength of the used Hashing Function

ensingerphilipp

import org.bouncycastle.crypto.generators.Argon2BytesGenerator;
import org.bouncycastle.crypto.params.Argon2Parameters;
import org.bouncycastle.jce.provider.BouncyCastleProvider;

import javax.crypto.NoSuchPaddingException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.Security;
import java.util.Base64;