]> cvs.zerfleddert.de Git - proxmark3-svn/blob - client/cmdlft55xx.c
projects / proxmark3-svn / blob
? search:


5804fbc7eb4921ed0da4d344a9d64ac636493f7c
[proxmark3-svn] / client / cmdlft55xx.c
1 //-----------------------------------------------------------------------------
2 //
3 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
4 // at your option, any later version. See the LICENSE.txt file for the text of
5 // the license.
6 //-----------------------------------------------------------------------------
7 // Low frequency T55xx commands
8 //-----------------------------------------------------------------------------
9
10 #include <stdio.h>
11 #include <string.h>
12 #include <inttypes.h>
13 #include "proxmark3.h"
14 #include "ui.h"
15 #include "graph.h"
16 #include "cmdmain.h"
17 #include "cmdparser.h"
18 #include "cmddata.h"
19 #include "cmdlf.h"
20 #include "cmdlft55xx.h"
21 #include "util.h"
22 #include "data.h"
23
24
25 #define LF_TRACE_BUFF_SIZE 12000 // 32 x 32 x 10 (32 bit times numofblock (7), times clock skip..)
26 static int CmdHelp(const char *Cmd);
27
28
29 int CmdReadBlk(const char *Cmd)
30 {
31 int Block = -1;
32 sscanf(Cmd, "%d", &Block);
33
34 if ((Block > 7) | (Block < 0)) {
35 PrintAndLog("Block must be between 0 and 7");
36 return 1;
37 }
38
39 UsbCommand c;
40 c.cmd = CMD_T55XX_READ_BLOCK;
41 c.d.asBytes[0] = 0x00;
42 c.arg[0] = 0;
43 c.arg[1] = Block;
44 c.arg[2] = 0;
45 SendCommand(&c);
46 WaitForResponse(CMD_ACK, NULL);
47
48 // uint8_t data[LF_TRACE_BUFF_SIZE] = {0x00};
49
50 // GetFromBigBuf(data,LF_TRACE_BUFF_SIZE,3560); //3560 -- should be offset..
51 // WaitForResponseTimeout(CMD_ACK,NULL, 1500);
52
53 // for (int j = 0; j < LF_TRACE_BUFF_SIZE; j++) {
54 // GraphBuffer[j] = (int)data[j];
55 // }
56 // GraphTraceLen = LF_TRACE_BUFF_SIZE;
57 CmdSamples("12000");
58 ManchesterDemod(Block);
59 // RepaintGraphWindow();
60 return 0;
61 }
62
63 int CmdReadBlkPWD(const char *Cmd)
64 {
65 int Block = -1; //default to invalid block
66 int Password = 0xFFFFFFFF; //default to blank Block 7
67 UsbCommand c;
68
69 sscanf(Cmd, "%d %x", &Block, &Password);
70
71 if ((Block > 7) | (Block < 0)) {
72 PrintAndLog("Block must be between 0 and 7");
73 return 1;
74 }
75
76 PrintAndLog("Reading page 0 block %d pwd %08X", Block, Password);
77
78 c.cmd = CMD_T55XX_READ_BLOCK;
79 c.d.asBytes[0] = 0x1; //Password mode
80 c.arg[0] = 0;
81 c.arg[1] = Block;
82 c.arg[2] = Password;
83 SendCommand(&c);
84 WaitForResponse(CMD_ACK, NULL);
85
86 uint8_t data[LF_TRACE_BUFF_SIZE] = {0x00};
87
88 GetFromBigBuf(data,LF_TRACE_BUFF_SIZE,3560); //3560 -- should be offset..
89 WaitForResponseTimeout(CMD_ACK,NULL, 1500);
90
91 for (int j = 0; j < LF_TRACE_BUFF_SIZE; j++) {
92 GraphBuffer[j] = ((int)data[j]);
93 }
94 GraphTraceLen = LF_TRACE_BUFF_SIZE;
95 ManchesterDemod(Block);
96 RepaintGraphWindow();
97 return 0;
98 }
99
100 int CmdWriteBlk(const char *Cmd)
101 {
102 int Block = 8; //default to invalid block
103 int Data = 0xFFFFFFFF; //default to blank Block
104 UsbCommand c;
105
106 sscanf(Cmd, "%x %d", &Data, &Block);
107
108 if (Block > 7) {
109 PrintAndLog("Block must be between 0 and 7");
110 return 1;
111 }
112
113 PrintAndLog("Writting block %d with data %08X", Block, Data);
114
115 c.cmd = CMD_T55XX_WRITE_BLOCK;
116 c.d.asBytes[0] = 0x0; //Normal mode
117 c.arg[0] = Data;
118 c.arg[1] = Block;
119 c.arg[2] = 0;
120 SendCommand(&c);
121 return 0;
122 }
123
124 int CmdWriteBlkPWD(const char *Cmd)
125 {
126 int Block = 8; //default to invalid block
127 int Data = 0xFFFFFFFF; //default to blank Block
128 int Password = 0xFFFFFFFF; //default to blank Block 7
129 UsbCommand c;
130
131 sscanf(Cmd, "%x %d %x", &Data, &Block, &Password);
132
133 if (Block > 7) {
134 PrintAndLog("Block must be between 0 and 7");
135 return 1;
136 }
137
138 PrintAndLog("Writting block %d with data %08X and password %08X", Block, Data, Password);
139
140 c.cmd = CMD_T55XX_WRITE_BLOCK;
141 c.d.asBytes[0] = 0x1; //Password mode
142 c.arg[0] = Data;
143 c.arg[1] = Block;
144 c.arg[2] = Password;
145 SendCommand(&c);
146 return 0;
147 }
148
149 int CmdReadTrace(const char *Cmd)
150 {
151 char cmdp = param_getchar(Cmd, 0);
152
153 if (strlen(Cmd) > 1 || cmdp == 'h' || cmdp == 'H') {
154 PrintAndLog("Usage: lf t55xx trace [use data from Graphbuffer]");
155 PrintAndLog(" [use data from Graphbuffer], if not set, try reading data from tag.");
156 PrintAndLog("");
157 PrintAndLog(" sample: lf t55xx trace");
158 PrintAndLog(" sample: lf t55xx trace 1");
159 return 0;
160 }
161
162 if ( strlen(Cmd)==0){
163 UsbCommand c = {CMD_T55XX_READ_TRACE, {0, 0, 0}};
164 SendCommand(&c);
165 WaitForResponse(CMD_ACK, NULL);
166
167 uint8_t data[LF_TRACE_BUFF_SIZE] = {0x00};
168
169 GetFromBigBuf(data,LF_TRACE_BUFF_SIZE,3560); //3560 -- should be offset..
170 WaitForResponseTimeout(CMD_ACK,NULL, 1500);
171
172 for (int j = 0; j < LF_TRACE_BUFF_SIZE; j++) {
173 GraphBuffer[j] = ((int)data[j]);
174 }
175 GraphTraceLen = LF_TRACE_BUFF_SIZE;
176 }
177
178 uint8_t bits[1000] = {0x00};
179 uint8_t * bitstream = bits;
180
181 manchester_decode(GraphBuffer, LF_TRACE_BUFF_SIZE, bitstream);
182 RepaintGraphWindow();
183
184 uint8_t si = 5;
185 uint32_t bl0 = PackBits(si, 32, bitstream);
186 uint32_t bl1 = PackBits(si+32, 32, bitstream);
187
188 uint32_t acl = PackBits(si, 8, bitstream); si += 8;
189 uint32_t mfc = PackBits(si, 8, bitstream); si += 8;
190 uint32_t cid = PackBits(si, 5, bitstream); si += 5;
191 uint32_t icr = PackBits(si, 3, bitstream); si += 3;
192 uint32_t year = PackBits(si, 4, bitstream); si += 4;
193 uint32_t quarter = PackBits(si, 2, bitstream); si += 2;
194 uint32_t lotid = PackBits(si, 12, bitstream); si += 12;
195 uint32_t wafer = PackBits(si, 5, bitstream); si += 5;
196 uint32_t dw = PackBits(si, 15, bitstream);
197
198 PrintAndLog("");
199 PrintAndLog("-- T55xx Trace Information ----------------------------------");
200 PrintAndLog("-------------------------------------------------------------");
201 PrintAndLog(" ACL Allocation class (ISO/IEC 15963-1) : 0x%02X (%d)", acl, acl);
202 PrintAndLog(" MFC Manufacturer ID (ISO/IEC 7816-6) : 0x%02X (%d)", mfc, mfc);
203 PrintAndLog(" CID : 0x%02X (%d)", cid, cid);
204 PrintAndLog(" ICR IC Revision : %d",icr );
205 PrintAndLog(" Manufactured");
206 PrintAndLog(" Year/Quarter : %d/%d",2000+year, quarter );
207 PrintAndLog(" Lot ID : %d", lotid );
208 PrintAndLog(" Wafer number : %d", wafer);
209 PrintAndLog(" Die Number : %d", dw);
210 PrintAndLog("-------------------------------------------------------------");
211 PrintAndLog(" Raw Data - Page 1");
212 PrintAndLog(" Block 0 : 0x%08X %s", bl0, sprint_bin(bitstream+5,32) );
213 PrintAndLog(" Block 0 : 0x%08X %s", bl1, sprint_bin(bitstream+37,32) );
214 PrintAndLog("-------------------------------------------------------------");
215 /*
216 TRACE - BLOCK O
217 Bits Definition HEX
218 1-8 ACL Allocation class (ISO/IEC 15963-1) 0xE0
219 9-16 MFC Manufacturer ID (ISO/IEC 7816-6) 0x15 Atmel Corporation
220 17-21 CID 0x1 = Atmel ATA5577M1 0x2 = Atmel ATA5577M2
221 22-24 ICR IC revision
222 25-28 YEAR (BCD encoded) 9 (= 2009)
223 29-30 QUARTER 1,2,3,4
224 31-32 LOT ID
225
226 TRACE - BLOCK 1
227 1-12 LOT ID
228 13-17 Wafer number
229 18-32 DW, die number sequential
230 */
231
232 return 0;
233 }
234
235 int CmdInfo(const char *Cmd){
236 /*
237 Page 0 Block 0 Configuration data.
238 Normal mode
239 Extended mode
240 */
241 char cmdp = param_getchar(Cmd, 0);
242
243 if (strlen(Cmd) > 1 || cmdp == 'h' || cmdp == 'H') {
244 PrintAndLog("Usage: lf t55xx info [use data from Graphbuffer]");
245 PrintAndLog(" [use data from Graphbuffer], if not set, try reading data from tag.");
246 PrintAndLog("");
247 PrintAndLog(" sample: lf t55xx info");
248 PrintAndLog(" sample: lf t55xx info 1");
249 return 0;
250 }
251
252 if ( strlen(Cmd)==0){
253 CmdReadBlk("0");
254 }
255
256 uint8_t bits[1000] = {0x00};
257 uint8_t * bitstream = bits;
258
259 manchester_decode(GraphBuffer, LF_TRACE_BUFF_SIZE, bitstream);
260
261 uint8_t si = 5;
262 uint32_t bl0 = PackBits(si, 32, bitstream);
263
264 uint32_t safer = PackBits(si, 4, bitstream); si += 4;
265 uint32_t resv = PackBits(si, 7, bitstream); si += 7;
266 uint32_t dbr = PackBits(si, 3, bitstream); si += 3;
267 uint32_t extend = PackBits(si, 1, bitstream); si += 1;
268 uint32_t datamodulation = PackBits(si, 5, bitstream); si += 5;
269 uint32_t pskcf = PackBits(si, 2, bitstream); si += 2;
270 uint32_t aor = PackBits(si, 1, bitstream); si += 1;
271 uint32_t otp = PackBits(si, 1, bitstream); si += 1;
272 uint32_t maxblk = PackBits(si, 3, bitstream); si += 3;
273 uint32_t pwd = PackBits(si, 1, bitstream); si += 1;
274 uint32_t sst = PackBits(si, 1, bitstream); si += 1;
275 uint32_t fw = PackBits(si, 1, bitstream); si += 1;
276 uint32_t inv = PackBits(si, 1, bitstream); si += 1;
277 uint32_t por = PackBits(si, 1, bitstream); si += 1;
278
279 PrintAndLog("");
280 PrintAndLog("-- T55xx Configuration --------------------------------------");
281 PrintAndLog("-------------------------------------------------------------");
282 PrintAndLog(" Safer key : %s", GetSaferStr(safer));
283 PrintAndLog(" reserved : %d", resv);
284 PrintAndLog(" Data bit rate : %s", GetBitRateStr(dbr));
285 PrintAndLog(" eXtended mode : %s", (extend) ? "Yes - Warning":"No");
286 PrintAndLog(" Modulation : %s", GetModulationStr(datamodulation) );
287 PrintAndLog(" PSK clock freq : %d", pskcf);
288 PrintAndLog(" AOR - Answer on Request : %s", (aor) ? "Yes":"No");
289 PrintAndLog(" OTP - One Time Pad : %s", (otp) ? "Yes - Warning":"No" );
290 PrintAndLog(" Max block : %d", maxblk);
291 PrintAndLog(" Password mode : %s", (pwd) ? "Yes":"No");
292 PrintAndLog(" Sequence Start Terminator : %s", (sst) ? "Yes":"No");
293 PrintAndLog(" Fast Write : %s", (fw) ? "Yes":"No");
294 PrintAndLog(" Inverse data : %s", (inv) ? "Yes":"No");
295 PrintAndLog(" POR-Delay : %s", (por) ? "Yes":"No");
296 PrintAndLog("-------------------------------------------------------------");
297 PrintAndLog(" Raw Data - Page 0");
298 PrintAndLog(" Block 0 : 0x%08X %s", bl0, sprint_bin(bitstream+5,32) );
299 PrintAndLog("-------------------------------------------------------------");
300
301 return 0;
302 }
303
304 int CmdDump(const char *Cmd){
305
306 char cmdp = param_getchar(Cmd, 0);
307 char s[20];
308 uint8_t pwd[4] = {0x00};
309
310 if (strlen(Cmd)>1 || cmdp == 'h' || cmdp == 'H') {
311 PrintAndLog("Usage: lf t55xx dump <password>");
312 PrintAndLog(" sample: lf t55xx dump FFFFFFFF");
313 return 0;
314 }
315
316 bool hasPwd = ( strlen(Cmd) > 0);
317
318 if ( hasPwd ){
319 if (param_gethex(Cmd, 0, pwd, 4)) {
320 PrintAndLog("password must include 4 HEX symbols");
321 return 0;
322 }
323 }
324
325 for ( int i = 0; i <8; ++i){
326 *s = 0;
327 if ( hasPwd ) {
328 sprintf(s,"%d %d", i, pwd);
329 CmdReadBlkPWD(s);
330 } else {
331 sprintf(s,"%d", i);
332 CmdReadBlk(s);
333 }
334 }
335 return 0;
336 }
337
338 int CmdIceFsk(const char *Cmd){
339 iceFsk3(GraphBuffer, LF_TRACE_BUFF_SIZE);
340 RepaintGraphWindow();
341 return 0;
342 }
343 int CmdIceManchester(const char *Cmd){
344 ManchesterDemod( -1);
345 return 0;
346 }
347 int ManchesterDemod(int block){
348
349 int blockNum = -1;
350 uint8_t sizebyte = 32;
351 uint8_t offset = 5;
352 uint32_t blockData;
353 uint8_t bits[1000] = {0x00};
354 uint8_t * bitstream = bits;
355
356 manchester_decode(GraphBuffer, LF_TRACE_BUFF_SIZE, bitstream);
357 blockData = PackBits(offset, sizebyte, bitstream);
358
359 if ( blockNum < 0)
360 PrintAndLog(" Decoded : 0x%08X %s", blockData, sprint_bin(bitstream+offset,sizebyte) );
361 else
362 PrintAndLog(" Block %d : 0x%08X %s", blockNum, blockData, sprint_bin(bitstream+offset,sizebyte) );
363
364 return 0;
365 }
366
367 char * GetBitRateStr(uint32_t id){
368 static char buf[40];
369 char *retStr = buf;
370 switch (id){
371 case 0:
372 sprintf(retStr,"%d - RF/8",id);
373 break;
374 case 1:
375 sprintf(retStr,"%d - RF/16",id);
376 break;
377 case 2:
378 sprintf(retStr,"%d - RF/32",id);
379 break;
380 case 3:
381 sprintf(retStr,"%d - RF/40",id);
382 break;
383 case 4:
384 sprintf(retStr,"%d - RF/50",id);
385 break;
386 case 5:
387 sprintf(retStr,"%d - RF/64",id);
388 break;
389 case 6:
390 sprintf(retStr,"%d - RF/100",id);
391 break;
392 case 7:
393 sprintf(retStr,"%d - RF/128",id);
394 break;
395 default:
396 sprintf(retStr,"%d - (Unknown)",id);
397 break;
398 }
399
400 return buf;
401 }
402
403 char * GetSaferStr(uint32_t id){
404 static char buf[40];
405 char *retStr = buf;
406
407 sprintf(retStr,"%d",id);
408 if (id == 6) {
409 sprintf(retStr,"%d - pasdwd",id);
410 }
411 if (id == 9 ){
412 sprintf(retStr,"%d - testmode ",id);
413 }
414
415 return buf;
416 }
417 char * GetModulationStr( uint32_t id){
418 static char buf[40];
419 char *retStr = buf;
420
421 switch (id){
422 case 0:
423 sprintf(retStr,"%d - DIRECT (ASK/NRZ)",id);
424 break;
425 case 1:
426 sprintf(retStr,"%d - PSK 1 phase change when input changes",id);
427 break;
428 case 2:
429 sprintf(retStr,"%d - PSK 2 phase change on bitclk if input high",id);
430 break;
431 case 3:
432 sprintf(retStr,"%d - PSK 3 phase change on rising edge of input",id);
433 break;
434 case 4:
435 sprintf(retStr,"%d - FSK 1 RF/8 RF/5",id);
436 break;
437 case 5:
438 sprintf(retStr,"%d - FSK 2 RF/8 RF/10",id);
439 break;
440 case 6:
441 sprintf(retStr,"%d - FSK 1a RF/5 RF/8",id);
442 break;
443 case 7:
444 sprintf(retStr,"%d - FSK 2a RF/10 RF/8",id);
445 break;
446 case 8:
447 sprintf(retStr,"%d - Manschester",id);
448 break;
449 case 16:
450 sprintf(retStr,"%d - Biphase",id);
451 break;
452 case 17:
453 sprintf(retStr,"%d - Reserved",id);
454 break;
455 default:
456 sprintf(retStr,"0x%02X (Unknown)",id);
457 break;
458 }
459 return buf;
460 }
461
462
463 uint32_t PackBits(uint8_t start, uint8_t len, uint8_t* bits){
464
465 int i = start;
466 int j = len-1;
467 uint32_t tmp = 0;
468 for (; j >= 0; --j, ++i){
469 tmp |= bits[i] << j;
470 }
471 return tmp;
472 }
473
474 static command_t CommandTable[] =
475 {
476 {"help", CmdHelp, 1, "This help"},
477 {"rd", CmdReadBlk, 0, "<block> -- Read T55xx block data (page 0)"},
478 {"rdpwd", CmdReadBlkPWD, 0, "<block> <password> -- Read T55xx block data with password mode"},
479 {"wr", CmdWriteBlk, 0, "<data> <block> -- Write T55xx block data (page 0)"},
480 {"wrpwd", CmdWriteBlkPWD, 0, "<data> <block> <password> -- Write T55xx block data with password"},
481 {"trace", CmdReadTrace, 0, "[1] Read T55xx traceability data (page 1 / blk 0-1) "},
482 {"info", CmdInfo, 0, "[1] Read T55xx configuration data (page0 /blk 0)"},
483 {"dump", CmdDump, 0, "[password] Dump T55xx card block 0-7. optional with password"},
484 {"fsk", CmdIceFsk, 0, "FSK demod"},
485 {"man", CmdIceManchester, 0, "Manchester demod (with SST)"},
486 {NULL, NULL, 0, NULL}
487 };
488
489 int CmdLFT55XX(const char *Cmd)
490 {
491 CmdsParse(CommandTable, Cmd);
492 return 0;
493 }
494
495 int CmdHelp(const char *Cmd)
496 {
497 CmdsHelp(CommandTable);
498 return 0;
499 }
Proxmark3 GIT tracking
Impressum, Datenschutz