Seeing how iOS 16 SEP will be incompatible with iOS 14 and 15, once the last version of iOS 15 is unsigned those versions will be inaccessible without SEP/baseband blobs. I have a WiFi iPad 5 (A9) of which I'd like to keep the ability to restore to those firmwares.
So my question is, how do I save valid SEP blobs, and how can I use them? I know A9 is compatible with blackb1rd so it is possible to set the nonce and stuff. I saw an option in tsschecker to supply a SEP nonce, but how do I know what to set that nonce to? Is it related to the normal generator (I have it set to 0x1111111111111111)? And does futurerestore support using SEP blobs instead of using a signed SEP?
#How to save and use valid SEP blobs
56 messages · Page 1 of 1 (latest)
@minor mulch thanks for creating a new thread!
Please use /solved to delete this thread when you're done.
Thanks gir, i will
i'm not sure blackbird can actually set sep nonce
the thing with sep blobs is that you can use them but they have to be used immediately after grabbing them
i heard people say it can
yeah just like how you can save and use blobs on A12+ while not jailbroken in that way
how does one get the SEP nonce though
sep nonce is included in TSS response iirc
blackbird may be able to set the sep nonce but i think the problem is there isnt a tool that uses it
yeah, but i think it just gets it from the request
tsschecker's help says that it uses a random SEP nonce if it's not provided
eugh
and does futurerestore support using sep blobs?
i think nyu had a modified version that allowed him to use sep blobs
but that was more to prove that you could use delay ota sep blobs
hm
damn
because were kind of running out of time to save valid SEP blobs compatible with iOS 14 and 15
yeah...

in all honestly you're probably able to save blobs and then just wait and hope a SEP downgrade tool comes out but idk how to actually get SEP blobs
i can save them with tsschecker
but i wasn't sure what to set the SEP nonce to
because i don't know if it's linked to like the generator or APnonce
Sep blobs are a part of all blobs
The only thing invalid is baseband if you don’t specify bbsnum
yeah i know that, do i need to take anything in account when setting the SEP nonce?
it's a wifi ipad so i don't care about bb
nothing else needs to be done
just have to wait for someone to figure out sep downgrading
okay thanks
so i don't need to set the SEP nonce in the blob to a specifc value depending on some generator?
well unless the sep thing allows skip nonce you need to set it and make art valid and happy
not sure what that means
art is antireplay token just another factor that will prevent downgrading
ahh, do i need to save that?
wait, antireplay, is it even saveable lol
so basically just by saving blobs i'm already as prepared as i can be for unsigned SEP restores?
doesn't need to be saveable
just need to have sep set a new one for the blob you want
this is raw art
I'm sure its encrypted after the fact
yep