]>
cvs.zerfleddert.de Git - proxmark3-svn/blob - client/cmdlffdx.c
6c0f0751a576cd5e24cdb4d56c35d42dbf469c29
1 //-----------------------------------------------------------------------------
3 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
4 // at your option, any later version. See the LICENSE.txt file for the text of
6 //-----------------------------------------------------------------------------
7 // Low frequency Presco tag commands
8 //-----------------------------------------------------------------------------
13 FDX-B ISO11784/85 demod (aka animal tag) BIPHASE, inverted, rf/32, with preamble of 00000000001 (128bits)
14 8 databits + 1 parity (1)
16 NATIONAL CODE, ICAR database
17 COUNTRY CODE (ISO3166) or http://cms.abvma.ca/uploads/ManufacturersISOsandCountryCodes.pdf
18 FLAG (animal/non-animal)
25 16 ccitt CRC chksum over 64bit ID CODE.
28 sample: 985121004515220 [ 37FF65B88EF94 ]
31 static int CmdHelp(const char *Cmd
);
33 int usage_lf_fdx_clone(void){
34 PrintAndLog("clone a FDX-B Animal tag to a T55x7 tag.");
35 PrintAndLog("Usage: lf fdx clone [h] <country id> <animal id> <Q5>");
36 PrintAndLog("Options:");
37 PrintAndLog(" h : This help");
38 PrintAndLog(" <country id> : Country id");
39 PrintAndLog(" <animal id> : Animal id");
44 PrintAndLog(" <Q5> : specify write to Q5 (t5555 instead of t55x7)");
46 PrintAndLog("Sample: lf fdx clone 999 112233");
50 int usage_lf_fdx_sim(void) {
51 PrintAndLog("Enables simulation of FDX-B Animal tag");
52 PrintAndLog("Simulation runs until the button is pressed or another USB command is issued.");
54 PrintAndLog("Usage: lf fdx sim [h] <country id> <animal id>");
55 PrintAndLog("Options:");
56 PrintAndLog(" h : This help");
57 PrintAndLog(" <country id> : Country id");
58 PrintAndLog(" <animal id> : Animal id");
60 PrintAndLog("Sample: lf fdx sim 999 112233");
63 // clearing the topbit needed for the preambl detection.
64 static void verify_values(uint32_t countryid
, uint64_t animalid
){
65 if ((animalid
& 0x3FFFFFFFFF) != animalid
) {
66 animalid
&= 0x3FFFFFFFFF;
67 PrintAndLog("Animal ID Truncated to 38bits: %"PRIx64
, animalid
);
69 if ( (countryid
& 0x3ff) != countryid
) {
71 PrintAndLog("Country ID Truncated to 10bits: %03d", countryid
);
75 static uint16_t getFDXchksum (uint64_t raw
){
77 num_to_bytes(raw
, 64, arr
);
78 return crc16_ccitt_kermit(arr
, 8);
81 int getFDXBits(uint64_t national_id
, uint16_t country
, uint8_t isanimal
, uint8_t isextended
, uint32_t extended
, uint8_t *bits
) {
83 // add preamble ten 0x00 and one 0x01
84 memset(bits
, 0x00, 10);
88 // every 9th bit is 0x01, but we can just fill the rest with 0x01 and overwrite
89 memset(bits
, 0x01, 128);
91 // add preamble ten 0x00 and one 0x01
92 memset(bits
, 0x00, 10);
95 num_to_bytebitsLSBF(0x00, 7, bits
+ 66);
96 num_to_bytebitsLSBF(0x00 >> 7, 7, bits
+ 74);
98 // add animal flag - OK
101 // add extended flag - OK
102 bits
[81] = isextended
;
104 // add national code 40bits - OK
105 num_to_bytebitsLSBF(national_id
>> 0, 8, bits
+11);
106 num_to_bytebitsLSBF(national_id
>> 8, 8, bits
+20);
107 num_to_bytebitsLSBF(national_id
>> 16, 8, bits
+29);
108 num_to_bytebitsLSBF(national_id
>> 24, 8, bits
+38);
109 num_to_bytebitsLSBF(national_id
>> 32, 6, bits
+47);
111 // add country code - OK
112 num_to_bytebitsLSBF(country
>> 0, 2, bits
+53);
113 num_to_bytebitsLSBF(country
>> 2, 8, bits
+56);
117 for (uint8_t i
=0; i
<8; ++i
)
118 raw
[i
] = bytebits_to_byte(bits
+ 11 + i
* 9, 8);
120 crc
= crc16_ccitt_kermit(raw
, 8);
121 num_to_bytebitsLSBF(crc
>> 0, 8, bits
+83);
122 num_to_bytebitsLSBF(crc
>> 8, 8, bits
+92);
124 // extended data - OK
125 num_to_bytebitsLSBF( extended
>> 0 , 8, bits
+101);
126 num_to_bytebitsLSBF( extended
>> 8 , 8, bits
+110);
127 num_to_bytebitsLSBF( extended
>> 16, 8, bits
+119);
131 //see ASKDemod for what args are accepted
132 //almost the same demod as cmddata.c/CmdFDXBdemodBI
133 int CmdFdxDemod(const char *Cmd
) {
135 //Differential Biphase / di-phase (inverted biphase)
136 //get binary from ask wave
137 if (!ASKbiphaseDemod("0 32 1 0", FALSE
)) {
138 if (g_debugMode
) PrintAndLog("DEBUG: Error - FDX-B ASKbiphaseDemod failed");
141 size_t size
= DemodBufferLen
;
142 int ans
= FDXBdemodBI(DemodBuffer
, &size
);
146 PrintAndLog("DEBUG: Error - FDX-B too few bits found");
148 PrintAndLog("DEBUG: Error - FDX-B preamble not found");
150 PrintAndLog("DEBUG: Error - FDX-B Size not correct: %d", size
);
152 PrintAndLog("DEBUG: Error - FDX-B ans: %d", ans
);
157 setDemodBuf(DemodBuffer
, 128, ans
);
158 // remove marker bits (1's every 9th digit after preamble) (pType = 2)
159 size
= removeParity(DemodBuffer
, 11, 9, 2, 117);
161 if (g_debugMode
) PrintAndLog("DEBUG: Error - FDX-B error removeParity: %d", size
);
166 uint64_t NationalCode
= ((uint64_t)(bytebits_to_byteLSBF(DemodBuffer
+32,6)) << 32) | bytebits_to_byteLSBF(DemodBuffer
,32);
167 uint16_t countryCode
= bytebits_to_byteLSBF(DemodBuffer
+38,10);
168 uint8_t dataBlockBit
= DemodBuffer
[48];
169 uint32_t reservedCode
= bytebits_to_byteLSBF(DemodBuffer
+49,14);
170 uint8_t animalBit
= DemodBuffer
[63];
171 uint32_t crc16
= bytebits_to_byteLSBF(DemodBuffer
+64,16);
172 uint32_t extended
= bytebits_to_byteLSBF(DemodBuffer
+80,24);
173 uint64_t rawid
= ((uint64_t)
174 //bytebits_to_byte(DemodBuffer, 8) << 96) |
175 //bytebits_to_byte(DemodBuffer,32) << 64) |
176 bytebits_to_byte(DemodBuffer
,32) << 32) |
177 bytebits_to_byte(DemodBuffer
+32, 32);
179 num_to_bytes(rawid
, 8, raw
);
181 uint16_t calcCrc
= crc16_ccitt_kermit(raw
, 8);
183 PrintAndLog("\nFDX-B / ISO 11784/5 Animal Tag ID Found: Raw : %s", sprint_hex(raw
, 8));
184 PrintAndLog("Animal ID %04u-%012llu", countryCode
, NationalCode
);
185 PrintAndLog("National Code %012llu (0x%llX)", NationalCode
, NationalCode
);
186 PrintAndLog("Country Code %04u", countryCode
);
187 PrintAndLog("Reserved/RFU %u (0x04%X)", reservedCode
, reservedCode
);
189 PrintAndLog("Animal Tag %s", animalBit
? "True" : "False");
190 PrintAndLog("Has extended data %s [0x%X]", dataBlockBit
? "True" : "False", extended
);
191 PrintAndLog("CRC-16 0x%04X - 0x%04X [%s]", crc16
, calcCrc
, (calcCrc
== crc16
) ? "Ok" : "Failed");
194 PrintAndLog("Start marker %d; Size %d", ans
, size
);
195 char *bin
= sprint_bin_break(DemodBuffer
, size
, 16);
196 PrintAndLog("DEBUG bin stream:\n%s", bin
);
201 int CmdFdxRead(const char *Cmd
) {
203 getSamples("12000", TRUE
);
204 return CmdFdxDemod(Cmd
);
207 int CmdFdxClone(const char *Cmd
) {
209 uint32_t countryid
= 0;
210 uint64_t animalid
= 0;
211 uint32_t blocks
[5] = {T55x7_MODULATION_DIPHASE
| T55x7_BITRATE_RF_32
| 4<<T55x7_MAXBLOCK_SHIFT
, 0, 0, 0, 0};
214 memset(bs
, 0, sizeof(bits
));
216 char cmdp
= param_getchar(Cmd
, 0);
217 if (strlen(Cmd
) == 0 || cmdp
== 'h' || cmdp
== 'H') return usage_lf_fdx_clone();
219 countryid
= param_get32ex(Cmd
, 0, 0, 10);
220 animalid
= param_get64ex(Cmd
, 1, 0, 10);
223 if (param_getchar(Cmd
, 1) == 'Q' || param_getchar(Cmd
, 1) == 'q') {
224 //t5555 (Q5) BITRATE = (RF-2)/2 (iceman)
225 blocks
[0] = T5555_MODULATION_BIPHASE
| T5555_INVERT_OUTPUT
| 32<<T5555_BITRATE_SHIFT
| 4<<T5555_MAXBLOCK_SHIFT
;
228 verify_values(countryid
, animalid
);
230 // getFDXBits(uint64_t national_id, uint16_t country, uint8_t isanimal, uint8_t isextended, uint32_t extended, uint8_t *bits)
231 if ( !getFDXBits(animalid
, countryid
, 1, 0, 0, bs
)) {
232 PrintAndLog("Error with tag bitstream generation.");
236 // convert from bit stream to block data
237 blocks
[1] = bytebits_to_byte(bs
,32);
238 blocks
[2] = bytebits_to_byte(bs
+32,32);
239 blocks
[3] = bytebits_to_byte(bs
+64,32);
240 blocks
[4] = bytebits_to_byte(bs
+96,32);
242 PrintAndLog("Preparing to clone FDX-B to T55x7 with animal ID: %04u-%"PRIu64
, countryid
, animalid
);
243 PrintAndLog("Blk | Data ");
244 PrintAndLog("----+------------");
245 PrintAndLog(" 00 | 0x%08x", blocks
[0]);
246 PrintAndLog(" 01 | 0x%08x", blocks
[1]);
247 PrintAndLog(" 02 | 0x%08x", blocks
[2]);
248 PrintAndLog(" 03 | 0x%08x", blocks
[3]);
249 PrintAndLog(" 04 | 0x%08x", blocks
[4]);
252 UsbCommand c
= {CMD_T55XX_WRITE_BLOCK
, {0,0,0}};
254 for (int i
= 4; i
>= 0; --i
) {
255 c
.arg
[0] = blocks
[i
];
257 clearCommandBuffer();
259 if (!WaitForResponseTimeout(CMD_ACK
, &resp
, 1000)){
260 PrintAndLog("Error occurred, device did not respond during write operation.");
267 int CmdFdxSim(const char *Cmd
) {
268 uint32_t countryid
= 0;
269 uint64_t animalid
= 0;
271 char cmdp
= param_getchar(Cmd
, 0);
272 if (strlen(Cmd
) == 0 || cmdp
== 'h' || cmdp
== 'H') return usage_lf_fdx_sim();
274 countryid
= param_get32ex(Cmd
, 0, 0, 10);
275 animalid
= param_get64ex(Cmd
, 1, 0, 10);
277 verify_values(countryid
, animalid
);
279 uint8_t clk
= 32, encoding
= 2, separator
= 0, invert
= 1;
282 arg1
= clk
<< 8 | encoding
;
283 arg2
= invert
<< 8 | separator
;
285 PrintAndLog("Simulating FDX-B animal ID: %04u-%"PRIu64
, countryid
, animalid
);
287 UsbCommand c
= {CMD_ASK_SIM_TAG
, {arg1
, arg2
, size
}};
289 //getFDXBits(uint64_t national_id, uint16_t country, uint8_t isanimal, uint8_t isextended, uint32_t extended, uint8_t *bits)
290 getFDXBits(animalid
, countryid
, 1, 0, 0, c
.d
.asBytes
);
291 clearCommandBuffer();
296 static command_t CommandTable
[] = {
297 {"help", CmdHelp
, 1, "This help"},
298 {"demod", CmdFdxDemod
,1, "Attempt extract tag data from graphbuf"},
299 {"read", CmdFdxRead
, 0, "Attempt to read and extract tag data"},
300 {"clone", CmdFdxClone
,0, "Clone animal ID tag to T55x7"},
301 {"sim", CmdFdxSim
, 0, "Animal ID tag simulator"},
302 {NULL
, NULL
, 0, NULL
}
305 int CmdLFFdx(const char *Cmd
) {
306 clearCommandBuffer();
307 CmdsParse(CommandTable
, Cmd
);
311 int CmdHelp(const char *Cmd
) {
312 CmdsHelp(CommandTable
);