iOS 5 and earlier?

[DustyTester60]

Hi, thank you for building this tool! Does it work on iOS 5? My backup doesn't show encrypted, but when I run the dumpkeys command it says "No key for protection class 1". Then the next line says "no key for file".

[dunhamsteve]

It's been a while and I don't recall for sure if it still supports iOS 5, but I see that code to read older formats is still there and it probably does work with that version if it's getting that far. (I should have collected small test cases back when I had those versions.)

I remember that dumping the keys does not work if the backup is not encrypted (which the README file confirms) - it looks like the keylist file is encrypted regardless, but the key to decrypt it is not included if the backup is not encrypted. If you can make another backup with a password on it, I think it will work.

[DustyTester60]

Thanks, Dunham! I appreciate your feedback. I no longer have the device..

I couldn't get it to work on an iOS 4.2.1 installation either. Both backups were not encrypted, but as you mentioned the keychain files are encrypted and appear to be locked to the device.

I may be out of luck.

[dunhamsteve]

Yeah, sorry about that.

What happens is that if the backup is not encrypted, iOS uses a device key that is really difficult to extract from the device. If you set a backup password, then for most of the entries it will use a fresh key and include a copy wrapped by your password in the backup. That's the only reason I put passwords on my backups.