dhinakg/aeota

AEA OTA/IPSW decryption

aeota

AEA OTA/IPSW decryption

Grabbing keys with get_key.py

Gets a key from an AEA (non OTA; for OTAs, use the key that is provided with your response, as they generally do not have embedded auth data).

pip3 install -r requirements.txt
python3 get_key.py <path to AEA>

Note: it is highly recommended to use a virtual environment:

python3 -m venv .env  # only needed once
source .env/bin/activate
pip3 install -r requirements.txt  # only needed once
python3 get_key.py <path to AEA>

Decrypting an AEA

aea decrypt -i <path to AEA> -o <decrypted output file> -key-value 'base64:<key in base64>'

For IPSWs, you will get the unwrapped file (ie. 090-34187-052.dmg.aea will decrypt to 090-34187-052.dmg).

For assets, you will get specially crafted AppleArchives (see next section).

Extracting assets

Assets (including OTA updates) are constructed specially and cannot be extracted with standard (aa) tooling. They can be decrypted normally, which will result in an AppleArchive that is not extractable with aa (we will call these "asset archives"). aastuff must be used to extract them.

# Decrypt if necessary
aea decrypt -i <path to AEA> -o <decrypted asset archive> -key-value 'base64:<key in base64>'
./aastuff -i <decrypted asset archive> -o <output folder>

aastuff can also handle asset archives that are not already decrypted:

./aastuff -i <path to AEA> -o <output folder> -k <key in base64>

Run ./aastuff -h for full usage information.

Note

aastuff_standalone has more features, including file listings and selective extraction. Run ./aastuff_standalone -h for full usage information.

Notes

aastuff uses AAAssetExtractor, functions from libAppleArchive in order to extract asset archives. However, it is a pretty barren API and does not offer things like selective extraction.

aastuff_standalone uses (mostly) standard libAppleArchive functions to extract asset archives. It offers things such as file listings and selective extraction, but is not fully validated against all possible asset archives.

For now, both are built and used in the same way. Once aastuff_standalone is fully functional and validated, aastuff will be deprecated.

Related Projects

• aea1 - Siguza

Credits

• Siguza - auth data parsing strategy, AppleArchive extraction sample code
• Nicolas - original HPKE code
• Snoolie - auth data parsing strategy
• Flagers - AppleArchive assistance

aeota's Issues

Getting error

I am getting this error when using this tool,
Error parsing key
Error loading credentials

Am i doing something wrong?

Releases

Need to check when AAAssetExtractor* was added

Error creating I/O streams

I enter the command to decrypt but it gives an error. Tell me what am I doing wrong???

invalid syntax

python get_key.py /Users/wesker/Downloads/iPhone16,1_18.0_22A5282m_Restore/090-29322-049.dmg.aea
File "get_key.py", line 30
print(f"Expected 12 bytes, got {len(header)}")
^

getting this error
please fix that

Cant build

?@MacBook-Pro-? aeota % sudo make
Password:
clang++ -framework Foundation -fmodules -fobjc-arc -L. -lAppleArchive -g aastuff.m -o aastuff
2024-06-12 17:07:17.416 xcodebuild[4913:131848] [MT] DVTSDK: Skipped SDK /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS15.2.sdk; its version (9.3) is below required minimum (15.2) for the iphoneos platform.
aastuff.m:46:84: warning: incompatible pointer types sending 'bool *' to parameter of type 'BOOL * _Nullable' (aka 'signed char *') [-Wincompatible-pointer-types]
        if (![[NSFileManager defaultManager] fileExistsAtPath:out_path isDirectory:&is_directory]) {
                                                                                   ^~~~~~~~~~~~~
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/Foundation.framework/Headers/NSFileManager.h:242:72: note: passing argument to parameter 'isDirectory' here
- (BOOL)fileExistsAtPath:(NSString *)path isDirectory:(nullable BOOL *)isDirectory;
                                                                       ^
1 warning generated.
Undefined symbols for architecture x86_64:
  "_AAAssetExtractorCreate", referenced from:
      _main in aastuff-d9de4d.o
  "_AAAssetExtractorDestroy", referenced from:
      _main in aastuff-d9de4d.o
  "_AAAssetExtractorWrite", referenced from:
      _main in aastuff-d9de4d.o
ld: symbol(s) not found for architecture x86_64
clang: error: linker command failed with exit code 1 (use -v to see invocation)
make: *** [aastuff] Error 1
?@MacBook-Pro-? aeota % sudo make -v
GNU Make 3.81
Copyright (C) 2006  Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.

This program built for i386-apple-darwin11.3.0

Filter extraction to specific files only

List files

Get key from remote AEA