[Galaxy S 4 General] FallenZen:
There are a few verified examples of ways to flash a downgraded ROM without tripping the KNOX protection, but I haven't yet found any methods that work with the most recent bootloader versions. One example is with the Note 3.

http://xdaforums.com/showthread.php?t=2522729

I would be very interested in finding out if this proposed method of yours works, but do you really think it's fair to ask someone else to test your method when you're unwilling to test it yourself? Also, the KNOX counter does not void your manufacturer's warranty so your excuse is invalid. If you don't have enough confidence in your own method, why would you ask someone else to take the risk? Frankly, you're lucky I'm not a moderator. If I were, I would remove this post of yours from the numerous threads you posted it to. First, because it appears to me that you've posted it as a solution in topics that don't have anything to do with your device model; and Secondly, because you clearly want everybody else to run the risk of getting screwed using your own, untested, theory. I disapprove.

There is no way to forge an authentic certificate without the right signed security key. As of right now, we don't even know how to access the key's location (evidence suggests it's stored within the encrypted KNOX partition, and if a single unauthorized attempt is made to access the partition then KNOX trips and the partition is destroyed). Even if we could reach the key, it would be virtually impossible to decrypt it. It's a good thought, though.

People have been able to create dump files. I included one example in the compilation posts a little earlier on this page. RE: http://xdaforums.com/showthread.php?p=49084269#post49084269

Is that what you mean?

I'm not sure if I'm understanding you correctly, but it sounds like you're asking if there is any way to create a 4.3 ROM that isn't built on the most recent bootloader. The answer is "yes," CNexus and several others have recompiled 4.3+ ROMs which exclude the new bootloader as well as KNOX incorporations into the kernel and OS. Example: http://xdaforums.com/showthread.php?t=2541900

There have been a handful of theories regarding how these reported KNOX resets might be done. The current lead theory is that some very select handful of Samsung authorized techs have access to a handheld device that can be plugged into the phone and used with a security key to reset the KNOX flag notification to 0x0. While all KNOX-enabled devices have eFuses built into them, there is some evidence to suggest that there is some variation in the way the KNOX flag works with older devices vs. newer ones. That evidence suggests that in older devices the KNOX flag does not actually burn the eFuse unless a failed attempt to reset it is made, but in newer devices the eFuse is burnt as soon as KNOX is tripped. This is speculation though, and it's equally possible that the eFuse burns immediately in all devices. If the latter is true, and there is truth to the rumors of shops resetting KNOX without replacing the mainboard, then that indicates the reset is achieved by reprogramming KNOX to utilize a different eFuse.

According to this article, which is the first result in a Google search of "knox sdk," has information on the availability of the SDKs that Samsung has released.

http://www.fiercemobileit.com/story...enterprise-mobile-security-efforts/2013-10-29

I think the problem most are running into is that they only get to test one theory before KNOX gets set to 0x1 and once that happens it's impossible to access further data on the 0x0 system since the KNOX partition is permanently destroyed at that point. But there's also the function of time invested. I know that veterans like [MENTION=631273]Chainfire[/MENTION] have spent what I can only imagine to be hundreds of hours on this issue. Unfortunately, everybody has a time limit after which they decide to move on to more promising ventures. Remember that KNOX was developed with the NSA and they set the world standard in digital security, intrusion, and cryptography. So if cracking KNOX isn't patently impossible, it's still been created by some of the best security engineers in the world.