.ipa explained

IPA
Noextcode:on
Owner:Apple, Inc
Genre:Package format
Container For:Mobile apps
Extended From:zip, JAR

A .ipa file is an iOS and iPadOS application archive file which stores an iOS/iPadOS app. Each .ipa file includes a binary and can only be installed on an iOS, iPadOS, or ARM-based macOS device. Files with the .ipa extension can be uncompressed by changing the extension to .zip and unzipping. This is only recommended when editing the app itself. Some ipa's will not have a .app file.

Most .ipa files cannot be installed on the iPhone Simulator because they do not contain a binary for the x86 architecture, only one for the ARM architecture of mobile phones and tablets.[1] To run applications on the simulator, original project files which can be opened using the Xcode SDK are required. However, some .ipa files can be opened on the simulator by extracting and copying over the .app file found in the Payload folder. Some simple apps are able to run on the simulator through this method.

ipa is a de facto format used by Apple and there are no specifications of it. A form of digital rights management exists in the format to control redistribution to a single Apple ID.[2] Prior to iTunes 12.7 (September 2017), users had direct access to ipa files in the form of App Store downloads.

Structure of a .ipa file

An IPA has a built-in structure for iTunes and App Store to recognize.The example below shows the structure of an IPA:[3]

/Payload/
/Payload/Application.app/
/iTunesArtwork
/iTunesArtwork@2x
/iTunesMetadata.plist
/WatchKitSupport/WK
/META-INF

As shown above, the Payload folder is what contains all the app data. The iTunes Artwork file is a 512×512 pixel PNG image, containing the app's icon for showing in iTunes and the App Store app on the iPad. The iTunesMetadata.plist contains various bits of information, ranging from the developer's name and ID, the bundle identifier, copyright information, genre, the name of the app, release date, purchase date, etc.

It is common but undocumented to use a JPEG file for .

Since 2017, Apple has used LZFSE instead of registered Zip algorithms in IPAs. The "compression method" field in this case is set to 99.[4]

Code signing is handled in the .app bundle directory. The META-INF folder only contains metadata about what program was used to create the IPA.[5]

Unsigned .ipa executables

An unsigned .ipa can be created by copying the folder with the extension .app from the Products folder of the application in Xcode to a folder called Payload and compressing the latter using the command zip -0 -y -r myAppName.ipa Payload/.

It is then possible to install unsigned .ipa files on iOS jailbroken devices using third party software. AppSync is the tool for installing such homebrew apps. AltStore and Sideloadly are tools that can also be used to install unsigned .ipa files to unjailbroken devices by using a developer account to temporarily sign the app for 7 days for testing purposes. Similar to the case of game console hacking, people are known to use this installation for piracy, against the tool developer's wishes:[6] some underground communities form around buying an app and then sharing its DRM-free unsigned version.

See also

Notes and References

  1. Web site: How to open an IPA file on Windows. Reincubate. 2019-04-08.
  2. Web site: itunes – How does iOS app DRM work, exactly? . Ask Different . 2012.
  3. Web site: Reverse Engineering iOS Applications. ARXAN. 2019-04-08. 2014. 2017-12-22. https://web.archive.org/web/20171222000837/https://www.owasp.org/images/b/b9/OWASP_Mobile_App_Hacking_%28AppSecUSA_2014%29_Workshop_Content.pdf. dead.
  4. Web site: unzip with lzfse support . sskaje . 23 August 2017 . 21 March 2023 . 29 July 2021 . https://web.archive.org/web/20210729084720/https://sskaje.me/2017/08/unzip-with-lzfse-support/ . dead .
  5. Web site: Pulling apart an iOS App . Raz . 29 December 2017 . 4 March 2020 . 14 July 2020 . https://web.archive.org/web/20200714200020/https://blog.razb.me/pulling-apart-an-ios-app/ . dead .
  6. Web site: AppSync Unified :: Karen's Repo . cydia.akemi.ai.