Cryptosmite

Back to home

What is Cryptosmite?

Cryptosmite is an exploit found by @electronis on discord and was released on 9th March 2024. It allows you to unenroll your Chromebook if you are on v119 or earlier (and in most cases later versions).


Downgrading

If you are on version 120 or later, you will need to downgrade to run cryptosmite.

To find out whether you are eligible press power+refresh+esc and then tab. Look for the number after 'kernver'. If it ends in 2 you can downgrade, if it ends in a 3 you cannot without hacky trickery that isn't covered here.

To downgrade, press power+refresh+esc and plug in a USB stick with a v112 from cros.tech.

It should begin the 'recovery' (downgrade). If it says that it's an old version and refuses to downgrade, your kernver number may have changed itself and you cannot do this.


Tutorial

Note: If your board name is grunt there is extra steps. If you are on another board and it doesn't work, this may also fix the problem. The fix is at the bottom of this page.

1. Download a SH1MMER Legacy Prebuilt image here: dl.osu.bio

2. Disable OS verification (blocked or not, doesn't matter), and boot into the Legacy shim. Instructions for how to do this are on the main SH1MMER webpage.

3. Press the S key to start CryptoSmite and input this decryption key: Info-58-immense!NickName_Arabia-710

4. Type in Y then press enter, and it'll automatically reboot upon completion.

5. Proceed through the setup partially till you get to the Add Account Screen.

If you get an update screen, please reboot (press power+refresh+esc and then turn it off and on again) and then press CTRL + ALT + E on the Wi-Fi screen, which allows skipping or makes the update not appear at all.

IF YOU ARE ON GRUNT BOARD, MOVE ON TO THE 'extra steps' SECTION.

6. Powerwash the Chromebook (disable and then re-enable OS verification) after getting to the "Add Account" screen. Once it boots back up, it'll be fully unenrolled.


Those 'extra steps'...

1. Do cryptosmite as normal until step 5. On this screen, press power+refresh+esc and then enable dev mode with ctrl+D and enter. Allow it to fully enter dev mode.

2. Once your Chromebook has restarted and is on the 'welcome to your Chromebook' screen, press ctrl+alt+f2 to open the dev terminal and login as 'root'.

3. Enter the command 'vpd -i RW_VPD -s check_enrollment=0'. This will stop your Chromebook from checking for enrollment at setup. If nothing comes up, it worked. Move on to the next step.

4. Restart your Chromebook, but DISABLE OS verification. Let it reboot, and set up your Chromebook as normal. You are now unenrolled.