Tag: SEPO

Contents

The SEPO (Security Epoch) tag specifies the security epoch required for the device to load the provided image. It is believed to be used by Apple to prevent devices from loading previously vulnerable firmwares, but this is unconfirmed.

Tag Format

IMG3

Img3SepoTag {
   0  u32   magic     // 'OPES' ('SEPO' in little endian)
   4  u32   fullSize  // including header and padding
   8  u32   size      // including padding
   C  u32   value
  10  u8[]  padding   // optional
}

Example Tag

The following tag is from the AppleLogo payload from the 2.0 (build 5A347) build for the iPhone (iPhone1,1).

Offset0123456789ABCDEFASCII
1C7045504553 EPES
1C80100000000400000004000000............
OffsetLengthExplanation
0x1C7C4magic: When interpreted in little endian order, these bytes give the string, SEPO.
0x1C804fullSize: This tag is 0x10 (16) bytes long.
0x1C844size: The actual payload (including padding) is 4 bytes long.
0x1C884value: The actual value of the tag: 4.