Author Topic: Downgrade your TI-84 without reflashing the Boot Code  (Read 12634 times)

0 Members and 1 Guest are viewing this topic.

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Downgrade your TI-84 without reflashing the Boot Code
« on: May 28, 2012, 11:40:34 am »
Summer 2009, the TI community factored all 512-bits RSA keys used to validate OS and Apps installation on TI-z80 and TI-68k Flash calculators.

This opened the way to:
  • patched OSes and Apps
  • 3rd party OSes and Apps



Some of the patches disabled the TI-84 PTT mode, and TI must have been bothered with that.

Spring 2011, we discovered a new 1.03 Boot Code on the new TI-84 Pocket and on TI-84 Plus hardware revision Q and above.



That new Boot Code adds a 2nd validation check for the OS installation with a 2048-bits RSA key only included in OS 2.55MP.

So you had to:
  • wait 6 additional minutes at the "Validating..." screen after sending an OS
  • stay with the lastest 2.55MP OS which breaks compatibility with several asm games




Then, Brandon Wilson discovered a way to reflash the TI-84 Boot Code. You could then downgrade your Boot Code to 1.02 or 1.00 and then downgrade the OS. ;D
But you had to get such Boot Code image, which is different between basic and Silver Edition TI-84.




Brandon then released EpicFail, a Boot Code 1.03 patch. No need to dump the Boot Code on a model you don't own anymore.
But you might break your TI-84 permanently if anything bad happends during the Boot Code flashing, and using such tools might void your warranty from TI point of view.



Brandon then worked on a 3rd way: a patched TI-84 2.43 OS which can be installed on Boot Code 1.03 because of some exploits. But it could not be shared publicly because of copyright reasons...

On TI-Planet we just converted that into a dynamic patch for every TI-84 OS; Make103!  ;D

You can now make every TI-84 0.46 to 2.53MP OS installable on your original Boot Code 1.03! ;D
It also works with TI-83 Plus OSes patched to be installed on the TI-84.
For now it doesn't work with 3rd-party OSes which are much smaller and don't reach the 2048-bits RSA key location (and so exploit) in ROM.



Download from the TI-Planet news:
http://tiplanet.org/forum/viewtopic.php?t=9333
« Last Edit: May 28, 2012, 11:51:19 am by critor »
TI-Planet co-admin.

Offline thepenguin77

  • z80 Assembly Master
  • LV10 31337 u53r (Next: 2000)
  • **********
  • Posts: 1594
  • Rating: +823/-5
  • The game in my avatar is bit.ly/p0zPWu
    • View Profile
Re: Downgrade your TI-84 withour reflashing the Boot Code
« Reply #1 on: May 28, 2012, 11:43:54 am »
If you want to do 3rd party OS's, or any OS for that matter, don't forget unsigned. It lets you send unsigned OS's to your calculator.
« Last Edit: May 28, 2012, 11:44:23 am by thepenguin77 »
zStart v1.3.013 9-20-2013 
All of my utilities
TI-Connect Help
You can build a statue out of either 1'x1' blocks or 12'x12' blocks. The 1'x1' blocks will take a lot longer, but the final product is worth it.
       -Runer112

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: Downgrade your TI-84 withour reflashing the Boot Code
« Reply #2 on: May 28, 2012, 11:52:48 am »
Oh sorry, I missed it.

Seems we made similar patches. :)
« Last Edit: May 28, 2012, 11:52:59 am by critor »
TI-Planet co-admin.

Offline thepenguin77

  • z80 Assembly Master
  • LV10 31337 u53r (Next: 2000)
  • **********
  • Posts: 1594
  • Rating: +823/-5
  • The game in my avatar is bit.ly/p0zPWu
    • View Profile
Re: Downgrade your TI-84 without reflashing the Boot Code
« Reply #3 on: May 28, 2012, 12:30:13 pm »
Actually, mine is very different. It mods the certificate.

The difference is that the brandonW version is specific to the OS while mine is specific to the calculator.
zStart v1.3.013 9-20-2013 
All of my utilities
TI-Connect Help
You can build a statue out of either 1'x1' blocks or 12'x12' blocks. The 1'x1' blocks will take a lot longer, but the final product is worth it.
       -Runer112

Offline apcalc

  • The Game
  • CoT Emeritus
  • LV10 31337 u53r (Next: 2000)
  • *
  • Posts: 1393
  • Rating: +120/-2
  • VGhlIEdhbWUh (Base 64 :))
    • View Profile
Re: Downgrade your TI-84 without reflashing the Boot Code
« Reply #4 on: May 28, 2012, 01:40:07 pm »
Very nice!  Great pics and work! ;)


Offline DJ Omnimaga

  • Clacualters are teh gr33t
  • CoT Emeritus
  • LV15 Omnimagician (Next: --)
  • *
  • Posts: 55943
  • Rating: +3154/-232
  • CodeWalrus founder & retired Omnimaga founder
    • View Profile
    • Dream of Omnimaga Music
Re: Downgrade your TI-84 without reflashing the Boot Code
« Reply #5 on: May 28, 2012, 03:40:11 pm »
Good stuff Critor :)

Offline Juju

  • Incredibly sexy mare
  • Coder Of Tomorrow
  • LV13 Extreme Addict (Next: 9001)
  • *************
  • Posts: 5730
  • Rating: +500/-19
  • Weird programmer
    • View Profile
    • juju2143's shed
Re: Downgrade your TI-84 without reflashing the Boot Code
« Reply #6 on: May 28, 2012, 06:53:47 pm »
Hey that's great :D

Remember the day the walrus started to fly...

I finally cleared my sig after 4 years you're happy now?
THEGAME
This signature is ridiculously large you've been warned.

The cute mare that used to be in my avatar is Yuki Kagayaki, you can follow her on Facebook and Tumblr.

Offline blue_bear_94

  • LV8 Addict (Next: 1000)
  • ********
  • Posts: 801
  • Rating: +25/-35
  • Touhou Enthusiast / Former Troll / 68k Programmer
    • View Profile
Re: Downgrade your TI-84 without reflashing the Boot Code
« Reply #7 on: May 29, 2012, 04:09:52 pm »
By the way, there was a 0.46?
Due to dissatisfaction, I will be inactive on Omnimaga until further notice. (?? THP hasn't been much success and there's also the CE. I might possibly be here for a while.)
If you want to implore me to come back, or otherwise contact me, I can be found on GitHub (bluebear94), Twitter (@melranosF_), Reddit (/u/Fluffy8x), or e-mail (if you know my address). As a last resort, send me a PM on Cemetech (bluebear94) or join Touhou Prono (don't be fooled by the name). I've also enabled notifications for PMs on Omnimaga, but I don't advise using that since I might be banned.
Elvyna (Sunrise) 4 5%
TI-84+SE User (2.30 2.55 MP 2.43)
TI-89 Titanium User (3.10)
Casio Prizm User? (1.02)
Bag  東方ぷろの