1 //-----------------------------------------------------------------------------
3 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
4 // at your option, any later version. See the LICENSE.txt file for the text of
6 //-----------------------------------------------------------------------------
7 // Low frequency Presco tag commands
8 //-----------------------------------------------------------------------------
10 #include "cmdlfnoralsy.h"
12 static int CmdHelp(const char *Cmd
);
14 int usage_lf_noralsy_clone(void){
15 PrintAndLog("clone a Noralsy tag to a T55x7 tag.");
16 PrintAndLog("Usage: lf noralsy clone [h] <card ID> <Q5>");
17 PrintAndLog("Options:");
18 PrintAndLog(" h : This help");
19 PrintAndLog(" <card ID> : Noralsy card ID");
20 PrintAndLog(" <Q5> : specify write to Q5 (t5555 instead of t55x7)");
22 PrintAndLog("Sample: lf noralsy clone 112233");
26 int usage_lf_noralsy_sim(void) {
27 PrintAndLog("Enables simulation of Noralsy card with specified card number.");
28 PrintAndLog("Simulation runs until the button is pressed or another USB command is issued.");
30 PrintAndLog("Usage: lf noralsy sim [h] <card ID>");
31 PrintAndLog("Options:");
32 PrintAndLog(" h : This help");
33 PrintAndLog(" <card ID> : Noralsy card ID");
35 PrintAndLog("Sample: lf noralsy sim 112233");
39 static uint8_t noralsy_chksum( uint8_t* bits
, uint8_t len
) {
41 for (uint8_t i
= 0; i
< len
; i
+= 4)
42 sum
^= bytebits_to_byte(bits
+i
, 4);
45 int getnoralsyBits(uint32_t id
, uint8_t *bits
) {
47 num_to_bytebits(0xBB0214FF, 32, bits
); // --> Have seen 0xBB0214FF / 0xBB0314FF UNKNOWN
49 //convert ID into BCD-format
52 uint16_t sub1
= (id
& 0xFFF0000) >> 16;
53 uint8_t sub2
= (id
& 0x000FF00) >> 8;
54 uint8_t sub3
= (id
& 0x00000FF);
56 num_to_bytebits(sub1
, 12, bits
+32);
57 num_to_bytebits(0x980, 12, bits
+44); // --> UNKNOWN part
58 num_to_bytebits(sub2
, 8, bits
+56);
59 num_to_bytebits(sub3
, 8, bits
+64);
62 uint8_t chksum
= noralsy_chksum(bits
+32, 40);
63 num_to_bytebits(chksum
, 4, bits
+72);
64 chksum
= noralsy_chksum(bits
, 76);
65 num_to_bytebits(chksum
, 4, bits
+76);
69 //see ASKDemod for what args are accepted
70 int CmdNoralsyDemod(const char *Cmd
) {
74 if (!ASKDemod_ext("32 0 0", FALSE
, FALSE
, 1, &st
)) {
75 if (g_debugMode
) PrintAndLog("DEBUG: Error - Noralsy: ASK/Manchester Demod failed");
78 size_t size
= DemodBufferLen
;
79 int ans
= NoralsyDemod_AM(DemodBuffer
, &size
);
83 PrintAndLog("DEBUG: Error - Noralsy: too few bits found");
85 PrintAndLog("DEBUG: Error - Noralsy: preamble not found");
87 PrintAndLog("DEBUG: Error - Noralsy: Size not correct: %d", size
);
89 PrintAndLog("DEBUG: Error - Noralsy: ans: %d", ans
);
93 setDemodBuf(DemodBuffer
, 96, ans
);
96 uint32_t raw1
= bytebits_to_byte(DemodBuffer
, 32);
97 uint32_t raw2
= bytebits_to_byte(DemodBuffer
+32, 32);
98 uint32_t raw3
= bytebits_to_byte(DemodBuffer
+64, 32);
100 uint32_t cardid
= ((raw2
& 0xFFF00000) >> 20) << 16;
101 cardid
|= (raw2
& 0xFF) << 8;
102 cardid
|= ((raw3
& 0xFF000000) >> 24);
103 cardid
= BCD2DEC(cardid
);
106 uint8_t calc1
= noralsy_chksum(DemodBuffer
+32, 40);
107 uint8_t calc2
= noralsy_chksum(DemodBuffer
, 76);
108 uint8_t chk1
= 0, chk2
= 0;
109 chk1
= bytebits_to_byte(DemodBuffer
+72, 4);
110 chk2
= bytebits_to_byte(DemodBuffer
+76, 4);
112 if ( chk1
!= calc1
) printf("checksum 1 failed %x - %x\n", chk1
, calc1
);
113 if ( chk2
!= calc2
) printf("checksum 2 failed %x - %x\n", chk2
, calc2
);
115 PrintAndLog("Noralsy Tag Found: Card ID %u, Raw: %08X%08X%08X", cardid
, raw1
,raw2
, raw3
);
119 int CmdNoralsyRead(const char *Cmd
) {
121 getSamples("20000",TRUE
);
122 return CmdNoralsyDemod(Cmd
);
125 int CmdNoralsyClone(const char *Cmd
) {
128 uint32_t blocks
[4] = {T55x7_MODULATION_MANCHESTER
| T55x7_BITRATE_RF_32
| T55x7_ST_TERMINATOR
|3<<T55x7_MAXBLOCK_SHIFT
, 0, 0};
132 memset(bs
, 0, sizeof(bits
));
134 char cmdp
= param_getchar(Cmd
, 0);
135 if (strlen(Cmd
) == 0 || cmdp
== 'h' || cmdp
== 'H') return usage_lf_noralsy_clone();
137 id
= param_get32ex(Cmd
, 0, 0, 10);
140 if (param_getchar(Cmd
, 1) == 'Q' || param_getchar(Cmd
, 1) == 'q') {
141 //t5555 (Q5) BITRATE = (RF-2)/2 (iceman)
142 blocks
[0] = T5555_MODULATION_MANCHESTER
| 32<<T5555_BITRATE_SHIFT
| T5555_ST_TERMINATOR
| 3<<T5555_MAXBLOCK_SHIFT
;
145 if ( !getnoralsyBits(id
, bs
)) {
146 PrintAndLog("Error with tag bitstream generation.");
151 blocks
[1] = bytebits_to_byte(bs
,32);
152 blocks
[2] = bytebits_to_byte(bs
+32,32);
153 blocks
[3] = bytebits_to_byte(bs
+64,32);
155 PrintAndLog("Preparing to clone Noralsy to T55x7 with CardId: %u", id
);
156 PrintAndLog("Blk | Data ");
157 PrintAndLog("----+------------");
158 PrintAndLog(" 00 | 0x%08x", blocks
[0]);
159 PrintAndLog(" 01 | 0x%08x", blocks
[1]);
160 PrintAndLog(" 02 | 0x%08x", blocks
[2]);
161 PrintAndLog(" 03 | 0x%08x", blocks
[3]);
164 UsbCommand c
= {CMD_T55XX_WRITE_BLOCK
, {0,0,0}};
166 for (int i
= 3; i
>= 0; --i
) {
167 c
.arg
[0] = blocks
[i
];
169 clearCommandBuffer();
171 if (!WaitForResponseTimeout(CMD_ACK
, &resp
, 1000)){
172 PrintAndLog("Error occurred, device did not respond during write operation.");
179 int CmdNoralsySim(const char *Cmd
) {
183 memset(bs
, 0, sizeof(bits
));
186 char cmdp
= param_getchar(Cmd
, 0);
187 if (strlen(Cmd
) == 0 || cmdp
== 'h' || cmdp
== 'H') return usage_lf_noralsy_sim();
189 id
= param_get32ex(Cmd
, 0, 0, 10);
191 uint8_t clk
= 32, encoding
= 1, separator
= 1, invert
= 0;
194 arg1
= clk
<< 8 | encoding
;
195 arg2
= invert
<< 8 | separator
;
197 if ( !getnoralsyBits(id
, bs
)) {
198 PrintAndLog("Error with tag bitstream generation.");
202 PrintAndLog("Simulating Noralsy - CardId: %u", id
);
204 UsbCommand c
= {CMD_ASK_SIM_TAG
, {arg1
, arg2
, size
}};
205 memcpy(c
.d
.asBytes
, bs
, size
);
206 clearCommandBuffer();
211 static command_t CommandTable
[] = {
212 {"help", CmdHelp
, 1, "This help"},
213 {"read", CmdNoralsyRead
, 0, "Attempt to read and extract tag data"},
214 {"clone", CmdNoralsyClone
,0, "clone Noralsy tag"},
215 {"sim", CmdNoralsySim
, 0, "simulate Noralsy tag"},
216 {NULL
, NULL
, 0, NULL
}
219 int CmdLFNoralsy(const char *Cmd
) {
220 clearCommandBuffer();
221 CmdsParse(CommandTable
, Cmd
);
225 int CmdHelp(const char *Cmd
) {
226 CmdsHelp(CommandTable
);