FORUMS
Remove All Ads from XDA

[ROOT] SuperSU 2.74-2 With ForceEncrypt Set to Default

1,837 posts
Thanks Meter: 55,702
 
By topjohnwu, Recognized Developer / Recognized Contributor on 6th May 2016, 07:35 AM
Post Reply Email Thread
Update (May 20): Update to latest version 2.74-2
All versions after SuperSU 2.72 has force encrypt support built in. However it will still disable force encryption by default, you have to set flags manually.
I only modified the default value of the force encrypt flag in the flashing script, so no need to worry that this might break things
If your OCD forces you to use the official version, please look here for instructions to set the flag manually by yourself.


Hi, many people have their hands on the HTC 10, and you may found out that wiping data after rooted with SuperSU, your signal will be broken.
This is caused by the fact that by default, SuperSU's flashing script will change the data encryption flag from "forceencrypt" to "encryptable". If you wiped data after the flag is set to "encryptable", your data partition will be decrypted. In many times, decrypted data is good, but on the HTC 10, for some unknown reason the signal will break with data decrypted.
More info here:
[PSA][MUST SEE] New HTC Policy : Things You Should Know Before Unlocking Bootloader

This issue has caught more attention after an S-OFF method is available. You're required to have root and wipe data after gaining S-OFF. The developer of the S-OFF tool has created a tutorial for this particular problem, you can find it here:
[Guide] Root (Optionally s-off) and Keep your radio working

I slightly modified the SuperSU flashing script, so now it won't change the encryption flag.
This zip will remain useful until we find a way to decrypt our data partition with working signal.
Attached Files
File Type: zip BETA-SuperSU-v2.74-2-forceencrypt.zip - [Click for QR Code] (4.63 MB, 31940 views)
The Following 66 Users Say Thank You to topjohnwu For This Useful Post: [ View ]
 
 
6th May 2016, 08:24 AM |#2  
starbase64's Avatar
Senior Member
Thanks Meter: 1,659
 
Donate to Me
More
Hi,

this works without problems, big tanks. Device is rooted now.

regards

starbase64
6th May 2016, 09:29 AM |#3  
Senior Member
Flag Chicago
Thanks Meter: 56
 
More
Big thanks. I wish I would have had this yesterday afternoon!

Now I just need to get a stock 1.21.617.3 image to start again with my US unlocked. If anyone has it, please let me know.

Is there a way to manually change the flag back to forceencrypt?
6th May 2016, 09:41 AM |#4  
datafoo's Avatar
Senior Member
Thanks Meter: 204
 
More
Quote:
Originally Posted by MNoisy

Big thanks. I wish I would have had this yesterday afternoon!

Now I just need to get a stock 1.21.617.3 image to start again with my US unlocked. If anyone has it, please let me know.

Is there a way to manually change the flag back to forceencrypt?

I have TWRP images for system_image and boot if you need them to fix broken signal as per @jcase. We're both 1.21.617.3
6th May 2016, 09:51 AM |#5  
Senior Member
Flag Chicago
Thanks Meter: 56
 
More
Quote:
Originally Posted by datafoo

I have TWRP images for system_image and boot if you need them to fix broken signal as per @jcase. We're both 1.21.617.3

Yes yes yes please! THANK YOU!

Where can I find them?
6th May 2016, 01:05 PM |#6  
LeeDroid's Avatar
Recognized Developer
Flag Newton Aycliffe
Thanks Meter: 44,614
 
Donate to Me
More
Nice buddy, will update the method used in my build, makes life a lot easier.

I had considered making similar modifications but you appear to have beaten me too it
The Following 2 Users Say Thank You to LeeDroid For This Useful Post: [ View ]
6th May 2016, 01:34 PM |#7  
jcase's Avatar
Retired Forum Moderator / Senior Recognized Developer - Taco Vendor
Flag Sequim WA
Thanks Meter: 15,873
 
10
Donate to Me
More
Quote:
Originally Posted by topjohnwu

Hi, many people have their hands on the HTC 10, and you may found out that wiping data after rooted with SuperSU, your signal will be broken.
This is caused by the fact that by default, SuperSU's flashing script will change the data encryption flag from "forceencrypt" to "encryptable". If you wiped data after the flag is set to "encryptable", your data partition will be decrypted. In many times, decrypted data is good, but on the HTC 10, for some unknown reason the signal will break with data decrypted.
More info here:
[PSA][MUST SEE] New HTC Policy : Things You Should Know Before Unlocking Bootloader

This issue has caught more attention after an S-OFF method is available. You're required to have root and wipe data after gaining S-OFF. The developer of the S-OFF tool has created a tutorial for this particular problem, you can find it here:
[Guide] Root (Optionally s-off) and Keep your radio working

Here I come up with a more elegant solution. I slightly modified the SuperSU flashing script, so now it won't change the encryption flag, and also won't remove dm-verify.
NOTE: If your boot image is already modified, it will not reset the flag back to forceencrypt. You have to restore to the stock boot image, then flash this zip. The way I accomplished this is reverting a few modification from the previous ramdisk, so the ramdisk itself has to be stock.
Devs can include this zip into their rom, so users can wipe their whole data with your rom installed.
This zip will be useful until we find a way to decrypt our data partition with working signal.

I would NOT use this zip to root the HTC 10, you really need to remove verity, this is going to cause many many many issues, its going to softbrick a huge number of phones, anything from a lot of root apps, to restoring a twrp backup is going to trip dm-verity
The Following 3 Users Say Thank You to jcase For This Useful Post: [ View ]
6th May 2016, 02:01 PM |#8  
Chainfire's Avatar
Moderator Emeritus / Senior Recognized Developer - Where is my shirt?
Thanks Meter: 87,995
 
Donate to Me
More
SuperSU v2.72 has all of this built in via KEEPVERITY and KEEPFORCEENCRYPT flags. It's not publicly released yet but will be within a few days.
The Following 21 Users Say Thank You to Chainfire For This Useful Post: [ View ]
6th May 2016, 02:29 PM |#9  
Captain_Throwback's Avatar
Senior Member
Flag The Nothing
Thanks Meter: 22,602
 
10
Donate to Me
More
Quote:
Originally Posted by Chainfire

SuperSU v2.72 has all of this built in via KEEPVERITY and KEEPFORCEENCRYPT flags. It's not publicly released yet but will be within a few days.

Out of curiosity, where will we put those flags? /data/.supersu isn't an option, because /data is encrypted and unmountable, and /system/.supersu isn't an option if /system is read-only and we want to preserve dm-verity.
6th May 2016, 02:30 PM |#10  
OP Recognized Developer / Recognized Contributor
Flag Taipei
Thanks Meter: 55,702
 
Donate to Me
More
Quote:
Originally Posted by jcase

I would NOT use this zip to root the HTC 10, you really need to remove verity, this is going to cause many many many issues, its going to softbrick a huge number of phones, anything from a lot of root apps, to restoring a twrp backup is going to trip dm-verity

My system is modified, but everything is working fine. I'm using this without a problem so I shared it.
Is it because my device is S-OFF? If this is the case, then I'll remove the link. Thanks for the kind remind.
6th May 2016, 02:33 PM |#11  
jcase's Avatar
Retired Forum Moderator / Senior Recognized Developer - Taco Vendor
Flag Sequim WA
Thanks Meter: 15,873
 
10
Donate to Me
More
Quote:
Originally Posted by topjohnwu

My system is modified, but everything is working fine. I'm using this without a problem so I shared it.
Is it because my device is S-OFF? If this is the case, then I'll remove the link. Thanks for the kind remind.

I'd have to look at the zip and test to see why. It could be that your particular firmware isn't actually enforcing dm-verity (I believe google mandates this on 6.0+), that HTC disables enforcing when s-off or the zip isn't properly enforcing verity.

Best advice is not to enforce verity on system if you are rooted.

What should (and did for my phone) happen if you have dm-verity enabled on system and a modified system is the phone shouldn't successfully boot.
The Following User Says Thank You to jcase For This Useful Post: [ View ]
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes