ApNonce doesn't match ApTicket workaround? (16.7.5 -> 16.6.x)

[storm sleet]

Hi guys!

First of all sorry for posting yet another "Can I downgrade question-post".

My goal is to downgrade my iPhone X IOS 16.7.5 to IOS 16.6, which according to this guide by @wintry fable is possible with blobs:

https://gist.github.com/mineek/bd8d0e002ce67e82831a23a8d7eceb3c

At step 4 in the guide there is this command to set nonce:

./futurerestore -t /path/to/blob.shsh2 -0 -1 -3 -7 /path/to/16.6.1.ipsw

Like Mineek mentions it may cause an error that says failed to set nonce. Which happened to me as well.
When continueing with the 5th and final step i got the error that the ApNonce does not match the ApTicket. I did some research and Cryptic told me that using a 15.0 ipsw file with the blob being my targeted version (16.6) could be a workaround to fix this.

If understood correctly I should do the following:

1. ./futurerestore -f -t /path/to/16.6/blob -0 -1 -3 -7 /path/to/15.0 ipsw

2. ./futurerestore -t /path/to/blob.bshsh2 -0 -1 /path/to/16.6.ipsw

Could anyone confirm whether this is correct or not?

[digital thistle]

That error happened to me. I always forced reboot to normal mode (button combo). So I put it in DFU mode with palera1n. Finally I run again the following steps:

gaster pwn
gaster reset

And then the step 4. In conclusion try again with the same steps.

[storm sleet]

Oke so when i get the apnonce error i reboot my phone volume up volume down and holding side. Then palera1n -D , put it in dfu and do gaster pwn gaster reset followed by step 4?

[digital thistle]

👍

[storm sleet]

That unfortunately didnt work for me 😦

[digital thistle]

Can you post a screenshot of your error?

[storm sleet]

Last command i used was : ./futurerestore -t /Users/diego/Downloads/699706686152750_iPhone10,6_d221ap_16.6-20G75_27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae.bshsh2 -0 -1 /Users/diego/Downloads/iPhone10,3,iPhone10,6_16.6_20G75_Restore.ipsw

[digital thistle]

Are you sure that the ApNonce is written on the NVRAM? I mean the previous futurerestore command doesn't fail, right? If you are not sure send a screenshot of the output.

[storm sleet]

Bro! It worked!

[storm sleet]

I assume it upgrades to 16.7.5 when I restore a iCloud back up right?

[digital thistle]

I don't think so. But if this happen you can always downgrade.

[storm sleet]

You made my day man!

I’m so happy to be on a dopamine compatible iOS

[digital thistle]

I'm curious. How did you fix the issue?