]> cvs.zerfleddert.de Git - proxmark3-svn/blame - common/lfdemod.c
PSKDemod Bug Fix
[proxmark3-svn] / common / lfdemod.c
CommitLineData
eb191de6 1//-----------------------------------------------------------------------------
ba1a299c 2// Copyright (C) 2014
eb191de6 3//
4// This code is licensed to you under the terms of the GNU GPL, version 2 or,
5// at your option, any later version. See the LICENSE.txt file for the text of
6// the license.
7//-----------------------------------------------------------------------------
1e090a61 8// Low frequency demod/decode commands
eb191de6 9//-----------------------------------------------------------------------------
10
eb191de6 11#include <stdlib.h>
12#include <string.h>
eb191de6 13#include "lfdemod.h"
eb191de6 14
a1d17964 15
16uint8_t justNoise(uint8_t *BitStream, size_t size)
17{
18 static const uint8_t THRESHOLD = 123;
19 //test samples are not just noise
20 uint8_t justNoise1 = 1;
21 for(size_t idx=0; idx < size && justNoise1 ;idx++){
22 justNoise1 = BitStream[idx] < THRESHOLD;
23 }
24 return justNoise1;
25}
26
1e090a61 27//by marshmellow
872e3d4d 28//get high and low values of a wave with passed in fuzz factor. also return noise test = 1 for passed or 0 for only noise
1e090a61 29int getHiLo(uint8_t *BitStream, size_t size, int *high, int *low, uint8_t fuzzHi, uint8_t fuzzLo)
30{
31 *high=0;
32 *low=255;
33 // get high and low thresholds
34 for (int i=0; i < size; i++){
35 if (BitStream[i] > *high) *high = BitStream[i];
36 if (BitStream[i] < *low) *low = BitStream[i];
37 }
38 if (*high < 123) return -1; // just noise
39 *high = (int)(((*high-128)*(((float)fuzzHi)/100))+128);
40 *low = (int)(((*low-128)*(((float)fuzzLo)/100))+128);
41 return 1;
42}
43
a1d17964 44// by marshmellow
45// pass bits to be tested in bits, length bits passed in bitLen, and parity type (even=0 | odd=1) in pType
46// returns 1 if passed
47uint8_t parityTest(uint32_t bits, uint8_t bitLen, uint8_t pType)
48{
49 uint8_t ans = 0;
50 for (uint8_t i = 0; i < bitLen; i++){
51 ans ^= ((bits >> i) & 1);
52 }
f3bf15e4 53 //PrintAndLog("DEBUG: ans: %d, ptype: %d",ans,pType);
a1d17964 54 return (ans == pType);
55}
56
57//by marshmellow
58//search for given preamble in given BitStream and return startIndex and length
59uint8_t preambleSearch(uint8_t *BitStream, uint8_t *preamble, size_t pLen, size_t *size, size_t *startIdx)
60{
61 uint8_t foundCnt=0;
62 for (int idx=0; idx < *size - pLen; idx++){
63 if (memcmp(BitStream+idx, preamble, pLen) == 0){
64 //first index found
65 foundCnt++;
66 if (foundCnt == 1){
67 *startIdx = idx;
68 }
69 if (foundCnt == 2){
70 *size = idx - *startIdx;
71 return 1;
72 }
73 }
74 }
75 return 0;
76}
77
78
eb191de6 79//by marshmellow
80//takes 1s and 0s and searches for EM410x format - output EM ID
ec75f5c1 81uint64_t Em410xDecode(uint8_t *BitStream, size_t *size, size_t *startIdx)
eb191de6 82{
a1d17964 83 //no arguments needed - built this way in case we want this to be a direct call from "data " cmds in the future
84 // otherwise could be a void with no arguments
85 //set defaults
86 uint64_t lo=0;
87 uint32_t i = 0;
88 if (BitStream[1]>1){ //allow only 1s and 0s
89 // PrintAndLog("no data found");
90 return 0;
91 }
92 // 111111111 bit pattern represent start of frame
93 uint8_t preamble[] = {1,1,1,1,1,1,1,1,1};
94 uint32_t idx = 0;
95 uint32_t parityBits = 0;
96 uint8_t errChk = 0;
97 *startIdx = 0;
98 for (uint8_t extraBitChk=0; extraBitChk<5; extraBitChk++){
99 errChk = preambleSearch(BitStream+extraBitChk+*startIdx, preamble, sizeof(preamble), size, startIdx);
100 if (errChk == 0) return 0;
101 idx = *startIdx + 9;
102 for (i=0; i<10;i++){ //loop through 10 sets of 5 bits (50-10p = 40 bits)
103 parityBits = bytebits_to_byte(BitStream+(i*5)+idx,5);
104 //check even parity
105 if (parityTest(parityBits, 5, 0) == 0){
106 //parity failed try next bit (in the case of 1111111111) but last 9 = preamble
107 startIdx++;
108 errChk = 0;
109 break;
110 }
abd6112f 111 //set uint64 with ID from BitStream
a1d17964 112 for (uint8_t ii=0; ii<4; ii++){
113 lo = (lo << 1LL) | (BitStream[(i*5)+ii+idx]);
114 }
115 }
116 if (errChk != 0) return lo;
117 //skip last 5 bit parity test for simplicity.
118 // *size = 64;
119 }
120 return 0;
eb191de6 121}
122
123//by marshmellow
6de43508 124//takes 3 arguments - clock, invert, maxErr as integers
ba1a299c 125//attempts to demodulate ask while decoding manchester
eb191de6 126//prints binary found and saves in graphbuffer for further commands
6de43508 127int askmandemod(uint8_t *BinStream, size_t *size, int *clk, int *invert, int maxErr)
eb191de6 128{
ba1a299c 129 int i;
6de43508 130 //int clk2=*clk;
131 int start = DetectASKClock(BinStream, *size, clk, 20); //clock default
132 if (*clk==0) return -3;
133 if (start < 0) return -3;
ec75f5c1 134 // if autodetected too low then adjust //MAY NEED ADJUSTMENT
6de43508 135 //if (clk2==0 && *clk<8) *clk =64;
136 //if (clk2==0 && *clk<32) *clk=32;
ba1a299c 137 if (*invert != 0 && *invert != 1) *invert=0;
138 uint32_t initLoopMax = 200;
139 if (initLoopMax > *size) initLoopMax=*size;
140 // Detect high and lows
1e090a61 141 // 25% fuzz in case highs and lows aren't clipped [marshmellow]
142 int high, low, ans;
143 ans = getHiLo(BinStream, initLoopMax, &high, &low, 75, 75);
144 if (ans<1) return -2; //just noise
ba1a299c 145
1e090a61 146 // PrintAndLog("DEBUG - valid high: %d - valid low: %d",high,low);
ba1a299c 147 int lastBit = 0; //set first clock check
148 uint32_t bitnum = 0; //output counter
149 int tol = 0; //clock tolerance adjust - waves will be accepted as within the clock if they fall + or - this value + clock from last valid wave
6de43508 150 if (*clk<=32) tol=1; //clock tolerance may not be needed anymore currently set to + or - 1 but could be increased for poor waves or removed entirely
ba1a299c 151 int iii = 0;
152 uint32_t gLen = *size;
153 if (gLen > 3000) gLen=3000;
154 uint8_t errCnt =0;
6de43508 155 uint16_t MaxBits = 500;
ba1a299c 156 uint32_t bestStart = *size;
6de43508 157 int bestErrCnt = maxErr+1;
1e090a61 158 // PrintAndLog("DEBUG - lastbit - %d",lastBit);
159 // loop to find first wave that works
ba1a299c 160 for (iii=0; iii < gLen; ++iii){
161 if ((BinStream[iii] >= high) || (BinStream[iii] <= low)){
162 lastBit=iii-*clk;
163 errCnt=0;
1e090a61 164 // loop through to see if this start location works
ba1a299c 165 for (i = iii; i < *size; ++i) {
166 if ((BinStream[i] >= high) && ((i-lastBit) > (*clk-tol))){
167 lastBit+=*clk;
168 } else if ((BinStream[i] <= low) && ((i-lastBit) > (*clk-tol))){
169 //low found and we are expecting a bar
170 lastBit+=*clk;
171 } else {
172 //mid value found or no bar supposed to be here
173 if ((i-lastBit)>(*clk+tol)){
174 //should have hit a high or low based on clock!!
175
176 //debug
177 //PrintAndLog("DEBUG - no wave in expected area - location: %d, expected: %d-%d, lastBit: %d - resetting search",i,(lastBit+(clk-((int)(tol)))),(lastBit+(clk+((int)(tol)))),lastBit);
178
179 errCnt++;
180 lastBit+=*clk;//skip over until hit too many errors
181 if (errCnt>(maxErr)) break; //allow 1 error for every 1000 samples else start over
182 }
183 }
6de43508 184 if ((i-iii) >(MaxBits * *clk)) break; //got plenty of bits
ba1a299c 185 }
186 //we got more than 64 good bits and not all errors
6de43508 187 if ((((i-iii)/ *clk) > (64)) && (errCnt<=maxErr)) {
ba1a299c 188 //possible good read
189 if (errCnt==0){
190 bestStart=iii;
191 bestErrCnt=errCnt;
192 break; //great read - finish
193 }
194 if (errCnt<bestErrCnt){ //set this as new best run
195 bestErrCnt=errCnt;
196 bestStart = iii;
197 }
198 }
199 }
200 }
6de43508 201 if (bestErrCnt<=maxErr){
ba1a299c 202 //best run is good enough set to best run and set overwrite BinStream
203 iii=bestStart;
204 lastBit = bestStart - *clk;
205 bitnum=0;
206 for (i = iii; i < *size; ++i) {
207 if ((BinStream[i] >= high) && ((i-lastBit) > (*clk-tol))){
208 lastBit += *clk;
209 BinStream[bitnum] = *invert;
210 bitnum++;
211 } else if ((BinStream[i] <= low) && ((i-lastBit) > (*clk-tol))){
212 //low found and we are expecting a bar
213 lastBit+=*clk;
214 BinStream[bitnum] = 1-*invert;
215 bitnum++;
216 } else {
217 //mid value found or no bar supposed to be here
218 if ((i-lastBit)>(*clk+tol)){
219 //should have hit a high or low based on clock!!
220
221 //debug
222 //PrintAndLog("DEBUG - no wave in expected area - location: %d, expected: %d-%d, lastBit: %d - resetting search",i,(lastBit+(clk-((int)(tol)))),(lastBit+(clk+((int)(tol)))),lastBit);
223 if (bitnum > 0){
224 BinStream[bitnum]=77;
225 bitnum++;
226 }
227
228 lastBit+=*clk;//skip over error
229 }
230 }
6de43508 231 if (bitnum >=MaxBits) break;
ba1a299c 232 }
233 *size=bitnum;
234 } else{
235 *invert=bestStart;
236 *clk=iii;
237 return -1;
238 }
239 return bestErrCnt;
eb191de6 240}
241
ec75f5c1 242//by marshmellow
243//encode binary data into binary manchester
244int ManchesterEncode(uint8_t *BitStream, size_t size)
245{
246 size_t modIdx=20000, i=0;
247 if (size>modIdx) return -1;
f3bf15e4 248 for (size_t idx=0; idx < size; idx++){
249 BitStream[idx+modIdx++] = BitStream[idx];
250 BitStream[idx+modIdx++] = BitStream[idx]^1;
251 }
252 for (; i<(size*2); i++){
253 BitStream[i] = BitStream[i+20000];
254 }
255 return i;
ec75f5c1 256}
257
eb191de6 258//by marshmellow
259//take 10 and 01 and manchester decode
260//run through 2 times and take least errCnt
ba1a299c 261int manrawdecode(uint8_t * BitStream, size_t *size)
eb191de6 262{
6de43508 263 uint16_t bitnum=0;
264 uint16_t MaxBits = 500;
265 uint16_t errCnt = 0;
266 size_t i=1;
267 uint16_t bestErr = 1000;
268 uint16_t bestRun = 0;
269 size_t ii=1;
270 if (size == 0) return -1;
ba1a299c 271 for (ii=1;ii<3;++ii){
272 i=1;
273 for (i=i+ii;i<*size-2;i+=2){
274 if(BitStream[i]==1 && (BitStream[i+1]==0)){
275 } else if((BitStream[i]==0)&& BitStream[i+1]==1){
276 } else {
277 errCnt++;
278 }
6de43508 279 if(bitnum>MaxBits) break;
ba1a299c 280 }
281 if (bestErr>errCnt){
282 bestErr=errCnt;
283 bestRun=ii;
284 }
285 errCnt=0;
286 }
287 errCnt=bestErr;
288 if (errCnt<20){
289 ii=bestRun;
290 i=1;
6de43508 291 for (i=i+ii; i < *size-2; i+=2){
ba1a299c 292 if(BitStream[i] == 1 && (BitStream[i+1] == 0)){
293 BitStream[bitnum++]=0;
294 } else if((BitStream[i] == 0) && BitStream[i+1] == 1){
295 BitStream[bitnum++]=1;
296 } else {
297 BitStream[bitnum++]=77;
298 //errCnt++;
299 }
6de43508 300 if(bitnum>MaxBits) break;
ba1a299c 301 }
302 *size=bitnum;
303 }
304 return errCnt;
f822a063 305}
306
f822a063 307//by marshmellow
308//take 01 or 10 = 0 and 11 or 00 = 1
1e090a61 309int BiphaseRawDecode(uint8_t *BitStream, size_t *size, int offset, int invert)
f822a063 310{
6de43508 311 uint16_t bitnum=0;
ba1a299c 312 uint32_t errCnt =0;
1e090a61 313 uint32_t i;
6de43508 314 uint16_t MaxBits=500;
ba1a299c 315 i=offset;
6de43508 316 if (size == 0) return -1;
1e090a61 317 for (;i<*size-2; i+=2){
ba1a299c 318 if((BitStream[i]==1 && BitStream[i+1]==0) || (BitStream[i]==0 && BitStream[i+1]==1)){
1e090a61 319 BitStream[bitnum++]=1^invert;
ba1a299c 320 } else if((BitStream[i]==0 && BitStream[i+1]==0) || (BitStream[i]==1 && BitStream[i+1]==1)){
1e090a61 321 BitStream[bitnum++]=invert;
ba1a299c 322 } else {
323 BitStream[bitnum++]=77;
324 errCnt++;
325 }
6de43508 326 if(bitnum>MaxBits) break;
ba1a299c 327 }
328 *size=bitnum;
329 return errCnt;
eb191de6 330}
331
332//by marshmellow
6de43508 333void askAmp(uint8_t *BitStream, size_t size)
334{
f3bf15e4 335 int shift = 127;
336 int shiftedVal=0;
337 for(int i = 1; i<size; i++){
338 if (BitStream[i]-BitStream[i-1]>=30) //large jump up
339 shift=127;
340 else if(BitStream[i]-BitStream[i-1]<=-20) //large jump down
341 shift=-127;
342
343 shiftedVal=BitStream[i]+shift;
344
345 if (shiftedVal>255)
346 shiftedVal=255;
347 else if (shiftedVal<0)
348 shiftedVal=0;
349 BitStream[i-1] = shiftedVal;
350 }
351 return;
6de43508 352}
353
354//by marshmellow
355//takes 3 arguments - clock, invert and maxErr as integers
eb191de6 356//attempts to demodulate ask only
357//prints binary found and saves in graphbuffer for further commands
6de43508 358int askrawdemod(uint8_t *BinStream, size_t *size, int *clk, int *invert, int maxErr, uint8_t amp)
eb191de6 359{
ba1a299c 360 uint32_t i;
6de43508 361 if (*size==0) return -1;
362 int start = DetectASKClock(BinStream, *size, clk, 20); //clock default
363 if (*clk==0) return -1;
364 if (start<0) return -1;
ba1a299c 365 if (*invert != 0 && *invert != 1) *invert =0;
366 uint32_t initLoopMax = 200;
c12512e9 367 if (initLoopMax > *size) initLoopMax=*size;
ba1a299c 368 // Detect high and lows
ba1a299c 369 //25% fuzz in case highs and lows aren't clipped [marshmellow]
1e090a61 370 int high, low, ans;
6de43508 371 if (amp==1) askAmp(BinStream, *size);
1e090a61 372 ans = getHiLo(BinStream, initLoopMax, &high, &low, 75, 75);
6de43508 373 if (ans<1) return -1; //just noise
ba1a299c 374
375 //PrintAndLog("DEBUG - valid high: %d - valid low: %d",high,low);
376 int lastBit = 0; //set first clock check
377 uint32_t bitnum = 0; //output counter
c12512e9 378 uint8_t tol = 0; //clock tolerance adjust - waves will be accepted as within the clock
379 // if they fall + or - this value + clock from last valid wave
6de43508 380 if (*clk == 32) tol=0; //clock tolerance may not be needed anymore currently set to
c12512e9 381 // + or - 1 but could be increased for poor waves or removed entirely
ba1a299c 382 uint32_t iii = 0;
383 uint32_t gLen = *size;
384 if (gLen > 500) gLen=500;
385 uint8_t errCnt =0;
386 uint32_t bestStart = *size;
6de43508 387 uint32_t bestErrCnt = maxErr; //(*size/1000);
ba1a299c 388 uint8_t midBit=0;
6de43508 389 uint16_t MaxBits=1000;
ba1a299c 390 //PrintAndLog("DEBUG - lastbit - %d",lastBit);
391 //loop to find first wave that works
6de43508 392 for (iii=start; iii < gLen; ++iii){
ba1a299c 393 if ((BinStream[iii]>=high) || (BinStream[iii]<=low)){
394 lastBit=iii-*clk;
6de43508 395 errCnt=0;
ba1a299c 396 //loop through to see if this start location works
397 for (i = iii; i < *size; ++i) {
398 if ((BinStream[i] >= high) && ((i-lastBit)>(*clk-tol))){
399 lastBit+=*clk;
ba1a299c 400 midBit=0;
401 } else if ((BinStream[i] <= low) && ((i-lastBit)>(*clk-tol))){
402 //low found and we are expecting a bar
403 lastBit+=*clk;
ba1a299c 404 midBit=0;
405 } else if ((BinStream[i]<=low) && (midBit==0) && ((i-lastBit)>((*clk/2)-tol))){
406 //mid bar?
407 midBit=1;
ba1a299c 408 } else if ((BinStream[i]>=high) && (midBit==0) && ((i-lastBit)>((*clk/2)-tol))){
409 //mid bar?
410 midBit=1;
ba1a299c 411 } else if ((i-lastBit)>((*clk/2)+tol) && (midBit==0)){
412 //no mid bar found
413 midBit=1;
ba1a299c 414 } else {
415 //mid value found or no bar supposed to be here
416
417 if ((i-lastBit)>(*clk+tol)){
418 //should have hit a high or low based on clock!!
419 //debug
420 //PrintAndLog("DEBUG - no wave in expected area - location: %d, expected: %d-%d, lastBit: %d - resetting search",i,(lastBit+(clk-((int)(tol)))),(lastBit+(clk+((int)(tol)))),lastBit);
ba1a299c 421
ba1a299c 422 errCnt++;
423 lastBit+=*clk;//skip over until hit too many errors
6de43508 424 if (errCnt > maxErr){
425 //errCnt=0;
ba1a299c 426 break;
427 }
428 }
429 }
6de43508 430 if ((i-iii)>(MaxBits * *clk)) break; //got enough bits
ba1a299c 431 }
432 //we got more than 64 good bits and not all errors
6de43508 433 if ((((i-iii)/ *clk) > (64)) && (errCnt<=maxErr)) {
ba1a299c 434 //possible good read
1e090a61 435 if (errCnt==0){
436 bestStart=iii;
437 bestErrCnt=errCnt;
438 break; //great read - finish
439 }
ba1a299c 440 if (errCnt<bestErrCnt){ //set this as new best run
441 bestErrCnt=errCnt;
442 bestStart = iii;
443 }
444 }
445 }
ba1a299c 446 }
6de43508 447 if (bestErrCnt<=maxErr){
1e090a61 448 //best run is good enough - set to best run and overwrite BinStream
6de43508 449 iii = bestStart;
1e090a61 450 lastBit = bestStart - *clk;
451 bitnum=0;
452 for (i = iii; i < *size; ++i) {
453 if ((BinStream[i] >= high) && ((i-lastBit) > (*clk-tol))){
454 lastBit += *clk;
455 BinStream[bitnum] = *invert;
456 bitnum++;
457 midBit=0;
458 } else if ((BinStream[i] <= low) && ((i-lastBit) > (*clk-tol))){
459 //low found and we are expecting a bar
460 lastBit+=*clk;
6de43508 461 BinStream[bitnum] = 1 - *invert;
1e090a61 462 bitnum++;
463 midBit=0;
464 } else if ((BinStream[i]<=low) && (midBit==0) && ((i-lastBit)>((*clk/2)-tol))){
465 //mid bar?
466 midBit=1;
467 BinStream[bitnum] = 1 - *invert;
468 bitnum++;
469 } else if ((BinStream[i]>=high) && (midBit==0) && ((i-lastBit)>((*clk/2)-tol))){
470 //mid bar?
471 midBit=1;
472 BinStream[bitnum] = *invert;
473 bitnum++;
474 } else if ((i-lastBit)>((*clk/2)+tol) && (midBit==0)){
475 //no mid bar found
476 midBit=1;
477 if (bitnum!=0) BinStream[bitnum] = BinStream[bitnum-1];
478 bitnum++;
479
480 } else {
481 //mid value found or no bar supposed to be here
482 if ((i-lastBit)>(*clk+tol)){
483 //should have hit a high or low based on clock!!
484
485 //debug
486 //PrintAndLog("DEBUG - no wave in expected area - location: %d, expected: %d-%d, lastBit: %d - resetting search",i,(lastBit+(clk-((int)(tol)))),(lastBit+(clk+((int)(tol)))),lastBit);
487 if (bitnum > 0){
488 BinStream[bitnum]=77;
489 bitnum++;
490 }
1e090a61 491 lastBit+=*clk;//skip over error
492 }
493 }
6de43508 494 if (bitnum >= MaxBits) break;
ba1a299c 495 }
496 *size=bitnum;
1e090a61 497 } else{
498 *invert=bestStart;
499 *clk=iii;
500 return -1;
501 }
502 return bestErrCnt;
eb191de6 503}
ba1a299c 504//translate wave to 11111100000 (1 for each short wave 0 for each long wave)
f822a063 505size_t fsk_wave_demod(uint8_t * dest, size_t size, uint8_t fchigh, uint8_t fclow)
eb191de6 506{
ba1a299c 507 uint32_t last_transition = 0;
508 uint32_t idx = 1;
ac3ba7ee 509 //uint32_t maxVal=0;
ba1a299c 510 if (fchigh==0) fchigh=10;
511 if (fclow==0) fclow=8;
84871873 512 //set the threshold close to 0 (graph) or 128 std to avoid static
513 uint8_t threshold_value = 123;
ba1a299c 514
515 // sync to first lo-hi transition, and threshold
516
517 // Need to threshold first sample
518
519 if(dest[0] < threshold_value) dest[0] = 0;
520 else dest[0] = 1;
521
522 size_t numBits = 0;
523 // count cycles between consecutive lo-hi transitions, there should be either 8 (fc/8)
524 // or 10 (fc/10) cycles but in practice due to noise etc we may end up with with anywhere
525 // between 7 to 11 cycles so fuzz it by treat anything <9 as 8 and anything else as 10
526 for(idx = 1; idx < size; idx++) {
527 // threshold current value
528
529 if (dest[idx] < threshold_value) dest[idx] = 0;
530 else dest[idx] = 1;
531
532 // Check for 0->1 transition
533 if (dest[idx-1] < dest[idx]) { // 0 -> 1 transition
534 if ((idx-last_transition)<(fclow-2)){ //0-5 = garbage noise
535 //do nothing with extra garbage
536 } else if ((idx-last_transition) < (fchigh-1)) { //6-8 = 8 waves
537 dest[numBits]=1;
538 } else { //9+ = 10 waves
539 dest[numBits]=0;
540 }
541 last_transition = idx;
542 numBits++;
543 }
544 }
545 return numBits; //Actually, it returns the number of bytes, but each byte represents a bit: 1 or 0
eb191de6 546}
547
548uint32_t myround2(float f)
549{
ba1a299c 550 if (f >= 2000) return 2000;//something bad happened
551 return (uint32_t) (f + (float)0.5);
eb191de6 552}
553
ba1a299c 554//translate 11111100000 to 10
555size_t aggregate_bits(uint8_t *dest, size_t size, uint8_t rfLen, uint8_t maxConsequtiveBits,
556 uint8_t invert, uint8_t fchigh, uint8_t fclow)
eb191de6 557{
ba1a299c 558 uint8_t lastval=dest[0];
559 uint32_t idx=0;
560 size_t numBits=0;
561 uint32_t n=1;
562
563 for( idx=1; idx < size; idx++) {
564
565 if (dest[idx]==lastval) {
566 n++;
567 continue;
568 }
569 //if lastval was 1, we have a 1->0 crossing
570 if ( dest[idx-1]==1 ) {
571 n=myround2((float)(n+1)/((float)(rfLen)/(float)fclow));
ba1a299c 572 } else {// 0->1 crossing
84871873 573 n=myround2((float)(n+1)/((float)(rfLen-1)/(float)fchigh)); //-1 for fudge factor
ba1a299c 574 }
575 if (n == 0) n = 1;
576
577 if(n < maxConsequtiveBits) //Consecutive
578 {
579 if(invert==0){ //invert bits
580 memset(dest+numBits, dest[idx-1] , n);
581 }else{
582 memset(dest+numBits, dest[idx-1]^1 , n);
583 }
584 numBits += n;
585 }
586 n=0;
587 lastval=dest[idx];
588 }//end for
589 return numBits;
eb191de6 590}
591//by marshmellow (from holiman's base)
592// full fsk demod from GraphBuffer wave to decoded 1s and 0s (no mandemod)
f822a063 593int fskdemod(uint8_t *dest, size_t size, uint8_t rfLen, uint8_t invert, uint8_t fchigh, uint8_t fclow)
eb191de6 594{
ba1a299c 595 // FSK demodulator
596 size = fsk_wave_demod(dest, size, fchigh, fclow);
597 size = aggregate_bits(dest, size, rfLen, 192, invert, fchigh, fclow);
598 return size;
eb191de6 599}
a1d17964 600
eb191de6 601// loop to get raw HID waveform then FSK demodulate the TAG ID from it
ec75f5c1 602int HIDdemodFSK(uint8_t *dest, size_t *size, uint32_t *hi2, uint32_t *hi, uint32_t *lo)
eb191de6 603{
a1d17964 604 if (justNoise(dest, *size)) return -1;
3400a435 605
a1d17964 606 size_t numStart=0, size2=*size, startIdx=0;
607 // FSK demodulator
608 *size = fskdemod(dest, size2,50,1,10,8); //fsk2a
609 if (*size < 96) return -2;
610 // 00011101 bit pattern represent start of frame, 01 pattern represents a 0 and 10 represents a 1
611 uint8_t preamble[] = {0,0,0,1,1,1,0,1};
612 // find bitstring in array
613 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
614 if (errChk == 0) return -3; //preamble not found
ec75f5c1 615
a1d17964 616 numStart = startIdx + sizeof(preamble);
617 // final loop, go over previously decoded FSK data and manchester decode into usable tag ID
618 for (size_t idx = numStart; (idx-numStart) < *size - sizeof(preamble); idx+=2){
619 if (dest[idx] == dest[idx+1]){
620 return -4; //not manchester data
621 }
622 *hi2 = (*hi2<<1)|(*hi>>31);
623 *hi = (*hi<<1)|(*lo>>31);
624 //Then, shift in a 0 or one into low
625 if (dest[idx] && !dest[idx+1]) // 1 0
626 *lo=(*lo<<1)|1;
627 else // 0 1
628 *lo=(*lo<<1)|0;
629 }
630 return (int)startIdx;
eb191de6 631}
632
ec75f5c1 633// loop to get raw paradox waveform then FSK demodulate the TAG ID from it
a1d17964 634int ParadoxdemodFSK(uint8_t *dest, size_t *size, uint32_t *hi2, uint32_t *hi, uint32_t *lo)
ec75f5c1 635{
a1d17964 636 if (justNoise(dest, *size)) return -1;
637
638 size_t numStart=0, size2=*size, startIdx=0;
ec75f5c1 639 // FSK demodulator
a1d17964 640 *size = fskdemod(dest, size2,50,1,10,8); //fsk2a
641 if (*size < 96) return -2;
ec75f5c1 642
a1d17964 643 // 00001111 bit pattern represent start of frame, 01 pattern represents a 0 and 10 represents a 1
644 uint8_t preamble[] = {0,0,0,0,1,1,1,1};
645
646 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
647 if (errChk == 0) return -3; //preamble not found
648
649 numStart = startIdx + sizeof(preamble);
650 // final loop, go over previously decoded FSK data and manchester decode into usable tag ID
651 for (size_t idx = numStart; (idx-numStart) < *size - sizeof(preamble); idx+=2){
652 if (dest[idx] == dest[idx+1])
653 return -4; //not manchester data
654 *hi2 = (*hi2<<1)|(*hi>>31);
655 *hi = (*hi<<1)|(*lo>>31);
656 //Then, shift in a 0 or one into low
657 if (dest[idx] && !dest[idx+1]) // 1 0
658 *lo=(*lo<<1)|1;
659 else // 0 1
660 *lo=(*lo<<1)|0;
ec75f5c1 661 }
a1d17964 662 return (int)startIdx;
ec75f5c1 663}
664
ba1a299c 665uint32_t bytebits_to_byte(uint8_t* src, size_t numbits)
eb191de6 666{
ba1a299c 667 uint32_t num = 0;
668 for(int i = 0 ; i < numbits ; i++)
669 {
670 num = (num << 1) | (*src);
671 src++;
672 }
673 return num;
eb191de6 674}
675
676int IOdemodFSK(uint8_t *dest, size_t size)
677{
a1d17964 678 if (justNoise(dest, size)) return -1;
ba1a299c 679 //make sure buffer has data
a1d17964 680 if (size < 66*64) return -2;
ba1a299c 681 // FSK demodulator
a1d17964 682 size = fskdemod(dest, size, 64, 1, 10, 8); // FSK2a RF/64
683 if (size < 65) return -3; //did we get a good demod?
ba1a299c 684 //Index map
685 //0 10 20 30 40 50 60
686 //| | | | | | |
687 //01234567 8 90123456 7 89012345 6 78901234 5 67890123 4 56789012 3 45678901 23
688 //-----------------------------------------------------------------------------
689 //00000000 0 11110000 1 facility 1 version* 1 code*one 1 code*two 1 ???????? 11
690 //
691 //XSF(version)facility:codeone+codetwo
692 //Handle the data
a1d17964 693 size_t startIdx = 0;
694 uint8_t preamble[] = {0,0,0,0,0,0,0,0,0,1};
695 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), &size, &startIdx);
696 if (errChk == 0) return -4; //preamble not found
eb191de6 697
a1d17964 698 if (!dest[startIdx+8] && dest[startIdx+17]==1 && dest[startIdx+26]==1 && dest[startIdx+35]==1 && dest[startIdx+44]==1 && dest[startIdx+53]==1){
699 //confirmed proper separator bits found
700 //return start position
701 return (int) startIdx;
1e090a61 702 }
a1d17964 703 return -5;
1e090a61 704}
705
706// by marshmellow
707// takes a array of binary values, start position, length of bits per parity (includes parity bit),
708// Parity Type (1 for odd 0 for even), and binary Length (length to run)
709size_t removeParity(uint8_t *BitStream, size_t startIdx, uint8_t pLen, uint8_t pType, size_t bLen)
710{
711 uint32_t parityWd = 0;
712 size_t j = 0, bitCnt = 0;
713 for (int word = 0; word < (bLen); word+=pLen){
714 for (int bit=0; bit < pLen; bit++){
715 parityWd = (parityWd << 1) | BitStream[startIdx+word+bit];
f3bf15e4 716 BitStream[j++] = (BitStream[startIdx+word+bit]);
1e090a61 717 }
718 j--;
719 // if parity fails then return 0
720 if (parityTest(parityWd, pLen, pType) == 0) return -1;
721 bitCnt+=(pLen-1);
722 parityWd = 0;
723 }
724 // if we got here then all the parities passed
725 //return ID start index and size
726 return bitCnt;
727}
728
729// by marshmellow
730// FSK Demod then try to locate an AWID ID
a1d17964 731int AWIDdemodFSK(uint8_t *dest, size_t *size)
1e090a61 732{
a1d17964 733 //make sure buffer has enough data
734 if (*size < 96*50) return -1;
735
736 if (justNoise(dest, *size)) return -2;
1e090a61 737
738 // FSK demodulator
a1d17964 739 *size = fskdemod(dest, *size, 50, 1, 10, 8); // fsk2a RF/50
740 if (*size < 96) return -3; //did we get a good demod?
741
742 uint8_t preamble[] = {0,0,0,0,0,0,0,1};
743 size_t startIdx = 0;
744 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
745 if (errChk == 0) return -4; //preamble not found
746 if (*size != 96) return -5;
747 return (int)startIdx;
1e090a61 748}
749
750// by marshmellow
751// FSK Demod then try to locate an Farpointe Data (pyramid) ID
a1d17964 752int PyramiddemodFSK(uint8_t *dest, size_t *size)
1e090a61 753{
f3bf15e4 754 //make sure buffer has data
755 if (*size < 128*50) return -5;
a1d17964 756
f3bf15e4 757 //test samples are not just noise
758 if (justNoise(dest, *size)) return -1;
1e090a61 759
f3bf15e4 760 // FSK demodulator
761 *size = fskdemod(dest, *size, 50, 1, 10, 8); // fsk2a RF/50
762 if (*size < 128) return -2; //did we get a good demod?
a1d17964 763
f3bf15e4 764 uint8_t preamble[] = {0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1};
a1d17964 765 size_t startIdx = 0;
766 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
767 if (errChk == 0) return -4; //preamble not found
768 if (*size != 128) return -3;
769 return (int)startIdx;
1e090a61 770}
771
6de43508 772
773uint8_t DetectCleanAskWave(uint8_t dest[], size_t size, int high, int low)
774{
775 uint8_t allPeaks=1;
776 uint16_t cntPeaks=0;
777 for (size_t i=20; i<255; i++){
778 if (dest[i]>low && dest[i]<high)
779 allPeaks=0;
780 else
781 cntPeaks++;
782 }
783 if (allPeaks==0){
784 if (cntPeaks>190) return 1;
785 }
786 return allPeaks;
787}
788
eb191de6 789// by marshmellow
790// not perfect especially with lower clocks or VERY good antennas (heavy wave clipping)
791// maybe somehow adjust peak trimming value based on samples to fix?
6de43508 792// return start index of best starting position for that clock and return clock (by reference)
793int DetectASKClock(uint8_t dest[], size_t size, int *clock, int maxErr)
eb191de6 794{
ec75f5c1 795 int i=0;
796 int clk[]={8,16,32,40,50,64,100,128,256};
797 int loopCnt = 256; //don't need to loop through entire array...
f3bf15e4 798 if (size == 0) return -1;
ec75f5c1 799 if (size<loopCnt) loopCnt = size;
ec75f5c1 800 //if we already have a valid clock quit
801
802 for (;i<8;++i)
6de43508 803 if (clk[i] == *clock) return 0;
ec75f5c1 804
805 //get high and low peak
806 int peak, low;
807 getHiLo(dest, loopCnt, &peak, &low, 75, 75);
808
6de43508 809 //test for large clean peaks
810 if (DetectCleanAskWave(dest, size, peak, low)==1){
811 uint16_t fcTest=0;
812 uint8_t mostFC=0;
813 fcTest=countFC(dest, size, &mostFC);
814 uint8_t fc1 = fcTest >> 8;
815 uint8_t fc2 = fcTest & 0xFF;
816
817 for (i=0; i<8; i++){
818 if (clk[i] == fc1) {
819 *clock=fc1;
820 return 0;
821 }
822 if (clk[i] == fc2) {
823 *clock=fc2;
824 return 0;
825 }
826 }
827 }
828
ec75f5c1 829 int ii;
830 int clkCnt;
831 int tol = 0;
832 int bestErr[]={1000,1000,1000,1000,1000,1000,1000,1000,1000};
6de43508 833 int bestStart[]={0,0,0,0,0,0,0,0,0};
ec75f5c1 834 int errCnt=0;
835 //test each valid clock from smallest to greatest to see which lines up
6de43508 836 for(clkCnt=0; clkCnt < 8; clkCnt++){
ec75f5c1 837 if (clk[clkCnt] == 32){
838 tol=1;
839 }else{
840 tol=0;
841 }
842 bestErr[clkCnt]=1000;
843 //try lining up the peaks by moving starting point (try first 256)
6de43508 844 for (ii=0; ii < loopCnt; ii++){
ec75f5c1 845 if ((dest[ii] >= peak) || (dest[ii] <= low)){
846 errCnt=0;
847 // now that we have the first one lined up test rest of wave array
848 for (i=0; i<((int)((size-ii-tol)/clk[clkCnt])-1); ++i){
849 if (dest[ii+(i*clk[clkCnt])]>=peak || dest[ii+(i*clk[clkCnt])]<=low){
850 }else if(dest[ii+(i*clk[clkCnt])-tol]>=peak || dest[ii+(i*clk[clkCnt])-tol]<=low){
851 }else if(dest[ii+(i*clk[clkCnt])+tol]>=peak || dest[ii+(i*clk[clkCnt])+tol]<=low){
852 }else{ //error no peak detected
853 errCnt++;
854 }
855 }
856 //if we found no errors then we can stop here
857 // this is correct one - return this clock
858 //PrintAndLog("DEBUG: clk %d, err %d, ii %d, i %d",clk[clkCnt],errCnt,ii,i);
6de43508 859 if(errCnt==0 && clkCnt<6) {
f3bf15e4 860 *clock = clk[clkCnt];
861 return ii;
6de43508 862 }
ec75f5c1 863 //if we found errors see if it is lowest so far and save it as best run
6de43508 864 if(errCnt<bestErr[clkCnt]){
f3bf15e4 865 bestErr[clkCnt]=errCnt;
866 bestStart[clkCnt]=ii;
6de43508 867 }
ec75f5c1 868 }
869 }
870 }
871 uint8_t iii=0;
872 uint8_t best=0;
873 for (iii=0; iii<8; ++iii){
874 if (bestErr[iii]<bestErr[best]){
875 if (bestErr[iii]==0) bestErr[iii]=1;
876 // current best bit to error ratio vs new bit to error ratio
877 if (((size/clk[best])/bestErr[best] < (size/clk[iii])/bestErr[iii]) ){
878 best = iii;
879 }
880 }
881 }
6de43508 882 if (bestErr[best]>maxErr) return -1;
883 *clock=clk[best];
884 return bestStart[best];
eb191de6 885}
ba1a299c 886
887//by marshmellow
6de43508 888//detect psk clock by reading each phase shift
889// a phase shift is determined by measuring the sample length of each wave
890int DetectPSKClock(uint8_t dest[], size_t size, int clock)
ba1a299c 891{
6de43508 892 uint8_t clk[]={255,16,32,40,50,64,100,128,255}; //255 is not a valid clock
893 uint16_t loopCnt = 4096; //don't need to loop through entire array...
f3bf15e4 894 if (size == 0) return 0;
6de43508 895 if (size<loopCnt) loopCnt = size;
ba1a299c 896
6de43508 897 //if we already have a valid clock quit
898 size_t i=1;
899 for (; i < 8; ++i)
900 if (clk[i] == clock) return clock;
1e090a61 901
6de43508 902 size_t waveStart=0, waveEnd=0, firstFullWave=0, lastClkBit=0;
903 uint8_t clkCnt, fc=0, fullWaveLen=0, tol=1;
904 uint16_t peakcnt=0, errCnt=0, waveLenCnt=0;
905 uint16_t bestErr[]={1000,1000,1000,1000,1000,1000,1000,1000,1000};
906 uint16_t peaksdet[]={0,0,0,0,0,0,0,0,0};
907 countFC(dest, size, &fc);
908 //PrintAndLog("DEBUG: FC: %d",fc);
909
910 //find first full wave
911 for (i=0; i<loopCnt; i++){
912 if (dest[i] < dest[i+1] && dest[i+1] >= dest[i+2]){
913 if (waveStart == 0) {
914 waveStart = i+1;
915 //PrintAndLog("DEBUG: waveStart: %d",waveStart);
916 } else {
917 waveEnd = i+1;
918 //PrintAndLog("DEBUG: waveEnd: %d",waveEnd);
919 waveLenCnt = waveEnd-waveStart;
920 if (waveLenCnt > fc){
921 firstFullWave = waveStart;
922 fullWaveLen=waveLenCnt;
923 break;
924 }
925 waveStart=0;
926 }
927 }
928 }
929 //PrintAndLog("DEBUG: firstFullWave: %d, waveLen: %d",firstFullWave,fullWaveLen);
930
931 //test each valid clock from greatest to smallest to see which lines up
932 for(clkCnt=7; clkCnt >= 1 ; clkCnt--){
933 lastClkBit = firstFullWave; //set end of wave as clock align
934 waveStart = 0;
935 errCnt=0;
936 peakcnt=0;
937 //PrintAndLog("DEBUG: clk: %d, lastClkBit: %d",clk[clkCnt],lastClkBit);
938
939 for (i = firstFullWave+fullWaveLen-1; i < loopCnt-2; i++){
940 //top edge of wave = start of new wave
941 if (dest[i] < dest[i+1] && dest[i+1] >= dest[i+2]){
942 if (waveStart == 0) {
943 waveStart = i+1;
944 waveLenCnt=0;
945 } else { //waveEnd
946 waveEnd = i+1;
947 waveLenCnt = waveEnd-waveStart;
948 if (waveLenCnt > fc){
949 //if this wave is a phase shift
950 //PrintAndLog("DEBUG: phase shift at: %d, len: %d, nextClk: %d, ii: %d, fc: %d",waveStart,waveLenCnt,lastClkBit+clk[clkCnt]-tol,ii+1,fc);
951 if (i+1 >= lastClkBit + clk[clkCnt] - tol){ //should be a clock bit
952 peakcnt++;
953 lastClkBit+=clk[clkCnt];
954 } else if (i<lastClkBit+8){
955 //noise after a phase shift - ignore
956 } else { //phase shift before supposed to based on clock
957 errCnt++;
958 }
959 } else if (i+1 > lastClkBit + clk[clkCnt] + tol + fc){
960 lastClkBit+=clk[clkCnt]; //no phase shift but clock bit
961 }
962 waveStart=i+1;
963 }
964 }
965 }
966 if (errCnt == 0){
967 return clk[clkCnt];
968 }
969 if (errCnt <= bestErr[clkCnt]) bestErr[clkCnt]=errCnt;
970 if (peakcnt > peaksdet[clkCnt]) peaksdet[clkCnt]=peakcnt;
971 }
972 //all tested with errors
973 //return the highest clk with the most peaks found
974 uint8_t best=7;
975 for (i=7; i>=1; i--){
976 if (peaksdet[i] > peaksdet[best]) {
977 best = i;
978 }
979 //PrintAndLog("DEBUG: Clk: %d, peaks: %d, errs: %d, bestClk: %d",clk[iii],peaksdet[iii],bestErr[iii],clk[best]);
980 }
981 return clk[best];
ba1a299c 982}
983
6de43508 984//by marshmellow
985//detect nrz clock by reading #peaks vs no peaks(or errors)
986int DetectNRZClock(uint8_t dest[], size_t size, int clock)
ba1a299c 987{
6de43508 988 int i=0;
989 int clk[]={8,16,32,40,50,64,100,128,256};
990 int loopCnt = 4096; //don't need to loop through entire array...
f3bf15e4 991 if (size == 0) return 0;
6de43508 992 if (size<loopCnt) loopCnt = size;
993
994 //if we already have a valid clock quit
995 for (; i < 8; ++i)
996 if (clk[i] == clock) return clock;
997
998 //get high and low peak
999 int peak, low;
1000 getHiLo(dest, loopCnt, &peak, &low, 75, 75);
1001
1002 //PrintAndLog("DEBUG: peak: %d, low: %d",peak,low);
1003 int ii;
1004 uint8_t clkCnt;
1005 uint8_t tol = 0;
1006 int peakcnt=0;
1007 int peaksdet[]={0,0,0,0,0,0,0,0};
1008 int maxPeak=0;
1009 //test for large clipped waves
1010 for (i=0; i<loopCnt; i++){
1011 if (dest[i] >= peak || dest[i] <= low){
1012 peakcnt++;
1013 } else {
1014 if (peakcnt>0 && maxPeak < peakcnt){
f3bf15e4 1015 maxPeak = peakcnt;
6de43508 1016 }
1017 peakcnt=0;
1018 }
1019 }
1020 peakcnt=0;
1021 //test each valid clock from smallest to greatest to see which lines up
1022 for(clkCnt=0; clkCnt < 8; ++clkCnt){
1023 //ignore clocks smaller than largest peak
1024 if (clk[clkCnt]<maxPeak) continue;
1025
1026 //try lining up the peaks by moving starting point (try first 256)
1027 for (ii=0; ii< loopCnt; ++ii){
1028 if ((dest[ii] >= peak) || (dest[ii] <= low)){
1029 peakcnt=0;
1030 // now that we have the first one lined up test rest of wave array
1031 for (i=0; i < ((int)((size-ii-tol)/clk[clkCnt])-1); ++i){
1032 if (dest[ii+(i*clk[clkCnt])]>=peak || dest[ii+(i*clk[clkCnt])]<=low){
1033 peakcnt++;
1034 }
1035 }
1036 if(peakcnt>peaksdet[clkCnt]) {
1037 peaksdet[clkCnt]=peakcnt;
1038 }
1039 }
1040 }
1041 }
1042 int iii=7;
1043 int best=0;
1044 for (iii=7; iii > 0; iii--){
f3bf15e4 1045 if (peaksdet[iii] > peaksdet[best]){
6de43508 1046 best = iii;
1047 }
1048 //PrintAndLog("DEBUG: Clk: %d, peaks: %d, errs: %d, bestClk: %d",clk[iii],peaksdet[iii],bestErr[iii],clk[best]);
1049 }
1050 return clk[best];
ba1a299c 1051}
1052
04d2721b 1053// by marshmellow
1054// convert psk1 demod to psk2 demod
1055// only transition waves are 1s
1056void psk1TOpsk2(uint8_t *BitStream, size_t size)
1057{
1058 size_t i=1;
1059 uint8_t lastBit=BitStream[0];
1060 for (; i<size; i++){
1061 if (lastBit!=BitStream[i]){
1062 lastBit=BitStream[i];
1063 BitStream[i]=1;
1064 } else {
1065 BitStream[i]=0;
1066 }
1067 }
1068 return;
1069}
ba1a299c 1070
3bc66a96 1071// by marshmellow
1072// convert psk2 demod to psk1 demod
1073// from only transition waves are 1s to phase shifts change bit
1074void psk2TOpsk1(uint8_t *BitStream, size_t size)
1075{
1076 size_t i;
1077 uint8_t phase=BitStream[0];
1078 //uint8_t lastBit=BitStream[0];
1079 for (i=1; i<size; i++){
1080 if (phase!=BitStream[i]){
1081 phase ^=1;
1082 }
1083 BitStream[i]=phase;
1084 }
1085 return;
1086}
1087
04d2721b 1088// redesigned by marshmellow adjusted from existing decode functions
1089// indala id decoding - only tested on 26 bit tags, but attempted to make it work for more
ba1a299c 1090int indala26decode(uint8_t *bitStream, size_t *size, uint8_t *invert)
1091{
1092 //26 bit 40134 format (don't know other formats)
1093 int i;
84871873 1094 int long_wait=29;//29 leading zeros in format
ba1a299c 1095 int start;
1096 int first = 0;
1097 int first2 = 0;
1098 int bitCnt = 0;
1099 int ii;
1100 // Finding the start of a UID
1101 for (start = 0; start <= *size - 250; start++) {
1102 first = bitStream[start];
1103 for (i = start; i < start + long_wait; i++) {
1104 if (bitStream[i] != first) {
1105 break;
1106 }
1107 }
1108 if (i == (start + long_wait)) {
1109 break;
1110 }
1111 }
1112 if (start == *size - 250 + 1) {
1113 // did not find start sequence
1114 return -1;
1115 }
ba1a299c 1116 // Inverting signal if needed
1117 if (first == 1) {
1118 for (i = start; i < *size; i++) {
1119 bitStream[i] = !bitStream[i];
1120 }
1121 *invert = 1;
1122 }else *invert=0;
1123
1124 int iii;
84871873 1125 //found start once now test length by finding next one
ba1a299c 1126 for (ii=start+29; ii <= *size - 250; ii++) {
1127 first2 = bitStream[ii];
1128 for (iii = ii; iii < ii + long_wait; iii++) {
1129 if (bitStream[iii] != first2) {
1130 break;
1131 }
1132 }
1133 if (iii == (ii + long_wait)) {
1134 break;
1135 }
1136 }
1137 if (ii== *size - 250 + 1){
1138 // did not find second start sequence
1139 return -2;
1140 }
1141 bitCnt=ii-start;
1142
1143 // Dumping UID
1144 i = start;
1145 for (ii = 0; ii < bitCnt; ii++) {
1146 bitStream[ii] = bitStream[i++];
1147 }
1148 *size=bitCnt;
1149 return 1;
1150}
1151
6de43508 1152// by marshmellow - demodulate NRZ wave (both similar enough)
04d2721b 1153// peaks invert bit (high=1 low=0) each clock cycle = 1 bit determined by last peak
6de43508 1154// there probably is a much simpler way to do this....
1155int nrzRawDemod(uint8_t *dest, size_t *size, int *clk, int *invert, int maxErr)
ba1a299c 1156{
6de43508 1157 if (justNoise(dest, *size)) return -1;
1158 *clk = DetectNRZClock(dest, *size, *clk);
1159 if (*clk==0) return -2;
1160 uint32_t i;
1161 int high, low, ans;
1162 ans = getHiLo(dest, 1260, &high, &low, 75, 75); //25% fuzz on high 25% fuzz on low
1163 if (ans<1) return -2; //just noise
1164 uint32_t gLen = 256;
1165 if (gLen>*size) gLen = *size;
1166 int lastBit = 0; //set first clock check
1167 uint32_t bitnum = 0; //output counter
1168 uint8_t tol = 1; //clock tolerance adjust - waves will be accepted as within the clock if they fall + or - this value + clock from last valid wave
1169 uint32_t iii = 0;
1170 uint16_t errCnt =0;
1171 uint16_t MaxBits = 1000;
1172 uint32_t bestErrCnt = maxErr+1;
1173 uint32_t bestPeakCnt = 0;
1174 uint32_t bestPeakStart=0;
1175 uint8_t curBit=0;
1176 uint8_t bitHigh=0;
1177 uint8_t errBitHigh=0;
1178 uint16_t peakCnt=0;
1179 uint8_t ignoreWindow=4;
1180 uint8_t ignoreCnt=ignoreWindow; //in case of noice near peak
1181 //loop to find first wave that works - align to clock
1182 for (iii=0; iii < gLen; ++iii){
1183 if ((dest[iii]>=high) || (dest[iii]<=low)){
1184 lastBit=iii-*clk;
1185 peakCnt=0;
1186 errCnt=0;
1187 bitnum=0;
1188 //loop through to see if this start location works
1189 for (i = iii; i < *size; ++i) {
1190 //if we found a high bar and we are at a clock bit
1191 if ((dest[i]>=high ) && (i>=lastBit+*clk-tol && i<=lastBit+*clk+tol)){
1192 bitHigh=1;
1193 lastBit+=*clk;
1194 bitnum++;
1195 peakCnt++;
1196 errBitHigh=0;
1197 ignoreCnt=ignoreWindow;
1198 //else if low bar found and we are at a clock point
1199 }else if ((dest[i]<=low ) && (i>=lastBit+*clk-tol && i<=lastBit+*clk+tol)){
1200 bitHigh=1;
1201 lastBit+=*clk;
1202 bitnum++;
1203 peakCnt++;
1204 errBitHigh=0;
1205 ignoreCnt=ignoreWindow;
1206 //else if no bars found
1207 }else if(dest[i] < high && dest[i] > low) {
1208 if (ignoreCnt==0){
1209 bitHigh=0;
1210 if (errBitHigh==1){
1211 errCnt++;
1212 }
1213 errBitHigh=0;
1214 } else {
1215 ignoreCnt--;
1216 }
1217 //if we are past a clock point
1218 if (i >= lastBit+*clk+tol){ //clock val
1219 lastBit+=*clk;
1220 bitnum++;
1221 }
1222 //else if bar found but we are not at a clock bit and we did not just have a clock bit
1223 }else if ((dest[i]>=high || dest[i]<=low) && (i<lastBit+*clk-tol || i>lastBit+*clk+tol) && (bitHigh==0)){
1224 //error bar found no clock...
1225 errBitHigh=1;
1226 }
1227 if (bitnum>=MaxBits) break;
1228 }
1229 //we got more than 64 good bits and not all errors
1230 if (bitnum > (64) && (errCnt <= (maxErr))) {
1231 //possible good read
1232 if (errCnt == 0){
1233 //bestStart = iii;
1234 bestErrCnt = errCnt;
1235 bestPeakCnt = peakCnt;
1236 bestPeakStart = iii;
1237 break; //great read - finish
1238 }
1239 if (errCnt < bestErrCnt){ //set this as new best run
1240 bestErrCnt = errCnt;
1241 //bestStart = iii;
1242 }
1243 if (peakCnt > bestPeakCnt){
1244 bestPeakCnt=peakCnt;
1245 bestPeakStart=iii;
1246 }
1247 }
1248 }
1249 }
1250 //PrintAndLog("DEBUG: bestErrCnt: %d, maxErr: %d, bestStart: %d, bestPeakCnt: %d, bestPeakStart: %d",bestErrCnt,maxErr,bestStart,bestPeakCnt,bestPeakStart);
1251 if (bestErrCnt <= maxErr){
1252 //best run is good enough set to best run and set overwrite BinStream
1253 iii=bestPeakStart;
1254 lastBit=bestPeakStart-*clk;
1255 bitnum=0;
1256 for (i = iii; i < *size; ++i) {
1257 //if we found a high bar and we are at a clock bit
1258 if ((dest[i] >= high ) && (i>=lastBit+*clk-tol && i<=lastBit+*clk+tol)){
1259 bitHigh=1;
1260 lastBit+=*clk;
1261 curBit=1-*invert;
1262 dest[bitnum]=curBit;
1263 bitnum++;
1264 errBitHigh=0;
1265 ignoreCnt=ignoreWindow;
1266 //else if low bar found and we are at a clock point
1267 }else if ((dest[i]<=low ) && (i>=lastBit+*clk-tol && i<=lastBit+*clk+tol)){
1268 bitHigh=1;
1269 lastBit+=*clk;
1270 curBit=*invert;
1271 dest[bitnum]=curBit;
1272 bitnum++;
1273 errBitHigh=0;
1274 ignoreCnt=ignoreWindow;
1275 //else if no bars found
1276 }else if(dest[i]<high && dest[i]>low) {
1277 if (ignoreCnt==0){
1278 bitHigh=0;
1279 //if peak is done was it an error peak?
1280 if (errBitHigh==1){
1281 dest[bitnum]=77;
1282 bitnum++;
1283 errCnt++;
1284 }
1285 errBitHigh=0;
1286 } else {
1287 ignoreCnt--;
1288 }
1289 //if we are past a clock point
1290 if (i>=lastBit+*clk+tol){ //clock val
1291 lastBit+=*clk;
1292 dest[bitnum]=curBit;
1293 bitnum++;
1294 }
1295 //else if bar found but we are not at a clock bit and we did not just have a clock bit
1296 }else if ((dest[i]>=high || dest[i]<=low) && ((i<lastBit+*clk-tol) || (i>lastBit+*clk+tol)) && (bitHigh==0)){
1297 //error bar found no clock...
1298 errBitHigh=1;
1299 }
1300 if (bitnum >= MaxBits) break;
1301 }
1302 *size=bitnum;
1303 } else{
1304 *size=bitnum;
1305 return -1;
1306 }
ba1a299c 1307
6de43508 1308 if (bitnum>16){
1309 *size=bitnum;
1310 } else return -1;
1311 return errCnt;
ba1a299c 1312}
1313
1e090a61 1314//by marshmellow
03e6bb4a 1315//detects the bit clock for FSK given the high and low Field Clocks
1316uint8_t detectFSKClk(uint8_t *BitStream, size_t size, uint8_t fcHigh, uint8_t fcLow)
1e090a61 1317{
03e6bb4a 1318 uint8_t clk[] = {8,16,32,40,50,64,100,128,0};
1319 uint16_t rfLens[] = {0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0};
1320 uint8_t rfCnts[] = {0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0};
1e090a61 1321 uint8_t rfLensFnd = 0;
1e090a61 1322 uint8_t lastFCcnt=0;
1e090a61 1323 uint32_t fcCounter = 0;
03e6bb4a 1324 uint16_t rfCounter = 0;
1e090a61 1325 uint8_t firstBitFnd = 0;
03e6bb4a 1326 size_t i;
f3bf15e4 1327 if (size == 0) return 0;
03e6bb4a 1328
1329 uint8_t fcTol = (uint8_t)(0.5+(float)(fcHigh-fcLow)/2);
1330 rfLensFnd=0;
1331 fcCounter=0;
1332 rfCounter=0;
1333 firstBitFnd=0;
1334 //PrintAndLog("DEBUG: fcTol: %d",fcTol);
1e090a61 1335 // prime i to first up transition
03e6bb4a 1336 for (i = 1; i < size-1; i++)
1337 if (BitStream[i] > BitStream[i-1] && BitStream[i]>=BitStream[i+1])
1e090a61 1338 break;
1339
03e6bb4a 1340 for (; i < size-1; i++){
1341 if (BitStream[i] > BitStream[i-1] && BitStream[i]>=BitStream[i+1]){
1342 // new peak
1e090a61 1343 fcCounter++;
1344 rfCounter++;
03e6bb4a 1345 // if we got less than the small fc + tolerance then set it to the small fc
1346 if (fcCounter < fcLow+fcTol)
1347 fcCounter = fcLow;
1348 else //set it to the large fc
1349 fcCounter = fcHigh;
f3bf15e4 1350
03e6bb4a 1351 //look for bit clock (rf/xx)
1352 if ((fcCounter<lastFCcnt || fcCounter>lastFCcnt)){
1353 //not the same size as the last wave - start of new bit sequence
1354
1355 if (firstBitFnd>1){ //skip first wave change - probably not a complete bit
1356 for (int ii=0; ii<15; ii++){
1357 if (rfLens[ii]==rfCounter){
1358 rfCnts[ii]++;
1359 rfCounter=0;
1360 break;
1e090a61 1361 }
1e090a61 1362 }
03e6bb4a 1363 if (rfCounter>0 && rfLensFnd<15){
1364 //PrintAndLog("DEBUG: rfCntr %d, fcCntr %d",rfCounter,fcCounter);
1365 rfCnts[rfLensFnd]++;
1366 rfLens[rfLensFnd++]=rfCounter;
1e090a61 1367 }
03e6bb4a 1368 } else {
1369 firstBitFnd++;
1e090a61 1370 }
03e6bb4a 1371 rfCounter=0;
1372 lastFCcnt=fcCounter;
1e090a61 1373 }
1e090a61 1374 fcCounter=0;
1375 } else {
1376 // count sample
1377 fcCounter++;
1378 rfCounter++;
1379 }
1380 }
03e6bb4a 1381 uint8_t rfHighest=15, rfHighest2=15, rfHighest3=15;
1e090a61 1382
03e6bb4a 1383 for (i=0; i<15; i++){
1384 //PrintAndLog("DEBUG: RF %d, cnts %d",rfLens[i], rfCnts[i]);
1e090a61 1385 //get highest 2 RF values (might need to get more values to compare or compare all?)
03e6bb4a 1386 if (rfCnts[i]>rfCnts[rfHighest]){
1e090a61 1387 rfHighest3=rfHighest2;
1388 rfHighest2=rfHighest;
1389 rfHighest=i;
03e6bb4a 1390 } else if(rfCnts[i]>rfCnts[rfHighest2]){
1e090a61 1391 rfHighest3=rfHighest2;
1392 rfHighest2=i;
03e6bb4a 1393 } else if(rfCnts[i]>rfCnts[rfHighest3]){
1e090a61 1394 rfHighest3=i;
1395 }
03e6bb4a 1396 }
1397 // set allowed clock remainder tolerance to be 1 large field clock length+1
1398 // we could have mistakenly made a 9 a 10 instead of an 8 or visa versa so rfLens could be 1 FC off
1399 uint8_t tol1 = fcHigh+1;
1e090a61 1400
03e6bb4a 1401 //PrintAndLog("DEBUG: hightest: 1 %d, 2 %d, 3 %d",rfLens[rfHighest],rfLens[rfHighest2],rfLens[rfHighest3]);
1402
1e090a61 1403 // loop to find the highest clock that has a remainder less than the tolerance
03e6bb4a 1404 // compare samples counted divided by
1e090a61 1405 int ii=7;
1406 for (; ii>=0; ii--){
1407 if (rfLens[rfHighest] % clk[ii] < tol1 || rfLens[rfHighest] % clk[ii] > clk[ii]-tol1){
1408 if (rfLens[rfHighest2] % clk[ii] < tol1 || rfLens[rfHighest2] % clk[ii] > clk[ii]-tol1){
1409 if (rfLens[rfHighest3] % clk[ii] < tol1 || rfLens[rfHighest3] % clk[ii] > clk[ii]-tol1){
1410 break;
1411 }
1412 }
1413 }
1414 }
1415
03e6bb4a 1416 if (ii<0) return 0; // oops we went too far
1e090a61 1417
03e6bb4a 1418 return clk[ii];
1419}
1e090a61 1420
03e6bb4a 1421//by marshmellow
1422//countFC is to detect the field clock lengths.
1423//counts and returns the 2 most common wave lengths
6de43508 1424//mainly used for FSK field clock detection
1425uint16_t countFC(uint8_t *BitStream, size_t size, uint8_t *mostFC)
03e6bb4a 1426{
1427 uint8_t fcLens[] = {0,0,0,0,0,0,0,0,0,0};
1428 uint16_t fcCnts[] = {0,0,0,0,0,0,0,0,0,0};
1429 uint8_t fcLensFnd = 0;
1430 uint8_t lastFCcnt=0;
1431 uint32_t fcCounter = 0;
1432 size_t i;
6de43508 1433 if (size == 0) return 0;
1434
03e6bb4a 1435 // prime i to first up transition
1436 for (i = 1; i < size-1; i++)
1437 if (BitStream[i] > BitStream[i-1] && BitStream[i] >= BitStream[i+1])
1438 break;
1e090a61 1439
03e6bb4a 1440 for (; i < size-1; i++){
1441 if (BitStream[i] > BitStream[i-1] && BitStream[i] >= BitStream[i+1]){
1442 // new up transition
1443 fcCounter++;
1444
1445 //if we had 5 and now have 9 then go back to 8 (for when we get a fc 9 instead of an 8)
1446 if (lastFCcnt==5 && fcCounter==9) fcCounter--;
1447 //if odd and not rc/5 add one (for when we get a fc 9 instead of 10)
1448 if ((fcCounter==9 && fcCounter & 1) || fcCounter==4) fcCounter++;
1449
1450 // save last field clock count (fc/xx)
1451 // find which fcLens to save it to:
1452 for (int ii=0; ii<10; ii++){
1453 if (fcLens[ii]==fcCounter){
1454 fcCnts[ii]++;
1455 fcCounter=0;
1456 break;
1457 }
1458 }
1459 if (fcCounter>0 && fcLensFnd<10){
1460 //add new fc length
1461 fcCnts[fcLensFnd]++;
1462 fcLens[fcLensFnd++]=fcCounter;
1463 }
1464 fcCounter=0;
1465 } else {
1466 // count sample
1467 fcCounter++;
1468 }
1469 }
1470
1471 uint8_t best1=9, best2=9, best3=9;
1472 uint16_t maxCnt1=0;
1473 // go through fclens and find which ones are bigest 2
1474 for (i=0; i<10; i++){
1475 // PrintAndLog("DEBUG: FC %d, Cnt %d, Errs %d",fcLens[i],fcCnts[i],errCnt);
1476 // get the 3 best FC values
1477 if (fcCnts[i]>maxCnt1) {
1478 best3=best2;
1479 best2=best1;
1480 maxCnt1=fcCnts[i];
1481 best1=i;
1482 } else if(fcCnts[i]>fcCnts[best2]){
1483 best3=best2;
1484 best2=i;
1485 } else if(fcCnts[i]>fcCnts[best3]){
1486 best3=i;
1487 }
1488 }
1489 uint8_t fcH=0, fcL=0;
1e090a61 1490 if (fcLens[best1]>fcLens[best2]){
03e6bb4a 1491 fcH=fcLens[best1];
1492 fcL=fcLens[best2];
1493 } else{
1494 fcH=fcLens[best2];
1495 fcL=fcLens[best1];
1e090a61 1496 }
6de43508 1497
1498 *mostFC=fcLens[best1];
03e6bb4a 1499 // TODO: take top 3 answers and compare to known Field clocks to get top 2
1e090a61 1500
03e6bb4a 1501 uint16_t fcs = (((uint16_t)fcH)<<8) | fcL;
1502 // PrintAndLog("DEBUG: Best %d best2 %d best3 %d",fcLens[best1],fcLens[best2],fcLens[best3]);
1503
1e090a61 1504 return fcs;
1505}
6de43508 1506
1507//by marshmellow
1508//countPSK_FC is to detect the psk carrier clock length.
1509//counts and returns the 1 most common wave length
1510uint8_t countPSK_FC(uint8_t *BitStream, size_t size)
1511{
1512 uint8_t fcLens[] = {0,0,0,0,0,0,0,0,0,0};
1513 uint16_t fcCnts[] = {0,0,0,0,0,0,0,0,0,0};
1514 uint8_t fcLensFnd = 0;
1515 uint32_t fcCounter = 0;
1516 size_t i;
f3bf15e4 1517 if (size == 0) return 0;
6de43508 1518
1519 // prime i to first up transition
1520 for (i = 1; i < size-1; i++)
1521 if (BitStream[i] > BitStream[i-1] && BitStream[i] >= BitStream[i+1])
1522 break;
1523
1524 for (; i < size-1; i++){
1525 if (BitStream[i] > BitStream[i-1] && BitStream[i] >= BitStream[i+1]){
1526 // new up transition
1527 fcCounter++;
1528
1529 // save last field clock count (fc/xx)
1530 // find which fcLens to save it to:
1531 for (int ii=0; ii<10; ii++){
1532 if (fcLens[ii]==fcCounter){
1533 fcCnts[ii]++;
1534 fcCounter=0;
1535 break;
1536 }
1537 }
1538 if (fcCounter>0 && fcLensFnd<10){
1539 //add new fc length
1540 fcCnts[fcLensFnd]++;
1541 fcLens[fcLensFnd++]=fcCounter;
1542 }
1543 fcCounter=0;
1544 } else {
1545 // count sample
1546 fcCounter++;
1547 }
1548 }
1549
1550 uint8_t best1=9;
1551 uint16_t maxCnt1=0;
1552 // go through fclens and find which ones are bigest
1553 for (i=0; i<10; i++){
1554 //PrintAndLog("DEBUG: FC %d, Cnt %d",fcLens[i],fcCnts[i]);
1555 // get the best FC value
1556 if (fcCnts[i]>maxCnt1) {
1557 maxCnt1=fcCnts[i];
1558 best1=i;
1559 }
1560 }
1561 return fcLens[best1];
1562}
1563
1564//by marshmellow - demodulate PSK1 wave
1565//uses wave lengths (# Samples)
1566int pskRawDemod(uint8_t dest[], size_t *size, int *clock, int *invert)
1567{
1568 uint16_t loopCnt = 4096; //don't need to loop through entire array...
f3bf15e4 1569 if (size == 0) return -1;
6de43508 1570 if (*size<loopCnt) loopCnt = *size;
1571
1572 uint8_t curPhase = *invert;
1573 size_t i, waveStart=0, waveEnd=0, firstFullWave=0, lastClkBit=0;
1574 uint8_t fc=0, fullWaveLen=0, tol=1;
1575 uint16_t errCnt=0, waveLenCnt=0;
1576 fc = countPSK_FC(dest, *size);
1577 if (fc!=2 && fc!=4 && fc!=8) return -1;
1578 //PrintAndLog("DEBUG: FC: %d",fc);
1579 *clock = DetectPSKClock(dest, *size, *clock);
1580 if (*clock==0) return -1;
1581 int avgWaveVal=0, lastAvgWaveVal=0;
1582 //find first full wave
1583 for (i=0; i<loopCnt; i++){
1584 if (dest[i]+fc < dest[i+1] && dest[i+1] >= dest[i+2]){
1585 if (waveStart == 0) {
1586 waveStart = i+1;
1587 avgWaveVal=dest[i+1];
1588 //PrintAndLog("DEBUG: waveStart: %d",waveStart);
1589 } else {
1590 waveEnd = i+1;
1591 //PrintAndLog("DEBUG: waveEnd: %d",waveEnd);
1592 waveLenCnt = waveEnd-waveStart;
1593 lastAvgWaveVal = avgWaveVal/waveLenCnt;
1594 if (waveLenCnt > fc){
1595 firstFullWave = waveStart;
1596 fullWaveLen=waveLenCnt;
1597 //if average wave value is > graph 0 then it is an up wave or a 1
1598 if (lastAvgWaveVal > 128) curPhase^=1;
1599 break;
1600 }
1601 waveStart=0;
1602 avgWaveVal=0;
1603 }
1604 }
1605 avgWaveVal+=dest[i+1];
1606 }
1607 //PrintAndLog("DEBUG: firstFullWave: %d, waveLen: %d",firstFullWave,fullWaveLen);
1608 lastClkBit = firstFullWave; //set start of wave as clock align
1609 waveStart = 0;
1610 errCnt=0;
1611 size_t numBits=0;
1612 //PrintAndLog("DEBUG: clk: %d, lastClkBit: %d", *clock, lastClkBit);
1613
1614 for (i = firstFullWave+fullWaveLen-1; i < *size-3; i++){
1615 //top edge of wave = start of new wave
1616 if (dest[i]+fc < dest[i+1] && dest[i+1] >= dest[i+2]){
1617 if (waveStart == 0) {
1618 waveStart = i+1;
1619 waveLenCnt=0;
1620 avgWaveVal = dest[i+1];
1621 } else { //waveEnd
1622 waveEnd = i+1;
1623 waveLenCnt = waveEnd-waveStart;
1624 lastAvgWaveVal = avgWaveVal/waveLenCnt;
1625 if (waveLenCnt > fc){
1626 //PrintAndLog("DEBUG: avgWaveVal: %d, waveSum: %d",lastAvgWaveVal,avgWaveVal);
1627 //if this wave is a phase shift
1628 //PrintAndLog("DEBUG: phase shift at: %d, len: %d, nextClk: %d, i: %d, fc: %d",waveStart,waveLenCnt,lastClkBit+*clock-tol,i+1,fc);
1629 if (i+1 >= lastClkBit + *clock - tol){ //should be a clock bit
1630 curPhase^=1;
1631 dest[numBits] = curPhase;
1632 numBits++;
1633 lastClkBit += *clock;
1634 } else if (i<lastClkBit+10){
1635 //noise after a phase shift - ignore
1636 } else { //phase shift before supposed to based on clock
1637 errCnt++;
1638 dest[numBits] = 77;
1639 numBits++;
1640 }
1641 } else if (i+1 > lastClkBit + *clock + tol + fc){
1642 lastClkBit += *clock; //no phase shift but clock bit
1643 dest[numBits] = curPhase;
1644 numBits++;
1645 }
1646 avgWaveVal=0;
1647 waveStart=i+1;
1648 }
1649 }
1650 avgWaveVal+=dest[i+1];
1651 }
1652 *size = numBits;
1653 return errCnt;
1654}
Impressum, Datenschutz