Possible downgrade to iOS 10.2 from iOS 10.2.1 for some users

By , Feb 20, 2017

Are you are stuck on iOS 10.2.1 or higher, having missed the iOS 10.2 signing window and therefore the Yalu jailbreak? If so, you may be in luck today, provided you have the correct setup. Early reports have come in that some devices are creating nonce collisions on iOS 10.3 b1, providing an indirect route back to iOS 10.2 through Prometheus.

For this clever workaround to come off, you must have a device which produces collisions, namely the iPhone 5s or (possibly, though not confirmed on iOS 10.3 b1), an iPad Air. If you do, you may be able to downgrade from iOS 10.2.1 to iOS 10.2 and jailbreak, by first downloading and installing iOS 10.3 beta 1, and then downgrading to iOS 10.2 using futurerestore.

First reported on Reddit, an iPhone 5s user discovered that although nonce collisions disappeared in iOS 10.2.1, they are still present, at least on some devices, in iOS 10.3 beta 1. Whether they are present in all the 10.3 betas is unclear, but the user thought not, with beta 1 being the only option if you hope to use this method.

Another successful report, again using an iPhone 5s, mentions upgrading first to iOS 10.3 beta 1, and then using futurerestore to downgrade all the way back to iOS 10.2. This has now also been confirmed personally by futurerestore’s creator, tihmstar.

Who does this apply to?

This stroke of luck only applies to you if you fulfil all of the following requirements:

  • You are stuck on iOS 10.2.1 or an iOS 10.3 beta.
  • Your device produces collisions, i.e., is an iPhone 5s or (maybe) an iPad Air.
  • You have iOS 10.2 .shsh2 blobs, saved with the correct colliding nonces.
  • You are comfortable with the process of moving to an iOS beta version.
  • You are comfortable using the futurerestore downgrade tool.

If all of that applies to you, you may yet be able to jailbreak! The first thing to do is to move from iOS 10.2.1 up to iOS 10.3 beta 1. After that, you may optionally run noncestatistics to see which nonces are colliding the most for your device on iOS 10.3 beta 1, and look through your saved iOS 10.2 blobs to see if you have blobs saved with those nonces.

If you do not wish to do that, you can proceed straight to running futurerestore with all of your saved nonces to see if any of them collides and matches your blob, though this is less likely to work.

From what I’ve seen, the two nonces which appear to be colliding heavily on iOS 10.3 beta 1 are the same ones which collided for the iPhone 5s on iOS 10.2, and were in fact my 5s’ colliding nonces on that firmware:

9e4c518009d00df190a450b3b47691768812360c
9f4aeec726e7c682339ddb3c6c2dec52662dc517

These are the nonces I would try with futurerestore, if you have iOS 10.2 blobs saved for either of them.

Whilst this is definitely an edge case, and will almost certainly be the last opportunity to make use of the nonce collision method with Prometheus, it will at least permit some users to save their jailbreak. Provided you are fortunate enough to have the requisite blobs and have the technical savvy to use the tool, I’d advise you to give it a go now rather than stay stuck on iOS 10.2.1. If it doesn’t work out after a few hours of running Prometheus to get a collision you can always go back to iOS 10.2.1, whilst it is still signed, and wait it out there.

Do you have an iPhone 5s that is stuck on iOS 10.2.1 or higher? Are you going to give this the old college try? Let me know in the comments section…

  • Share:
  • Follow:

  • Pedro Teixeira

    Hi Joaquim, this is also great news, but some of us are really waiting and needing your guide to safely use prometheus for the 9.3.3 to 10.2 upgrade 🙂 thanks

    • ronnie

      I was too wondering if it’s worth upgrading to 10.2 from 933 on my 6s.

      • Flip Tragnée St-Pierre

        Honestly, I’m happy I made the move using Prometheus 🙂
        Took time and several tries to fix all the errors (I was using a virtual machine) but 10.2 seems just as stable as 9.3.3 was.

      • ronnie

        The 7 day signing doesn’t bother you? Are you on a 6s? Thanks.

      • Flip Tragnée St-Pierre

        Yes 6s. I like to be up to date and Yalu is very stable so far (no random reboot and good battery life). Apparently Saurik is working on a solution for the 7 days certificate so wait and see. Given I don’t reboot very often, I can live with that. With that said, no rush for you if you are already on 9.3.3.

      • ronnie

        Appreciate the update. You wouldn’t happen to know if the tweak “Anywhere!” Works on ios10 would you? I use it on 933 for Spotify (get rid of the shuffle option so I can select my desired song) thanks.

      • Flip Tragnée St-Pierre

        Never used Anywhere! before today but description doesn’t mentioned not compatible. I installed it, seems OK but I haven’t test it thoroughly. At least no crash so far

      • yusslayer

        Hai..what method u use..first I use jailbreak method..got error iokit/general error…and second use futurerestore method and my iPhone 5s enter recovery mode again and again with 5 hours..I do know what to do..can u please help me..which method very easy and tell me where I do got wrong..help me please..I have jailbroken 9.3.1 with jbme n save blob 10.2 and 10.2.1 ..I want to update from iOS 9.3.1 to 10.2 ..

      • yusslayer

        Tell me u are success upgrade.with method u use

      • Flip Tragnée St-Pierre

        Succeeded with Prometheus method described. Went from 9.3.3 jailbroken to 10.2. Read the tutorial carefully as there are many dependencies required. Also download reiboot (free) to get out of recovery mode if things go wrong. You can then start again with no need to restore. As usual make sure you did a backup prior.

      • yusslayer

        Hai..what method u use..first I use jailbreak method..got error iokit/general error…and second use futurerestore method and my iPhone 5s enter recovery mode again and again with 5 hours..I do know what to do..can u please help me..which method very easy and tell me where I do got wrong..help me please..I have jailbroken 9.3.1 with jbme n save blob 10.2 and 10.2.1 ..I want to update from iOS 9.3.1 to 10.2 ..

      • Joaquim Barbosa

        Download reiboot to exit recovery. When you are out of recovery, go to the ‘Prometheus Guide: Introduction’ article, and read it ALL before you start. Then ask your questions on THAT article if you are stuck.

        Good luck!

      • Timonline

        If you are jailbroken on 9.x and have an iPhone 5S or above, I need your help with a project

    • Joaquim Barbosa

      The guide will be out soon, but there is no rush to move. 9.3.3 has a one year certificate, and 10.2 only one week at the moment. Soon there will be a solution for one year on iOS 10.2, and my guide will be ready before then. Thanks for waiting!

    • Joaquim Barbosa

      My guide is now up, good luck! Read the introduction carefully first, and then go on to the guides…

      http://www.idownloadblog.com/2017/02/22/prometheus-guide-introduction/

  • abdalkareim

    ‪so is this method also still work on iphone 6s?‬
    ‪a lot of thanks for you‬

    • Joaquim Barbosa

      Prometheus works on iP6s if you have a jailbreak already. What I describe here only works on iPhone 5s. Thanks!

      • abdalkareim

        now it is so clear
        thx so much for you
        so i should still waiting till new method publishd…

      • -Aj-

        what about iPhone se

  • Lakers Fan

    Do you lose Touch ID? I feel like I lost Touch ID after upgrade from iOS 9 to 10. ID be happy with 10.2 if not possible to go back to iOS 9 on my 5s.. Advixe is appreciated, thanks!

    • Joaquim Barbosa

      You will not lose Touch ID following this procedure. Is your 5s on iOS 10.2.1 at the moment?

      • Lakers Fan

        Correct

      • Joaquim Barbosa

        If you have .shsh2 blobs saved for iOS 10.2, then you can do this process to get back to iOS 10.2. If you don’t have blobs, then you can’t I’m afraid.

  • Natalie

    Rip iPhone 7 users still ;w;

  • TechnoBuff

    This question is for anyone savvy with Jailbreaking.
    I have an iphone 6s plus presently jailbroken on ios 9, is it possible to update to ios 10.2 using itunes and downloaded ipsw and then use Yalu to jailbreak 10.2 or have i missed the boat on jailbreaking on ios 10?
    Please advise. THanks

    • Jimmy Salas

      From my understanding, you cannot upgrade via iTunes because it will check to see if your ipsw (10.2) is signed and it will fail. No longer can.

    • Joaquim Barbosa

      Do you have shsh2 blobs saved for iOS 10.2?

      • TechnoBuff

        Did not save SHSH2 blobs as i never upgraded to ios 10 at all. Always been on ios 9 till date.
        Was just wondering if there is a workaround for me to update to ios 10.2.. Any chance at all?

      • Joaquim Barbosa

        Nope, sorry. Even with a jailbreak, you need blobs. Try to always save .shsh2 blobs from now on, even if you think you won’t need them. Cheers!

  • Jimmy Salas

    @joaquimbarbosadiscuss:disqus , I have an iPhone 6+. I saved the 10.2 blobs when apple was still signing. I’m currently on 10.2.1, I’ve been trying to find a downgrade tool but not sure what is out there that will work for my current situation. Thanks

    • Joaquim Barbosa

      I think you’re out of luck. You need a jailbreak to downgrade 6+, this only works for iP5s. Stick on 10.2.1 and hope…

  • -Aj-

    what about an iPhone se

    • Joaquim Barbosa

      No.

  • Lakers Fan

    Is there a guide for noncestatistics, will be using Linux, easier access for me. I have Windows, I don’t think there is a windows version correct?

    • Joaquim Barbosa

      You can skip the noncestatistics step pretty much. Linux steps will be much the same as Mac, so any guide should work. Just try with all the nonces for which you have blobs saved… Good luck!

      • Lakers Fan

        Digging deeper in after trying to figure out which baseband I need to use, I have 2 Mav7Mav8-7.50.01.Release & Mav10-5.48.00.Release which I know 2 can be common but from what i’ve found that these don’t seem to be 5s basebands? I bought this phone thinking it was Verizon so I assumed it was a Global phone. I forsure know it works on Verizon but the back says model A1533 I guess maybe I should download the gsm ipsw or are one of those basebands right for my 5s?

      • Joaquim Barbosa

        The basebands need to be taken from the 10.2.1 IPSW, not the 10.2 IPSW by the way. If you are using the 10.2.1 IPSW, then plug it into iTunes, go to the information page, and click on your serial number until your Model appears. It should be either 6,1 or 6,2. This will tell you definitively if it is Global or GSM. Cheers.

  • Med Elouardi

    Hallo evrey one
    Ihave ip 6. ios 10.2.1 + shsh file
    I can downgrad to 10.2 ?
    Tnx

    • Joaquim Barbosa

      No. This clearly says iPhone 5s only. iPhone 6 cannot be downgraded and should stay on 10.2.1 and wait.

    • Devgru

      Test it man..

  • yusslayer

    I have iPhone 5s with iOS 9.3.1 jailbreak..i want to move to 10.2..how ?..can I direct upgrade using futurerestore or first I go to 10.3.1 beta the downgrade to 10.2 using futurerestore.i have save blob 10.2 and can I use in windows pvz this futurerestore .please help guide.

    • Joaquim Barbosa

      You can go directly to 10.2 using Prometheus. Wait for my guide on the subject. You cannot use windows unless you use a Virtual Machine with Linux or Mac inside it…

      • yusslayer

        Yes..please give guide.i will use vmware on my pc.

      • yusslayer

        Please give a step how to do first and next to use Prometheus.i miss 4 hours after Apple stop sign in 10.2 and I very want to go 10.2.please help guide.

      • Joaquim Barbosa

        There is no hurry, if you are already jailbroken, you can do this at any time. My guide will be ready soon.

      • yusslayer

        But I in pangu iOS 9.3.1 jalbreak.is my 9.3.1 have tfp0 enable???..can I use jailbreak method and what iOS should I download..iOS 10.2.1 and 10.2 or iOS 9.3.1 or iOS 10.3 beta 1 ipsw.

      • yusslayer

        I did all step 1and 2…error can’t connect a device in restore mode.please and please help sir what 1 must do to fix this.

    • Devgru

      U have shsh2 blobs saved for iOS 10.2.. if not don’t waste ur time..

    • Timonline

      Please contact me, I need your help with a project that needs an iPhone 5s and jailbroken on 9.x

  • yusslayer

    I on iOS 9.3.1 .i need 10.2 and 10.2.1 ipsw right..or me wrong..please help .i want trying it now.

    • Timonline

      If you are jailbroken on 9.x and have an iPhone 5S or above, I need your help with a project

  • mine248

    Did anybody tried it on an iPad Air?

  • Joaquim Barbosa

    My guide is ready. Read the introduction carefully and then follow parts 1 and 2.

    http://www.idownloadblog.com/2017/02/22/prometheus-guide-introduction/

  • Joaquim Barbosa

    Ok. Did you read my guide and follow it carefully? If you are jailbroken already you must do part 1 and part 2. You must use jbme.qwertyoruiop.com to enable tfp0 before you start. Yes, 10.2 blob, complete 10.2 IPSW, and some individual files from 10.2.1 IPSW. Did you get your phone out of recovery mode?

    Please give the exact error of nonceenabler when patching.

    Thanks.

    • yusslayer

      Thanks for reply…I done everything with all step 1 and 2..is nonceenabler after put command nvram with generator..after enter it back to user root$:
      Put command nvram :false ..nothing happen.put command reboot and iPhone go to recovery boot .and put command ./futurerestore -t iPhone…………..and it say ‘no such file or directory.with other blob with shsh2 iokit/general error..I put blob noapnonce..in my blob 10.2 and 10.2.1 save folder have apnonce and noapnonce and I use noapnonce because it just noapnonce have generator ..blob apnonce don’t have it.
      I just use hotspot this iphone in upgrade process.

      • Joaquim Barbosa

        Yes, use the .shsh2 blob from the noapnonce folder. But not the whole apnonce folder, just the .shsh2 file.

        Check the names of all your files again. For example, you wrote ‘futurerestore’, but if the file is called ‘futurerestore_macos’, it will not work, you must write ‘futurerestore_macos’ if that is the name.

        Check the names of ALL the files in your command are the same as the files in your folder. ‘No such file or directory’ means it can’t find one of your files.

        Edit: also, ask your next question in Prometheus Guide: Introduction article, do not ask on this article.

  • yusslayer

    Hai..I have fix all error and i happy all run perfectly until this error can’t connect a device in restore mode..restore mode failed..I’m very tired not sleep figure thisin 5 day.please somebody I need help.thanks

    • Osorio11

      Can I give you some free but well meaning advice? 5 or 7 years ago I was just look like you: if it seemed remotely possible to get a jailbreak back that faltered, I kept trying in my case 72 hrs nonstop. I remember the feeling of absolute grievance and although in the end I succeeded this time, trying to get my jailbreak back on my SE running 9.3.3 after it semi worked (no working re-jailbreak Pp button, and gone after a reboot the first time and without any reason the next time. Yesterday I had no luck at all. If you’re interested in keeping your sanity: do like me and just stop. There WILL BE ANOTHER jailbreak, if you just wait a little bit. I read Pangu will have one for a stable version of iOS 11.xx. we waited so long for the Yalu jailbreak: I think we can also wait for the next one. Peace, man!

  • Jay

    I am jail broken but don’t have shsh can this still work??

  • Iulian Teodorescu

    so iphone 6s won’t work?

  • Iulian Teodorescu

    Yeap , i read you info and to be honest i quit… to much pain in ass .
    If you ask me to use more than one tool in windows to jailbreak my phone then 90% is fail. I got my own experience of jailbreak and whatever you said is 90% fails.