* WalrusIRC

You need to have 5 posts and not be part of restricted usergroups in order to use the WalrusIRC embedded shoutbox. However, you can also access our IRC channel called #CodeWalrus via EFnet.

Author Topic: TI-84 Plus CE downgrade protection with Boot 5.1.5+  (Read 250 times)

0 Members and 1 Guest are viewing this topic.

Offline critor

  • Full User
  • Join Date: Dec 2014
  • Location:
  • Posts: 184
  • Post Rating Ratio: +6/-0
TI-84 Plus CE downgrade protection with Boot 5.1.5+
« on: April 02, 2017, 04:19:09 pm »
Owning a TI-8x Flash calculator had always been a synonym for freedom.  ;)

You could update and then downgrade freely. ;D

With the only exception of TI-84 Plus coming preloaded with Boot 1.03, in which TI had moved from a 512-bits RSA signature to a 2048-bits one - so the only accepted OS were 2.55+ (so 2.55 only, as no update has been released since).
But the intent wasn't to prevent downgrading, or they would simply have checked the version.
They wanted to prevent us from being able to install modified OSes, for example with a patched exam mode...



Those were the good old days.
For the first time in history, we now get a downgrade protection on a TI-8x Flash calculator, the TI-84 Plus CE. :'(

In fact, it is very similar with the TI-Nspire downgrade protection, except that just the first 3 version digits are being checked.

The TI-Certificate following the header of any 5.1.5+ OS file is now holding 2 versions number :
- the OS file version
- the minimal allowed OS version to set

When an OS install suceeds, the minimal allowed OS version, if higher, is written to the calculator Flash memory, in the TI-Certificates page, a zone which you can't reset with official menus.
When you start an OS transfer, the TI-Certificate being at the start of the file is among the first sent things. So the calculator immediately checks if the received version is higher or lower than the minimal allowed OS version. In the later, the transfer is immediately aborted.


Apparently, the downgrade protection is only functional on TI-84 Plus CE coming preloaded with Boot Code 5.1.5.
The OS installation code from previous 5.0.0 Boot Code versions doesn't seem to care about the new minimal allowed version TI-Certificate field.


All OSes 5.1.5 to 5.2.2 have a minimal allowed version set to 5.1.5, which might appear as non-excessive to you.
But when you know that since OS 5.1.0 you can easily crash your calulator with only 3 short lines of TI-Basic, it's still being harmful to all TI-84 Plus CE owners.  >:(



Source : https://tiplanet.org/forum/viewtopic.php?t=19793&p=214887#p214887 and https://tiplanet.org/forum/viewtopic.php?t=19803&p=214964#p214964
« Last Edit: April 02, 2017, 04:33:49 pm by critor »



Offline c4ooo

  • Super User
  • CW Contest II Winner
  • *
  • Join Date: Aug 2015
  • Location: 127.0.0.1
  • Posts: 967
  • Post Rating Ratio: +12/-4
  • Advanced forumer
  • Gender: Male
Can't you modify an older/custom OS to have the version number of the current OS ???

Offline critor

  • Full User
  • Join Date: Dec 2014
  • Location:
  • Posts: 184
  • Post Rating Ratio: +6/-0
Can't you modify an older/custom OS to have the version number of the current OS ???
I did to confirm how the protection works.
By faking the OS version in the file certificates, the OS transfer does start. :)

But the certificates are included in the zone being protected by the RSA signature, and thus the OS is still going to be rejected, but after the transfer on the difference.

Offline xlibman

  • Omni founder & CW co-founder
  • CodeWalrus Staff
  • Super User
  • Original 5
  • CodeWalrus Supporter
  • *
  • Join Date: Nov 2014
  • Location: Quebec, Canada
  • Posts: 18522
  • Post Rating Ratio: +95/-4
    • dj_omnimaga
    • DJOmnimaga.music
    • @DJOmnimaga
    • dj_omnimaga
    • @DJOmnimaga
    • /u/DJ_Omnimaga
    • DJOmnimaga
    • 112/11286
    • @djomnimaga
    • @DJOmnimaga
    • DJ Omnimaga music store
  • Gender: Male
Sucka they are adding this to new calcs. Thankfully, I have no reason to downgrade, unlike the CX, but I wish they spent more time fixing bugs than adding anti-downgrades
  • Calculators owned: TI-57, 73, TI-80 (broken), TI-81, TI-82, TI-83, TI-83+ (broken), TI-83+ (broken), TI-83+SE (broken), TI-84+, TI-84+CSE, TI-84+CE, TI-85, TI-86, TI-89T, TI-92, TI-Nspire, TI-Nspire CX (semi-broken), HP 39gII, HP Prime, Casio fx-7000G, fx-7400G+, fx-7700GE, fx-9750G+, fx-9750GII, fx-9860G, cfx-9850G, FX-1.0+, fx-CG10, fx-CP400
  • Consoles, mobile devices and vintage computers owned: Samsung i5510, Nexus 5, Atari 2600, Lynx, SMS, Game Gear, Genesis, Dreamcast, NES, SNES, N64, GCN, Wii, Wii U, GBA, DS, 3DS, PS2, PS3, PS4, PSP, PSVita, XBox 360, XBOne

Bandcamp|Reverbnation|Facebook|Youtube|Twitter
Retired Omnimaga admin (2001-11) and editor (2012-14)

 


You can also use the following HTML or bulletin board code to share it on your page or forum signature!


Also do not forget to check our affiliates below.
Planet Casio TI-Planet Calc.news BroniesQC BosaikNet Velocity Games