···

       
11
       
11
       
 
       
**RDLOCK** (Research&Development Lock, from official documentation) has been considered as the unlock method used by Authorized Service Center and the factory to permanently unlock a device while the signature exists on the OEMINFO partition, and this unlock method allows you to flash to any partition, and allows to flash load any insecure image (excluding fastboot).

     

       
12
       
12
       
 
       


     

       
13
       
13
       
 
       
Devices using Kirin 6xx-659, and Kirin 9xx-960 can use [PotatoNV] to write a new bootloader unlock code AND to set **FBLock** capabilities to fully unlock the bootloader.

     

       
14
       
14
       
-
       
Devices using Kirin 970 no longer have the bootloader unlock key in cleartext but in the form of a RSA signature, as well, in OEMINFO. You can write a new code using [HCU-client].

     

       
15
       
15
       
-
       
However, this SoC can be unlocked in higher versions of Android (10+) via RDLOCK signature. [HCU-client] is the ONLY program capable of achieving FBunlock as they have the RSA keys.

     

       
14
       
14
       
+
       
Devices using Kirin 970 no longer have the bootloader unlock key in cleartext but in the form of a RSA signature, as well, in OEMINFO. You can write a new code using [HCU-client][hcu-client.com].

     

       
15
       
15
       
+
       
However, this SoC can be unlocked in higher versions of Android (10+) via RDLOCK signature. [HCU-client][hcu-client.com] is the ONLY program capable of achieving FBunlock as they have the RSA keys.

     

       
16
       
16
       
 
       


     

       
17
       
17
       
 
       
Devices using Kirin 710 (A/F) and Kirin 980 can't have a new bootloader unlock key written as the RSA public key in fastboot is different than the one from the paid tools. If you somehow got an unlock code officially or manually triggered userlock*, it will only work if you're below Android 10.

     

       
18
       
18
       
 
       
_*Some custom, unsigned bootloaders using onchiprom (BootROM) vulnerability can be made to allow fastboot to unlock (userlock) your device without an unlock code on these platforms._

     

       
19
       
19
       
 
       


     

       
20
       
20
       
 
       
Anything over Kirin 810, and Kirin 990 remains non-unlockable for the time being. However, couple of BootROM-based exploits for tethered unlocking are currently being worked on! (shh!)

     

       
21
       
21
       
+
       


     

       
22
       
22
       
+
       
If you have a device with a Snapdragon 8+ Gen 1 (Mate 50, Mate 50 Pro, Mate 50 RS, P60, P60 Pro, P60 Art, Mate X3), you're on HarmonyOS 3.0 or 4.0, and you have an EDL cable or don't mind disassembling your phone, you can try using [this tool][P60 Unlock] to unlock your bootloader.

     

       
21
       
23
       
 
       


     

       
22
       
24
       
 
       
Paid methods:<br/>

     

       
23
       
25
       
 
       
I don't recommend paid methods due to general sketchiness. I have used one of these tools a while ago, it was okay.<br/>

     
···

       
30
       
32
       
 
       
[PotatoNV]:../../README.md#kirin

     

       
31
       
33
       
 
       
[hcu-client.com]:https://hcu-client.com/buy/

     

       
32
       
34
       
 
       
[dc-unlocker.com]:https://www.dc-unlocker.com/buy

     

       
35
       
35
       
+
       
[P60 Unlock]:https://xdaforums.com/t/tool-shared-huawei-8-gen-1-flashing-toolkit-v1-0-unlock-bl-and-root-your-huawei-8-gen-1-device.4705132/