]> cvs.zerfleddert.de Git - proxmark3-svn/blob - common/lfdemod.c
iclass Write doMAC_N - rename variables to correct descriptions.
[proxmark3-svn] / common / lfdemod.c
1 //-----------------------------------------------------------------------------
2 // Copyright (C) 2014
3 //
4 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
5 // at your option, any later version. See the LICENSE.txt file for the text of
6 // the license.
7 //-----------------------------------------------------------------------------
8 // Low frequency demod/decode commands
9 //-----------------------------------------------------------------------------
10
11 #include <stdlib.h>
12 #include <string.h>
13 #include "lfdemod.h"
14 uint8_t justNoise(uint8_t *BitStream, size_t size)
15 {
16 static const uint8_t THRESHOLD = 123;
17 //test samples are not just noise
18 uint8_t justNoise1 = 1;
19 for(size_t idx=0; idx < size && justNoise1 ;idx++){
20 justNoise1 = BitStream[idx] < THRESHOLD;
21 }
22 return justNoise1;
23 }
24
25 //by marshmellow
26 //get high and low values of a wave with passed in fuzz factor. also return noise test = 1 for passed or 0 for only noise
27 int getHiLo(uint8_t *BitStream, size_t size, int *high, int *low, uint8_t fuzzHi, uint8_t fuzzLo)
28 {
29 *high=0;
30 *low=255;
31 // get high and low thresholds
32 for (size_t i=0; i < size; i++){
33 if (BitStream[i] > *high) *high = BitStream[i];
34 if (BitStream[i] < *low) *low = BitStream[i];
35 }
36 if (*high < 123) return -1; // just noise
37 *high = ((*high-128)*fuzzHi + 12800)/100;
38 *low = ((*low-128)*fuzzLo + 12800)/100;
39 return 1;
40 }
41
42 // by marshmellow
43 // pass bits to be tested in bits, length bits passed in bitLen, and parity type (even=0 | odd=1) in pType
44 // returns 1 if passed
45 uint8_t parityTest(uint32_t bits, uint8_t bitLen, uint8_t pType)
46 {
47 uint8_t ans = 0;
48 for (uint8_t i = 0; i < bitLen; i++){
49 ans ^= ((bits >> i) & 1);
50 }
51 //PrintAndLog("DEBUG: ans: %d, ptype: %d",ans,pType);
52 return (ans == pType);
53 }
54
55 //by marshmellow
56 //search for given preamble in given BitStream and return success=1 or fail=0 and startIndex and length
57 uint8_t preambleSearch(uint8_t *BitStream, uint8_t *preamble, size_t pLen, size_t *size, size_t *startIdx)
58 {
59 uint8_t foundCnt=0;
60 for (int idx=0; idx < *size - pLen; idx++){
61 if (memcmp(BitStream+idx, preamble, pLen) == 0){
62 //first index found
63 foundCnt++;
64 if (foundCnt == 1){
65 *startIdx = idx;
66 }
67 if (foundCnt == 2){
68 *size = idx - *startIdx;
69 return 1;
70 }
71 }
72 }
73 return 0;
74 }
75
76 //by marshmellow
77 //takes 1s and 0s and searches for EM410x format - output EM ID
78 uint8_t Em410xDecode(uint8_t *BitStream, size_t *size, size_t *startIdx, uint32_t *hi, uint64_t *lo)
79 {
80 //no arguments needed - built this way in case we want this to be a direct call from "data " cmds in the future
81 // otherwise could be a void with no arguments
82 //set defaults
83 uint32_t i = 0;
84 if (BitStream[1]>1) return 0; //allow only 1s and 0s
85
86 // 111111111 bit pattern represent start of frame
87 // include 0 in front to help get start pos
88 uint8_t preamble[] = {0,1,1,1,1,1,1,1,1,1};
89 uint32_t idx = 0;
90 uint32_t parityBits = 0;
91 uint8_t errChk = 0;
92 uint8_t FmtLen = 10;
93 *startIdx = 0;
94 errChk = preambleSearch(BitStream, preamble, sizeof(preamble), size, startIdx);
95 if (errChk == 0 || *size < 64) return 0;
96 if (*size > 64) FmtLen = 22;
97 *startIdx += 1; //get rid of 0 from preamble
98 idx = *startIdx + 9;
99 for (i=0; i<FmtLen; i++){ //loop through 10 or 22 sets of 5 bits (50-10p = 40 bits or 88 bits)
100 parityBits = bytebits_to_byte(BitStream+(i*5)+idx,5);
101 //check even parity - quit if failed
102 if (parityTest(parityBits, 5, 0) == 0) return 0;
103 //set uint64 with ID from BitStream
104 for (uint8_t ii=0; ii<4; ii++){
105 *hi = (*hi << 1) | (*lo >> 63);
106 *lo = (*lo << 1) | (BitStream[(i*5)+ii+idx]);
107 }
108 }
109 if (errChk != 0) return 1;
110 //skip last 5 bit parity test for simplicity.
111 // *size = 64 | 128;
112 return 0;
113 }
114
115 //by marshmellow
116 //demodulates strong heavily clipped samples
117 int cleanAskRawDemod(uint8_t *BinStream, size_t *size, int clk, int invert, int high, int low)
118 {
119 size_t bitCnt=0, smplCnt=0, errCnt=0;
120 uint8_t waveHigh = 0;
121 for (size_t i=0; i < *size; i++){
122 if (BinStream[i] >= high && waveHigh){
123 smplCnt++;
124 } else if (BinStream[i] <= low && !waveHigh){
125 smplCnt++;
126 } else { //transition
127 if ((BinStream[i] >= high && !waveHigh) || (BinStream[i] <= low && waveHigh)){
128 if (smplCnt > clk-(clk/4)-1) { //full clock
129 if (smplCnt > clk + (clk/4)+1) { //too many samples
130 errCnt++;
131 BinStream[bitCnt++]=7;
132 } else if (waveHigh) {
133 BinStream[bitCnt++] = invert;
134 BinStream[bitCnt++] = invert;
135 } else if (!waveHigh) {
136 BinStream[bitCnt++] = invert ^ 1;
137 BinStream[bitCnt++] = invert ^ 1;
138 }
139 waveHigh ^= 1;
140 smplCnt = 0;
141 } else if (smplCnt > (clk/2) - (clk/4)-1) {
142 if (waveHigh) {
143 BinStream[bitCnt++] = invert;
144 } else if (!waveHigh) {
145 BinStream[bitCnt++] = invert ^ 1;
146 }
147 waveHigh ^= 1;
148 smplCnt = 0;
149 } else if (!bitCnt) {
150 //first bit
151 waveHigh = (BinStream[i] >= high);
152 smplCnt = 1;
153 } else {
154 smplCnt++;
155 //transition bit oops
156 }
157 } else { //haven't hit new high or new low yet
158 smplCnt++;
159 }
160 }
161 }
162 *size = bitCnt;
163 return errCnt;
164 }
165
166 //by marshmellow
167 void askAmp(uint8_t *BitStream, size_t size)
168 {
169 for(size_t i = 1; i<size; i++){
170 if (BitStream[i]-BitStream[i-1]>=30) //large jump up
171 BitStream[i]=127;
172 else if(BitStream[i]-BitStream[i-1]<=-20) //large jump down
173 BitStream[i]=-127;
174 }
175 return;
176 }
177
178 //by marshmellow
179 //attempts to demodulate ask modulations, askType == 0 for ask/raw, askType==1 for ask/manchester
180 int askdemod(uint8_t *BinStream, size_t *size, int *clk, int *invert, int maxErr, uint8_t amp, uint8_t askType)
181 {
182 if (*size==0) return -1;
183 int start = DetectASKClock(BinStream, *size, clk, maxErr); //clock default
184 if (*clk==0 || start < 0) return -3;
185 if (*invert != 1) *invert = 0;
186 if (amp==1) askAmp(BinStream, *size);
187
188 uint8_t initLoopMax = 255;
189 if (initLoopMax > *size) initLoopMax = *size;
190 // Detect high and lows
191 //25% clip in case highs and lows aren't clipped [marshmellow]
192 int high, low;
193 if (getHiLo(BinStream, initLoopMax, &high, &low, 75, 75) < 1)
194 return -2; //just noise
195
196 size_t errCnt = 0;
197 // if clean clipped waves detected run alternate demod
198 if (DetectCleanAskWave(BinStream, *size, high, low)) {
199 errCnt = cleanAskRawDemod(BinStream, size, *clk, *invert, high, low);
200 if (askType) //askman
201 return manrawdecode(BinStream, size, 0);
202 else //askraw
203 return errCnt;
204 }
205
206 int lastBit; //set first clock check - can go negative
207 size_t i, bitnum = 0; //output counter
208 uint8_t midBit = 0;
209 uint8_t tol = 0; //clock tolerance adjust - waves will be accepted as within the clock if they fall + or - this value + clock from last valid wave
210 if (*clk <= 32) tol = 1; //clock tolerance may not be needed anymore currently set to + or - 1 but could be increased for poor waves or removed entirely
211 size_t MaxBits = 1024;
212 lastBit = start - *clk;
213
214 for (i = start; i < *size; ++i) {
215 if (i-lastBit >= *clk-tol){
216 if (BinStream[i] >= high) {
217 BinStream[bitnum++] = *invert;
218 } else if (BinStream[i] <= low) {
219 BinStream[bitnum++] = *invert ^ 1;
220 } else if (i-lastBit >= *clk+tol) {
221 if (bitnum > 0) {
222 BinStream[bitnum++]=7;
223 errCnt++;
224 }
225 } else { //in tolerance - looking for peak
226 continue;
227 }
228 midBit = 0;
229 lastBit += *clk;
230 } else if (i-lastBit >= (*clk/2-tol) && !midBit && !askType){
231 if (BinStream[i] >= high) {
232 BinStream[bitnum++] = *invert;
233 } else if (BinStream[i] <= low) {
234 BinStream[bitnum++] = *invert ^ 1;
235 } else if (i-lastBit >= *clk/2+tol) {
236 BinStream[bitnum] = BinStream[bitnum-1];
237 bitnum++;
238 } else { //in tolerance - looking for peak
239 continue;
240 }
241 midBit = 1;
242 }
243 if (bitnum >= MaxBits) break;
244 }
245 *size = bitnum;
246 return errCnt;
247 }
248
249 //by marshmellow
250 //take 10 and 01 and manchester decode
251 //run through 2 times and take least errCnt
252 int manrawdecode(uint8_t * BitStream, size_t *size, uint8_t invert)
253 {
254 uint16_t bitnum=0, MaxBits = 512, errCnt = 0;
255 size_t i, ii;
256 uint16_t bestErr = 1000, bestRun = 0;
257 if (*size < 16) return -1;
258 //find correct start position [alignment]
259 for (ii=0;ii<2;++ii){
260 for (i=ii; i<*size-3; i+=2)
261 if (BitStream[i]==BitStream[i+1])
262 errCnt++;
263
264 if (bestErr>errCnt){
265 bestErr=errCnt;
266 bestRun=ii;
267 }
268 errCnt=0;
269 }
270 //decode
271 for (i=bestRun; i < *size-3; i+=2){
272 if(BitStream[i] == 1 && (BitStream[i+1] == 0)){
273 BitStream[bitnum++]=invert;
274 } else if((BitStream[i] == 0) && BitStream[i+1] == 1){
275 BitStream[bitnum++]=invert^1;
276 } else {
277 BitStream[bitnum++]=7;
278 }
279 if(bitnum>MaxBits) break;
280 }
281 *size=bitnum;
282 return bestErr;
283 }
284
285 //by marshmellow
286 //encode binary data into binary manchester
287 int ManchesterEncode(uint8_t *BitStream, size_t size)
288 {
289 size_t modIdx=20000, i=0;
290 if (size>modIdx) return -1;
291 for (size_t idx=0; idx < size; idx++){
292 BitStream[idx+modIdx++] = BitStream[idx];
293 BitStream[idx+modIdx++] = BitStream[idx]^1;
294 }
295 for (; i<(size*2); i++){
296 BitStream[i] = BitStream[i+20000];
297 }
298 return i;
299 }
300
301 //by marshmellow
302 //take 01 or 10 = 1 and 11 or 00 = 0
303 //check for phase errors - should never have 111 or 000 should be 01001011 or 10110100 for 1010
304 //decodes biphase or if inverted it is AKA conditional dephase encoding AKA differential manchester encoding
305 int BiphaseRawDecode(uint8_t *BitStream, size_t *size, int offset, int invert)
306 {
307 uint16_t bitnum = 0;
308 uint16_t errCnt = 0;
309 size_t i = offset;
310 uint16_t MaxBits=512;
311 //if not enough samples - error
312 if (*size < 51) return -1;
313 //check for phase change faults - skip one sample if faulty
314 uint8_t offsetA = 1, offsetB = 1;
315 for (; i<48; i+=2){
316 if (BitStream[i+1]==BitStream[i+2]) offsetA=0;
317 if (BitStream[i+2]==BitStream[i+3]) offsetB=0;
318 }
319 if (!offsetA && offsetB) offset++;
320 for (i=offset; i<*size-3; i+=2){
321 //check for phase error
322 if (BitStream[i+1]==BitStream[i+2]) {
323 BitStream[bitnum++]=7;
324 errCnt++;
325 }
326 if((BitStream[i]==1 && BitStream[i+1]==0) || (BitStream[i]==0 && BitStream[i+1]==1)){
327 BitStream[bitnum++]=1^invert;
328 } else if((BitStream[i]==0 && BitStream[i+1]==0) || (BitStream[i]==1 && BitStream[i+1]==1)){
329 BitStream[bitnum++]=invert;
330 } else {
331 BitStream[bitnum++]=7;
332 errCnt++;
333 }
334 if(bitnum>MaxBits) break;
335 }
336 *size=bitnum;
337 return errCnt;
338 }
339
340 // by marshmellow
341 // demod gProxIIDemod
342 // error returns as -x
343 // success returns start position in BitStream
344 // BitStream must contain previously askrawdemod and biphasedemoded data
345 int gProxII_Demod(uint8_t BitStream[], size_t *size)
346 {
347 size_t startIdx=0;
348 uint8_t preamble[] = {1,1,1,1,1,0};
349
350 uint8_t errChk = preambleSearch(BitStream, preamble, sizeof(preamble), size, &startIdx);
351 if (errChk == 0) return -3; //preamble not found
352 if (*size != 96) return -2; //should have found 96 bits
353 //check first 6 spacer bits to verify format
354 if (!BitStream[startIdx+5] && !BitStream[startIdx+10] && !BitStream[startIdx+15] && !BitStream[startIdx+20] && !BitStream[startIdx+25] && !BitStream[startIdx+30]){
355 //confirmed proper separator bits found
356 //return start position
357 return (int) startIdx;
358 }
359 return -5;
360 }
361
362 //translate wave to 11111100000 (1 for each short wave 0 for each long wave)
363 size_t fsk_wave_demod(uint8_t * dest, size_t size, uint8_t fchigh, uint8_t fclow)
364 {
365 size_t last_transition = 0;
366 size_t idx = 1;
367 //uint32_t maxVal=0;
368 if (fchigh==0) fchigh=10;
369 if (fclow==0) fclow=8;
370 //set the threshold close to 0 (graph) or 128 std to avoid static
371 uint8_t threshold_value = 123;
372
373 // sync to first lo-hi transition, and threshold
374
375 // Need to threshold first sample
376
377 if(dest[0] < threshold_value) dest[0] = 0;
378 else dest[0] = 1;
379
380 size_t numBits = 0;
381 // count cycles between consecutive lo-hi transitions, there should be either 8 (fc/8)
382 // or 10 (fc/10) cycles but in practice due to noise etc we may end up with with anywhere
383 // between 7 to 11 cycles so fuzz it by treat anything <9 as 8 and anything else as 10
384 for(idx = 1; idx < size; idx++) {
385 // threshold current value
386
387 if (dest[idx] < threshold_value) dest[idx] = 0;
388 else dest[idx] = 1;
389
390 // Check for 0->1 transition
391 if (dest[idx-1] < dest[idx]) { // 0 -> 1 transition
392 if ((idx-last_transition)<(fclow-2)){ //0-5 = garbage noise
393 //do nothing with extra garbage
394 } else if ((idx-last_transition) < (fchigh-1)) { //6-8 = 8 waves
395 dest[numBits++]=1;
396 } else if ((idx-last_transition) > (fchigh+1) && !numBits) { //12 + and first bit = garbage
397 //do nothing with beginning garbage
398 } else { //9+ = 10 waves
399 dest[numBits++]=0;
400 }
401 last_transition = idx;
402 }
403 }
404 return numBits; //Actually, it returns the number of bytes, but each byte represents a bit: 1 or 0
405 }
406
407 //translate 11111100000 to 10
408 size_t aggregate_bits(uint8_t *dest, size_t size, uint8_t rfLen,
409 uint8_t invert, uint8_t fchigh, uint8_t fclow)
410 {
411 uint8_t lastval=dest[0];
412 size_t idx=0;
413 size_t numBits=0;
414 uint32_t n=1;
415 for( idx=1; idx < size; idx++) {
416 n++;
417 if (dest[idx]==lastval) continue;
418
419 //if lastval was 1, we have a 1->0 crossing
420 if (dest[idx-1]==1) {
421 if (!numBits && n < rfLen/fclow) {
422 n=0;
423 lastval = dest[idx];
424 continue;
425 }
426 n = (n * fclow + rfLen/2) / rfLen;
427 } else {// 0->1 crossing
428 //test first bitsample too small
429 if (!numBits && n < rfLen/fchigh) {
430 n=0;
431 lastval = dest[idx];
432 continue;
433 }
434 n = (n * fchigh + rfLen/2) / rfLen;
435 }
436 if (n == 0) n = 1;
437
438 memset(dest+numBits, dest[idx-1]^invert , n);
439 numBits += n;
440 n=0;
441 lastval=dest[idx];
442 }//end for
443 // if valid extra bits at the end were all the same frequency - add them in
444 if (n > rfLen/fchigh) {
445 if (dest[idx-2]==1) {
446 n = (n * fclow + rfLen/2) / rfLen;
447 } else {
448 n = (n * fchigh + rfLen/2) / rfLen;
449 }
450 memset(dest+numBits, dest[idx-1]^invert , n);
451 numBits += n;
452 }
453 return numBits;
454 }
455 //by marshmellow (from holiman's base)
456 // full fsk demod from GraphBuffer wave to decoded 1s and 0s (no mandemod)
457 int fskdemod(uint8_t *dest, size_t size, uint8_t rfLen, uint8_t invert, uint8_t fchigh, uint8_t fclow)
458 {
459 // FSK demodulator
460 size = fsk_wave_demod(dest, size, fchigh, fclow);
461 size = aggregate_bits(dest, size, rfLen, invert, fchigh, fclow);
462 return size;
463 }
464
465 // loop to get raw HID waveform then FSK demodulate the TAG ID from it
466 int HIDdemodFSK(uint8_t *dest, size_t *size, uint32_t *hi2, uint32_t *hi, uint32_t *lo)
467 {
468 if (justNoise(dest, *size)) return -1;
469
470 size_t numStart=0, size2=*size, startIdx=0;
471 // FSK demodulator
472 *size = fskdemod(dest, size2,50,1,10,8); //fsk2a
473 if (*size < 96*2) return -2;
474 // 00011101 bit pattern represent start of frame, 01 pattern represents a 0 and 10 represents a 1
475 uint8_t preamble[] = {0,0,0,1,1,1,0,1};
476 // find bitstring in array
477 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
478 if (errChk == 0) return -3; //preamble not found
479
480 numStart = startIdx + sizeof(preamble);
481 // final loop, go over previously decoded FSK data and manchester decode into usable tag ID
482 for (size_t idx = numStart; (idx-numStart) < *size - sizeof(preamble); idx+=2){
483 if (dest[idx] == dest[idx+1]){
484 return -4; //not manchester data
485 }
486 *hi2 = (*hi2<<1)|(*hi>>31);
487 *hi = (*hi<<1)|(*lo>>31);
488 //Then, shift in a 0 or one into low
489 if (dest[idx] && !dest[idx+1]) // 1 0
490 *lo=(*lo<<1)|1;
491 else // 0 1
492 *lo=(*lo<<1)|0;
493 }
494 return (int)startIdx;
495 }
496
497 // loop to get raw paradox waveform then FSK demodulate the TAG ID from it
498 int ParadoxdemodFSK(uint8_t *dest, size_t *size, uint32_t *hi2, uint32_t *hi, uint32_t *lo)
499 {
500 if (justNoise(dest, *size)) return -1;
501
502 size_t numStart=0, size2=*size, startIdx=0;
503 // FSK demodulator
504 *size = fskdemod(dest, size2,50,1,10,8); //fsk2a
505 if (*size < 96) return -2;
506
507 // 00001111 bit pattern represent start of frame, 01 pattern represents a 0 and 10 represents a 1
508 uint8_t preamble[] = {0,0,0,0,1,1,1,1};
509
510 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
511 if (errChk == 0) return -3; //preamble not found
512
513 numStart = startIdx + sizeof(preamble);
514 // final loop, go over previously decoded FSK data and manchester decode into usable tag ID
515 for (size_t idx = numStart; (idx-numStart) < *size - sizeof(preamble); idx+=2){
516 if (dest[idx] == dest[idx+1])
517 return -4; //not manchester data
518 *hi2 = (*hi2<<1)|(*hi>>31);
519 *hi = (*hi<<1)|(*lo>>31);
520 //Then, shift in a 0 or one into low
521 if (dest[idx] && !dest[idx+1]) // 1 0
522 *lo=(*lo<<1)|1;
523 else // 0 1
524 *lo=(*lo<<1)|0;
525 }
526 return (int)startIdx;
527 }
528
529 uint32_t bytebits_to_byte(uint8_t *src, size_t numbits)
530 {
531 uint32_t num = 0;
532 for(int i = 0 ; i < numbits ; i++)
533 {
534 num = (num << 1) | (*src);
535 src++;
536 }
537 return num;
538 }
539
540 //least significant bit first
541 uint32_t bytebits_to_byteLSBF(uint8_t *src, size_t numbits)
542 {
543 uint32_t num = 0;
544 for(int i = 0 ; i < numbits ; i++)
545 {
546 num = (num << 1) | *(src + (numbits-(i+1)));
547 }
548 return num;
549 }
550
551 int IOdemodFSK(uint8_t *dest, size_t size)
552 {
553 if (justNoise(dest, size)) return -1;
554 //make sure buffer has data
555 if (size < 66*64) return -2;
556 // FSK demodulator
557 size = fskdemod(dest, size, 64, 1, 10, 8); // FSK2a RF/64
558 if (size < 65) return -3; //did we get a good demod?
559 //Index map
560 //0 10 20 30 40 50 60
561 //| | | | | | |
562 //01234567 8 90123456 7 89012345 6 78901234 5 67890123 4 56789012 3 45678901 23
563 //-----------------------------------------------------------------------------
564 //00000000 0 11110000 1 facility 1 version* 1 code*one 1 code*two 1 ???????? 11
565 //
566 //XSF(version)facility:codeone+codetwo
567 //Handle the data
568 size_t startIdx = 0;
569 uint8_t preamble[] = {0,0,0,0,0,0,0,0,0,1};
570 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), &size, &startIdx);
571 if (errChk == 0) return -4; //preamble not found
572
573 if (!dest[startIdx+8] && dest[startIdx+17]==1 && dest[startIdx+26]==1 && dest[startIdx+35]==1 && dest[startIdx+44]==1 && dest[startIdx+53]==1){
574 //confirmed proper separator bits found
575 //return start position
576 return (int) startIdx;
577 }
578 return -5;
579 }
580
581 // by marshmellow
582 // takes a array of binary values, start position, length of bits per parity (includes parity bit),
583 // Parity Type (1 for odd; 0 for even; 2 Always 1's), and binary Length (length to run)
584 size_t removeParity(uint8_t *BitStream, size_t startIdx, uint8_t pLen, uint8_t pType, size_t bLen)
585 {
586 uint32_t parityWd = 0;
587 size_t j = 0, bitCnt = 0;
588 for (int word = 0; word < (bLen); word+=pLen){
589 for (int bit=0; bit < pLen; bit++){
590 parityWd = (parityWd << 1) | BitStream[startIdx+word+bit];
591 BitStream[j++] = (BitStream[startIdx+word+bit]);
592 }
593 j--; // overwrite parity with next data
594 // if parity fails then return 0
595 if (pType == 2) { // then marker bit which should be a 1
596 if (!BitStream[j]) return 0;
597 } else {
598 if (parityTest(parityWd, pLen, pType) == 0) return 0;
599 }
600 bitCnt+=(pLen-1);
601 parityWd = 0;
602 }
603 // if we got here then all the parities passed
604 //return ID start index and size
605 return bitCnt;
606 }
607
608 // Ask/Biphase Demod then try to locate an ISO 11784/85 ID
609 // BitStream must contain previously askrawdemod and biphasedemoded data
610 int FDXBdemodBI(uint8_t *dest, size_t *size)
611 {
612 //make sure buffer has enough data
613 if (*size < 128) return -1;
614
615 size_t startIdx = 0;
616 uint8_t preamble[] = {0,0,0,0,0,0,0,0,0,0,1};
617
618 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
619 if (errChk == 0) return -2; //preamble not found
620 return (int)startIdx;
621 }
622
623 // by marshmellow
624 // FSK Demod then try to locate an AWID ID
625 int AWIDdemodFSK(uint8_t *dest, size_t *size)
626 {
627 //make sure buffer has enough data
628 if (*size < 96*50) return -1;
629
630 if (justNoise(dest, *size)) return -2;
631
632 // FSK demodulator
633 *size = fskdemod(dest, *size, 50, 1, 10, 8); // fsk2a RF/50
634 if (*size < 96) return -3; //did we get a good demod?
635
636 uint8_t preamble[] = {0,0,0,0,0,0,0,1};
637 size_t startIdx = 0;
638 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
639 if (errChk == 0) return -4; //preamble not found
640 if (*size != 96) return -5;
641 return (int)startIdx;
642 }
643
644 // by marshmellow
645 // FSK Demod then try to locate an Farpointe Data (pyramid) ID
646 int PyramiddemodFSK(uint8_t *dest, size_t *size)
647 {
648 //make sure buffer has data
649 if (*size < 128*50) return -5;
650
651 //test samples are not just noise
652 if (justNoise(dest, *size)) return -1;
653
654 // FSK demodulator
655 *size = fskdemod(dest, *size, 50, 1, 10, 8); // fsk2a RF/50
656 if (*size < 128) return -2; //did we get a good demod?
657
658 uint8_t preamble[] = {0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1};
659 size_t startIdx = 0;
660 uint8_t errChk = preambleSearch(dest, preamble, sizeof(preamble), size, &startIdx);
661 if (errChk == 0) return -4; //preamble not found
662 if (*size != 128) return -3;
663 return (int)startIdx;
664 }
665
666 // by marshmellow
667 // to detect a wave that has heavily clipped (clean) samples
668 uint8_t DetectCleanAskWave(uint8_t dest[], size_t size, uint8_t high, uint8_t low)
669 {
670 uint16_t allPeaks=1;
671 uint16_t cntPeaks=0;
672 size_t loopEnd = 512+60;
673 if (loopEnd > size) loopEnd = size;
674 for (size_t i=60; i<loopEnd; i++){
675 if (dest[i]>low && dest[i]<high)
676 allPeaks=0;
677 else
678 cntPeaks++;
679 }
680 if (allPeaks == 0){
681 if (cntPeaks > 300) return 1;
682 }
683 return allPeaks;
684 }
685
686 // by marshmellow
687 // to help detect clocks on heavily clipped samples
688 // based on count of low to low
689 int DetectStrongAskClock(uint8_t dest[], size_t size, uint8_t high, uint8_t low)
690 {
691 uint8_t fndClk[] = {8,16,32,40,50,64,128};
692 size_t startwave;
693 size_t i = 0;
694 size_t minClk = 255;
695 // get to first full low to prime loop and skip incomplete first pulse
696 while ((dest[i] < high) && (i < size))
697 ++i;
698 while ((dest[i] > low) && (i < size))
699 ++i;
700
701 // loop through all samples
702 while (i < size) {
703 // measure from low to low
704 while ((dest[i] > low) && (i < size))
705 ++i;
706 startwave= i;
707 while ((dest[i] < high) && (i < size))
708 ++i;
709 while ((dest[i] > low) && (i < size))
710 ++i;
711 //get minimum measured distance
712 if (i-startwave < minClk && i < size)
713 minClk = i - startwave;
714 }
715 // set clock
716 for (uint8_t clkCnt = 0; clkCnt<7; clkCnt++) {
717 if (minClk >= fndClk[clkCnt]-(fndClk[clkCnt]/8) && minClk <= fndClk[clkCnt]+1)
718 return fndClk[clkCnt];
719 }
720 return 0;
721 }
722
723 // by marshmellow
724 // not perfect especially with lower clocks or VERY good antennas (heavy wave clipping)
725 // maybe somehow adjust peak trimming value based on samples to fix?
726 // return start index of best starting position for that clock and return clock (by reference)
727 int DetectASKClock(uint8_t dest[], size_t size, int *clock, int maxErr)
728 {
729 size_t i=1;
730 uint8_t clk[] = {255,8,16,32,40,50,64,100,128,255};
731 uint8_t clkEnd = 9;
732 uint8_t loopCnt = 255; //don't need to loop through entire array...
733 if (size <= loopCnt) return -1; //not enough samples
734
735 //if we already have a valid clock
736 uint8_t clockFnd=0;
737 for (;i<clkEnd;++i)
738 if (clk[i] == *clock) clockFnd = i;
739 //clock found but continue to find best startpos
740
741 //get high and low peak
742 int peak, low;
743 if (getHiLo(dest, loopCnt, &peak, &low, 75, 75) < 1) return -1;
744
745 //test for large clean peaks
746 if (!clockFnd){
747 if (DetectCleanAskWave(dest, size, peak, low)==1){
748 int ans = DetectStrongAskClock(dest, size, peak, low);
749 for (i=clkEnd-1; i>0; i--){
750 if (clk[i] == ans) {
751 *clock = ans;
752 //clockFnd = i;
753 return 0; // for strong waves i don't use the 'best start position' yet...
754 //break; //clock found but continue to find best startpos [not yet]
755 }
756 }
757 }
758 }
759
760 uint8_t ii;
761 uint8_t clkCnt, tol = 0;
762 uint16_t bestErr[]={1000,1000,1000,1000,1000,1000,1000,1000,1000};
763 uint8_t bestStart[]={0,0,0,0,0,0,0,0,0};
764 size_t errCnt = 0;
765 size_t arrLoc, loopEnd;
766
767 if (clockFnd>0) {
768 clkCnt = clockFnd;
769 clkEnd = clockFnd+1;
770 }
771 else clkCnt=1;
772
773 //test each valid clock from smallest to greatest to see which lines up
774 for(; clkCnt < clkEnd; clkCnt++){
775 if (clk[clkCnt] <= 32){
776 tol=1;
777 }else{
778 tol=0;
779 }
780 //if no errors allowed - keep start within the first clock
781 if (!maxErr && size > clk[clkCnt]*2 + tol && clk[clkCnt]<128) loopCnt=clk[clkCnt]*2;
782 bestErr[clkCnt]=1000;
783 //try lining up the peaks by moving starting point (try first few clocks)
784 for (ii=0; ii < loopCnt; ii++){
785 if (dest[ii] < peak && dest[ii] > low) continue;
786
787 errCnt=0;
788 // now that we have the first one lined up test rest of wave array
789 loopEnd = ((size-ii-tol) / clk[clkCnt]) - 1;
790 for (i=0; i < loopEnd; ++i){
791 arrLoc = ii + (i * clk[clkCnt]);
792 if (dest[arrLoc] >= peak || dest[arrLoc] <= low){
793 }else if (dest[arrLoc-tol] >= peak || dest[arrLoc-tol] <= low){
794 }else if (dest[arrLoc+tol] >= peak || dest[arrLoc+tol] <= low){
795 }else{ //error no peak detected
796 errCnt++;
797 }
798 }
799 //if we found no errors then we can stop here and a low clock (common clocks)
800 // this is correct one - return this clock
801 //PrintAndLog("DEBUG: clk %d, err %d, ii %d, i %d",clk[clkCnt],errCnt,ii,i);
802 if(errCnt==0 && clkCnt<7) {
803 if (!clockFnd) *clock = clk[clkCnt];
804 return ii;
805 }
806 //if we found errors see if it is lowest so far and save it as best run
807 if(errCnt<bestErr[clkCnt]){
808 bestErr[clkCnt]=errCnt;
809 bestStart[clkCnt]=ii;
810 }
811 }
812 }
813 uint8_t iii;
814 uint8_t best=0;
815 for (iii=1; iii<clkEnd; ++iii){
816 if (bestErr[iii] < bestErr[best]){
817 if (bestErr[iii] == 0) bestErr[iii]=1;
818 // current best bit to error ratio vs new bit to error ratio
819 if ( (size/clk[best])/bestErr[best] < (size/clk[iii])/bestErr[iii] ){
820 best = iii;
821 }
822 }
823 }
824 //if (bestErr[best] > maxErr) return -1;
825 if (!clockFnd) *clock = clk[best];
826 return bestStart[best];
827 }
828
829 //by marshmellow
830 //detect psk clock by reading each phase shift
831 // a phase shift is determined by measuring the sample length of each wave
832 int DetectPSKClock(uint8_t dest[], size_t size, int clock)
833 {
834 uint8_t clk[]={255,16,32,40,50,64,100,128,255}; //255 is not a valid clock
835 uint16_t loopCnt = 4096; //don't need to loop through entire array...
836 if (size == 0) return 0;
837 if (size<loopCnt) loopCnt = size;
838
839 //if we already have a valid clock quit
840 size_t i=1;
841 for (; i < 8; ++i)
842 if (clk[i] == clock) return clock;
843
844 size_t waveStart=0, waveEnd=0, firstFullWave=0, lastClkBit=0;
845 uint8_t clkCnt, fc=0, fullWaveLen=0, tol=1;
846 uint16_t peakcnt=0, errCnt=0, waveLenCnt=0;
847 uint16_t bestErr[]={1000,1000,1000,1000,1000,1000,1000,1000,1000};
848 uint16_t peaksdet[]={0,0,0,0,0,0,0,0,0};
849 fc = countFC(dest, size, 0);
850 if (fc!=2 && fc!=4 && fc!=8) return -1;
851 //PrintAndLog("DEBUG: FC: %d",fc);
852
853 //find first full wave
854 for (i=0; i<loopCnt; i++){
855 if (dest[i] < dest[i+1] && dest[i+1] >= dest[i+2]){
856 if (waveStart == 0) {
857 waveStart = i+1;
858 //PrintAndLog("DEBUG: waveStart: %d",waveStart);
859 } else {
860 waveEnd = i+1;
861 //PrintAndLog("DEBUG: waveEnd: %d",waveEnd);
862 waveLenCnt = waveEnd-waveStart;
863 if (waveLenCnt > fc){
864 firstFullWave = waveStart;
865 fullWaveLen=waveLenCnt;
866 break;
867 }
868 waveStart=0;
869 }
870 }
871 }
872 //PrintAndLog("DEBUG: firstFullWave: %d, waveLen: %d",firstFullWave,fullWaveLen);
873
874 //test each valid clock from greatest to smallest to see which lines up
875 for(clkCnt=7; clkCnt >= 1 ; clkCnt--){
876 lastClkBit = firstFullWave; //set end of wave as clock align
877 waveStart = 0;
878 errCnt=0;
879 peakcnt=0;
880 //PrintAndLog("DEBUG: clk: %d, lastClkBit: %d",clk[clkCnt],lastClkBit);
881
882 for (i = firstFullWave+fullWaveLen-1; i < loopCnt-2; i++){
883 //top edge of wave = start of new wave
884 if (dest[i] < dest[i+1] && dest[i+1] >= dest[i+2]){
885 if (waveStart == 0) {
886 waveStart = i+1;
887 waveLenCnt=0;
888 } else { //waveEnd
889 waveEnd = i+1;
890 waveLenCnt = waveEnd-waveStart;
891 if (waveLenCnt > fc){
892 //if this wave is a phase shift
893 //PrintAndLog("DEBUG: phase shift at: %d, len: %d, nextClk: %d, ii: %d, fc: %d",waveStart,waveLenCnt,lastClkBit+clk[clkCnt]-tol,ii+1,fc);
894 if (i+1 >= lastClkBit + clk[clkCnt] - tol){ //should be a clock bit
895 peakcnt++;
896 lastClkBit+=clk[clkCnt];
897 } else if (i<lastClkBit+8){
898 //noise after a phase shift - ignore
899 } else { //phase shift before supposed to based on clock
900 errCnt++;
901 }
902 } else if (i+1 > lastClkBit + clk[clkCnt] + tol + fc){
903 lastClkBit+=clk[clkCnt]; //no phase shift but clock bit
904 }
905 waveStart=i+1;
906 }
907 }
908 }
909 if (errCnt == 0){
910 return clk[clkCnt];
911 }
912 if (errCnt <= bestErr[clkCnt]) bestErr[clkCnt]=errCnt;
913 if (peakcnt > peaksdet[clkCnt]) peaksdet[clkCnt]=peakcnt;
914 }
915 //all tested with errors
916 //return the highest clk with the most peaks found
917 uint8_t best=7;
918 for (i=7; i>=1; i--){
919 if (peaksdet[i] > peaksdet[best]) {
920 best = i;
921 }
922 //PrintAndLog("DEBUG: Clk: %d, peaks: %d, errs: %d, bestClk: %d",clk[iii],peaksdet[iii],bestErr[iii],clk[best]);
923 }
924 return clk[best];
925 }
926
927 //by marshmellow
928 //detect nrz clock by reading #peaks vs no peaks(or errors)
929 int DetectNRZClock(uint8_t dest[], size_t size, int clock)
930 {
931 size_t i=0;
932 uint8_t clk[]={8,16,32,40,50,64,100,128,255};
933 size_t loopCnt = 4096; //don't need to loop through entire array...
934 if (size == 0) return 0;
935 if (size<loopCnt) loopCnt = size;
936
937 //if we already have a valid clock quit
938 for (; i < 8; ++i)
939 if (clk[i] == clock) return clock;
940
941 //get high and low peak
942 int peak, low;
943 if (getHiLo(dest, loopCnt, &peak, &low, 75, 75) < 1) return 0;
944
945 //PrintAndLog("DEBUG: peak: %d, low: %d",peak,low);
946 size_t ii;
947 uint8_t clkCnt;
948 uint8_t tol = 0;
949 uint16_t peakcnt=0;
950 uint16_t peaksdet[]={0,0,0,0,0,0,0,0};
951 uint16_t maxPeak=0;
952 //test for large clipped waves
953 for (i=0; i<loopCnt; i++){
954 if (dest[i] >= peak || dest[i] <= low){
955 peakcnt++;
956 } else {
957 if (peakcnt>0 && maxPeak < peakcnt){
958 maxPeak = peakcnt;
959 }
960 peakcnt=0;
961 }
962 }
963 peakcnt=0;
964 //test each valid clock from smallest to greatest to see which lines up
965 for(clkCnt=0; clkCnt < 8; ++clkCnt){
966 //ignore clocks smaller than largest peak
967 if (clk[clkCnt]<maxPeak) continue;
968
969 //try lining up the peaks by moving starting point (try first 256)
970 for (ii=0; ii< loopCnt; ++ii){
971 if ((dest[ii] >= peak) || (dest[ii] <= low)){
972 peakcnt=0;
973 // now that we have the first one lined up test rest of wave array
974 for (i=0; i < ((int)((size-ii-tol)/clk[clkCnt])-1); ++i){
975 if (dest[ii+(i*clk[clkCnt])]>=peak || dest[ii+(i*clk[clkCnt])]<=low){
976 peakcnt++;
977 }
978 }
979 if(peakcnt>peaksdet[clkCnt]) {
980 peaksdet[clkCnt]=peakcnt;
981 }
982 }
983 }
984 }
985 int iii=7;
986 uint8_t best=0;
987 for (iii=7; iii > 0; iii--){
988 if (peaksdet[iii] > peaksdet[best]){
989 best = iii;
990 }
991 //PrintAndLog("DEBUG: Clk: %d, peaks: %d, errs: %d, bestClk: %d",clk[iii],peaksdet[iii],bestErr[iii],clk[best]);
992 }
993 return clk[best];
994 }
995
996 // by marshmellow
997 // convert psk1 demod to psk2 demod
998 // only transition waves are 1s
999 void psk1TOpsk2(uint8_t *BitStream, size_t size)
1000 {
1001 size_t i=1;
1002 uint8_t lastBit=BitStream[0];
1003 for (; i<size; i++){
1004 if (BitStream[i]==7){
1005 //ignore errors
1006 } else if (lastBit!=BitStream[i]){
1007 lastBit=BitStream[i];
1008 BitStream[i]=1;
1009 } else {
1010 BitStream[i]=0;
1011 }
1012 }
1013 return;
1014 }
1015
1016 // by marshmellow
1017 // convert psk2 demod to psk1 demod
1018 // from only transition waves are 1s to phase shifts change bit
1019 void psk2TOpsk1(uint8_t *BitStream, size_t size)
1020 {
1021 uint8_t phase=0;
1022 for (size_t i=0; i<size; i++){
1023 if (BitStream[i]==1){
1024 phase ^=1;
1025 }
1026 BitStream[i]=phase;
1027 }
1028 return;
1029 }
1030
1031 // redesigned by marshmellow adjusted from existing decode functions
1032 // indala id decoding - only tested on 26 bit tags, but attempted to make it work for more
1033 int indala26decode(uint8_t *bitStream, size_t *size, uint8_t *invert)
1034 {
1035 //26 bit 40134 format (don't know other formats)
1036 int i;
1037 int long_wait=29;//29 leading zeros in format
1038 int start;
1039 int first = 0;
1040 int first2 = 0;
1041 int bitCnt = 0;
1042 int ii;
1043 // Finding the start of a UID
1044 for (start = 0; start <= *size - 250; start++) {
1045 first = bitStream[start];
1046 for (i = start; i < start + long_wait; i++) {
1047 if (bitStream[i] != first) {
1048 break;
1049 }
1050 }
1051 if (i == (start + long_wait)) {
1052 break;
1053 }
1054 }
1055 if (start == *size - 250 + 1) {
1056 // did not find start sequence
1057 return -1;
1058 }
1059 // Inverting signal if needed
1060 if (first == 1) {
1061 for (i = start; i < *size; i++) {
1062 bitStream[i] = !bitStream[i];
1063 }
1064 *invert = 1;
1065 }else *invert=0;
1066
1067 int iii;
1068 //found start once now test length by finding next one
1069 for (ii=start+29; ii <= *size - 250; ii++) {
1070 first2 = bitStream[ii];
1071 for (iii = ii; iii < ii + long_wait; iii++) {
1072 if (bitStream[iii] != first2) {
1073 break;
1074 }
1075 }
1076 if (iii == (ii + long_wait)) {
1077 break;
1078 }
1079 }
1080 if (ii== *size - 250 + 1){
1081 // did not find second start sequence
1082 return -2;
1083 }
1084 bitCnt=ii-start;
1085
1086 // Dumping UID
1087 i = start;
1088 for (ii = 0; ii < bitCnt; ii++) {
1089 bitStream[ii] = bitStream[i++];
1090 }
1091 *size=bitCnt;
1092 return 1;
1093 }
1094
1095 // by marshmellow - demodulate NRZ wave (both similar enough)
1096 // peaks invert bit (high=1 low=0) each clock cycle = 1 bit determined by last peak
1097 // there probably is a much simpler way to do this....
1098 int nrzRawDemod(uint8_t *dest, size_t *size, int *clk, int *invert, int maxErr)
1099 {
1100 if (justNoise(dest, *size)) return -1;
1101 *clk = DetectNRZClock(dest, *size, *clk);
1102 if (*clk==0) return -2;
1103 size_t i, gLen = 4096;
1104 if (gLen>*size) gLen = *size;
1105 int high, low;
1106 if (getHiLo(dest, gLen, &high, &low, 75, 75) < 1) return -3; //25% fuzz on high 25% fuzz on low
1107 int lastBit = 0; //set first clock check
1108 size_t iii = 0, bitnum = 0; //bitnum counter
1109 uint16_t errCnt = 0, MaxBits = 1000;
1110 size_t bestErrCnt = maxErr+1;
1111 size_t bestPeakCnt = 0, bestPeakStart = 0;
1112 uint8_t bestFirstPeakHigh=0, firstPeakHigh=0, curBit=0, bitHigh=0, errBitHigh=0;
1113 uint8_t tol = 1; //clock tolerance adjust - waves will be accepted as within the clock if they fall + or - this value + clock from last valid wave
1114 uint16_t peakCnt=0;
1115 uint8_t ignoreWindow=4;
1116 uint8_t ignoreCnt=ignoreWindow; //in case of noise near peak
1117 //loop to find first wave that works - align to clock
1118 for (iii=0; iii < gLen; ++iii){
1119 if ((dest[iii]>=high) || (dest[iii]<=low)){
1120 if (dest[iii]>=high) firstPeakHigh=1;
1121 else firstPeakHigh=0;
1122 lastBit=iii-*clk;
1123 peakCnt=0;
1124 errCnt=0;
1125 //loop through to see if this start location works
1126 for (i = iii; i < *size; ++i) {
1127 // if we are at a clock bit
1128 if ((i >= lastBit + *clk - tol) && (i <= lastBit + *clk + tol)) {
1129 //test high/low
1130 if (dest[i] >= high || dest[i] <= low) {
1131 bitHigh = 1;
1132 peakCnt++;
1133 errBitHigh = 0;
1134 ignoreCnt = ignoreWindow;
1135 lastBit += *clk;
1136 } else if (i == lastBit + *clk + tol) {
1137 lastBit += *clk;
1138 }
1139 //else if no bars found
1140 } else if (dest[i] < high && dest[i] > low){
1141 if (ignoreCnt==0){
1142 bitHigh=0;
1143 if (errBitHigh==1) errCnt++;
1144 errBitHigh=0;
1145 } else {
1146 ignoreCnt--;
1147 }
1148 } else if ((dest[i]>=high || dest[i]<=low) && (bitHigh==0)) {
1149 //error bar found no clock...
1150 errBitHigh=1;
1151 }
1152 if (((i-iii) / *clk)>=MaxBits) break;
1153 }
1154 //we got more than 64 good bits and not all errors
1155 if (((i-iii) / *clk) > 64 && (errCnt <= (maxErr))) {
1156 //possible good read
1157 if (!errCnt || peakCnt > bestPeakCnt){
1158 bestFirstPeakHigh=firstPeakHigh;
1159 bestErrCnt = errCnt;
1160 bestPeakCnt = peakCnt;
1161 bestPeakStart = iii;
1162 if (!errCnt) break; //great read - finish
1163 }
1164 }
1165 }
1166 }
1167 //PrintAndLog("DEBUG: bestErrCnt: %d, maxErr: %d, bestStart: %d, bestPeakCnt: %d, bestPeakStart: %d",bestErrCnt,maxErr,bestStart,bestPeakCnt,bestPeakStart);
1168 if (bestErrCnt > maxErr) return bestErrCnt;
1169
1170 //best run is good enough set to best run and set overwrite BinStream
1171 lastBit = bestPeakStart - *clk;
1172 memset(dest, bestFirstPeakHigh^1, bestPeakStart / *clk);
1173 bitnum += (bestPeakStart / *clk);
1174 for (i = bestPeakStart; i < *size; ++i) {
1175 // if expecting a clock bit
1176 if ((i >= lastBit + *clk - tol) && (i <= lastBit + *clk + tol)) {
1177 // test high/low
1178 if (dest[i] >= high || dest[i] <= low) {
1179 peakCnt++;
1180 bitHigh = 1;
1181 errBitHigh = 0;
1182 ignoreCnt = ignoreWindow;
1183 curBit = *invert;
1184 if (dest[i] >= high) curBit ^= 1;
1185 dest[bitnum++] = curBit;
1186 lastBit += *clk;
1187 //else no bars found in clock area
1188 } else if (i == lastBit + *clk + tol) {
1189 dest[bitnum++] = curBit;
1190 lastBit += *clk;
1191 }
1192 //else if no bars found
1193 } else if (dest[i] < high && dest[i] > low){
1194 if (ignoreCnt == 0){
1195 bitHigh = 0;
1196 if (errBitHigh == 1){
1197 dest[bitnum++] = 7;
1198 errCnt++;
1199 }
1200 errBitHigh=0;
1201 } else {
1202 ignoreCnt--;
1203 }
1204 } else if ((dest[i] >= high || dest[i] <= low) && (bitHigh == 0)) {
1205 //error bar found no clock...
1206 errBitHigh=1;
1207 }
1208 if (bitnum >= MaxBits) break;
1209 }
1210 *size = bitnum;
1211 return bestErrCnt;
1212 }
1213
1214 //by marshmellow
1215 //detects the bit clock for FSK given the high and low Field Clocks
1216 uint8_t detectFSKClk(uint8_t *BitStream, size_t size, uint8_t fcHigh, uint8_t fcLow)
1217 {
1218 uint8_t clk[] = {8,16,32,40,50,64,100,128,0};
1219 uint16_t rfLens[] = {0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0};
1220 uint8_t rfCnts[] = {0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0};
1221 uint8_t rfLensFnd = 0;
1222 uint8_t lastFCcnt = 0;
1223 uint16_t fcCounter = 0;
1224 uint16_t rfCounter = 0;
1225 uint8_t firstBitFnd = 0;
1226 size_t i;
1227 if (size == 0) return 0;
1228
1229 uint8_t fcTol = (uint8_t)(0.5+(float)(fcHigh-fcLow)/2);
1230 rfLensFnd=0;
1231 fcCounter=0;
1232 rfCounter=0;
1233 firstBitFnd=0;
1234 //PrintAndLog("DEBUG: fcTol: %d",fcTol);
1235 // prime i to first up transition
1236 for (i = 1; i < size-1; i++)
1237 if (BitStream[i] > BitStream[i-1] && BitStream[i]>=BitStream[i+1])
1238 break;
1239
1240 for (; i < size-1; i++){
1241 fcCounter++;
1242 rfCounter++;
1243
1244 if (BitStream[i] <= BitStream[i-1] || BitStream[i] < BitStream[i+1])
1245 continue;
1246 // else new peak
1247 // if we got less than the small fc + tolerance then set it to the small fc
1248 if (fcCounter < fcLow+fcTol)
1249 fcCounter = fcLow;
1250 else //set it to the large fc
1251 fcCounter = fcHigh;
1252
1253 //look for bit clock (rf/xx)
1254 if ((fcCounter < lastFCcnt || fcCounter > lastFCcnt)){
1255 //not the same size as the last wave - start of new bit sequence
1256 if (firstBitFnd > 1){ //skip first wave change - probably not a complete bit
1257 for (int ii=0; ii<15; ii++){
1258 if (rfLens[ii] == rfCounter){
1259 rfCnts[ii]++;
1260 rfCounter = 0;
1261 break;
1262 }
1263 }
1264 if (rfCounter > 0 && rfLensFnd < 15){
1265 //PrintAndLog("DEBUG: rfCntr %d, fcCntr %d",rfCounter,fcCounter);
1266 rfCnts[rfLensFnd]++;
1267 rfLens[rfLensFnd++] = rfCounter;
1268 }
1269 } else {
1270 firstBitFnd++;
1271 }
1272 rfCounter=0;
1273 lastFCcnt=fcCounter;
1274 }
1275 fcCounter=0;
1276 }
1277 uint8_t rfHighest=15, rfHighest2=15, rfHighest3=15;
1278
1279 for (i=0; i<15; i++){
1280 //PrintAndLog("DEBUG: RF %d, cnts %d",rfLens[i], rfCnts[i]);
1281 //get highest 2 RF values (might need to get more values to compare or compare all?)
1282 if (rfCnts[i]>rfCnts[rfHighest]){
1283 rfHighest3=rfHighest2;
1284 rfHighest2=rfHighest;
1285 rfHighest=i;
1286 } else if(rfCnts[i]>rfCnts[rfHighest2]){
1287 rfHighest3=rfHighest2;
1288 rfHighest2=i;
1289 } else if(rfCnts[i]>rfCnts[rfHighest3]){
1290 rfHighest3=i;
1291 }
1292 }
1293 // set allowed clock remainder tolerance to be 1 large field clock length+1
1294 // we could have mistakenly made a 9 a 10 instead of an 8 or visa versa so rfLens could be 1 FC off
1295 uint8_t tol1 = fcHigh+1;
1296
1297 //PrintAndLog("DEBUG: hightest: 1 %d, 2 %d, 3 %d",rfLens[rfHighest],rfLens[rfHighest2],rfLens[rfHighest3]);
1298
1299 // loop to find the highest clock that has a remainder less than the tolerance
1300 // compare samples counted divided by
1301 int ii=7;
1302 for (; ii>=0; ii--){
1303 if (rfLens[rfHighest] % clk[ii] < tol1 || rfLens[rfHighest] % clk[ii] > clk[ii]-tol1){
1304 if (rfLens[rfHighest2] % clk[ii] < tol1 || rfLens[rfHighest2] % clk[ii] > clk[ii]-tol1){
1305 if (rfLens[rfHighest3] % clk[ii] < tol1 || rfLens[rfHighest3] % clk[ii] > clk[ii]-tol1){
1306 break;
1307 }
1308 }
1309 }
1310 }
1311
1312 if (ii<0) return 0; // oops we went too far
1313
1314 return clk[ii];
1315 }
1316
1317 //by marshmellow
1318 //countFC is to detect the field clock lengths.
1319 //counts and returns the 2 most common wave lengths
1320 //mainly used for FSK field clock detection
1321 uint16_t countFC(uint8_t *BitStream, size_t size, uint8_t fskAdj)
1322 {
1323 uint8_t fcLens[] = {0,0,0,0,0,0,0,0,0,0};
1324 uint16_t fcCnts[] = {0,0,0,0,0,0,0,0,0,0};
1325 uint8_t fcLensFnd = 0;
1326 uint8_t lastFCcnt=0;
1327 uint8_t fcCounter = 0;
1328 size_t i;
1329 if (size == 0) return 0;
1330
1331 // prime i to first up transition
1332 for (i = 1; i < size-1; i++)
1333 if (BitStream[i] > BitStream[i-1] && BitStream[i] >= BitStream[i+1])
1334 break;
1335
1336 for (; i < size-1; i++){
1337 if (BitStream[i] > BitStream[i-1] && BitStream[i] >= BitStream[i+1]){
1338 // new up transition
1339 fcCounter++;
1340 if (fskAdj){
1341 //if we had 5 and now have 9 then go back to 8 (for when we get a fc 9 instead of an 8)
1342 if (lastFCcnt==5 && fcCounter==9) fcCounter--;
1343 //if fc=9 or 4 add one (for when we get a fc 9 instead of 10 or a 4 instead of a 5)
1344 if ((fcCounter==9) || fcCounter==4) fcCounter++;
1345 // save last field clock count (fc/xx)
1346 lastFCcnt = fcCounter;
1347 }
1348 // find which fcLens to save it to:
1349 for (int ii=0; ii<10; ii++){
1350 if (fcLens[ii]==fcCounter){
1351 fcCnts[ii]++;
1352 fcCounter=0;
1353 break;
1354 }
1355 }
1356 if (fcCounter>0 && fcLensFnd<10){
1357 //add new fc length
1358 fcCnts[fcLensFnd]++;
1359 fcLens[fcLensFnd++]=fcCounter;
1360 }
1361 fcCounter=0;
1362 } else {
1363 // count sample
1364 fcCounter++;
1365 }
1366 }
1367
1368 uint8_t best1=9, best2=9, best3=9;
1369 uint16_t maxCnt1=0;
1370 // go through fclens and find which ones are bigest 2
1371 for (i=0; i<10; i++){
1372 // PrintAndLog("DEBUG: FC %d, Cnt %d, Errs %d",fcLens[i],fcCnts[i],errCnt);
1373 // get the 3 best FC values
1374 if (fcCnts[i]>maxCnt1) {
1375 best3=best2;
1376 best2=best1;
1377 maxCnt1=fcCnts[i];
1378 best1=i;
1379 } else if(fcCnts[i]>fcCnts[best2]){
1380 best3=best2;
1381 best2=i;
1382 } else if(fcCnts[i]>fcCnts[best3]){
1383 best3=i;
1384 }
1385 }
1386 uint8_t fcH=0, fcL=0;
1387 if (fcLens[best1]>fcLens[best2]){
1388 fcH=fcLens[best1];
1389 fcL=fcLens[best2];
1390 } else{
1391 fcH=fcLens[best2];
1392 fcL=fcLens[best1];
1393 }
1394
1395 // TODO: take top 3 answers and compare to known Field clocks to get top 2
1396
1397 uint16_t fcs = (((uint16_t)fcH)<<8) | fcL;
1398 // PrintAndLog("DEBUG: Best %d best2 %d best3 %d",fcLens[best1],fcLens[best2],fcLens[best3]);
1399 if (fskAdj) return fcs;
1400 return fcLens[best1];
1401 }
1402
1403 //by marshmellow - demodulate PSK1 wave
1404 //uses wave lengths (# Samples)
1405 int pskRawDemod(uint8_t dest[], size_t *size, int *clock, int *invert)
1406 {
1407 if (size == 0) return -1;
1408 uint16_t loopCnt = 4096; //don't need to loop through entire array...
1409 if (*size<loopCnt) loopCnt = *size;
1410
1411 uint8_t curPhase = *invert;
1412 size_t i, waveStart=1, waveEnd=0, firstFullWave=0, lastClkBit=0;
1413 uint8_t fc=0, fullWaveLen=0, tol=1;
1414 uint16_t errCnt=0, waveLenCnt=0;
1415 fc = countFC(dest, *size, 0);
1416 if (fc!=2 && fc!=4 && fc!=8) return -1;
1417 //PrintAndLog("DEBUG: FC: %d",fc);
1418 *clock = DetectPSKClock(dest, *size, *clock);
1419 if (*clock == 0) return -1;
1420 int avgWaveVal=0, lastAvgWaveVal=0;
1421 //find first phase shift
1422 for (i=0; i<loopCnt; i++){
1423 if (dest[i]+fc < dest[i+1] && dest[i+1] >= dest[i+2]){
1424 waveEnd = i+1;
1425 //PrintAndLog("DEBUG: waveEnd: %d",waveEnd);
1426 waveLenCnt = waveEnd-waveStart;
1427 if (waveLenCnt > fc && waveStart > fc){ //not first peak and is a large wave
1428 lastAvgWaveVal = avgWaveVal/(waveLenCnt);
1429 firstFullWave = waveStart;
1430 fullWaveLen=waveLenCnt;
1431 //if average wave value is > graph 0 then it is an up wave or a 1
1432 if (lastAvgWaveVal > 123) curPhase ^= 1; //fudge graph 0 a little 123 vs 128
1433 break;
1434 }
1435 waveStart = i+1;
1436 avgWaveVal = 0;
1437 }
1438 avgWaveVal += dest[i+2];
1439 }
1440 //PrintAndLog("DEBUG: firstFullWave: %d, waveLen: %d",firstFullWave,fullWaveLen);
1441 lastClkBit = firstFullWave; //set start of wave as clock align
1442 //PrintAndLog("DEBUG: clk: %d, lastClkBit: %d", *clock, lastClkBit);
1443 waveStart = 0;
1444 size_t numBits=0;
1445 //set skipped bits
1446 memset(dest, curPhase^1, firstFullWave / *clock);
1447 numBits += (firstFullWave / *clock);
1448 dest[numBits++] = curPhase; //set first read bit
1449 for (i = firstFullWave + fullWaveLen - 1; i < *size-3; i++){
1450 //top edge of wave = start of new wave
1451 if (dest[i]+fc < dest[i+1] && dest[i+1] >= dest[i+2]){
1452 if (waveStart == 0) {
1453 waveStart = i+1;
1454 waveLenCnt = 0;
1455 avgWaveVal = dest[i+1];
1456 } else { //waveEnd
1457 waveEnd = i+1;
1458 waveLenCnt = waveEnd-waveStart;
1459 lastAvgWaveVal = avgWaveVal/waveLenCnt;
1460 if (waveLenCnt > fc){
1461 //PrintAndLog("DEBUG: avgWaveVal: %d, waveSum: %d",lastAvgWaveVal,avgWaveVal);
1462 //this wave is a phase shift
1463 //PrintAndLog("DEBUG: phase shift at: %d, len: %d, nextClk: %d, i: %d, fc: %d",waveStart,waveLenCnt,lastClkBit+*clock-tol,i+1,fc);
1464 if (i+1 >= lastClkBit + *clock - tol){ //should be a clock bit
1465 curPhase ^= 1;
1466 dest[numBits++] = curPhase;
1467 lastClkBit += *clock;
1468 } else if (i < lastClkBit+10+fc){
1469 //noise after a phase shift - ignore
1470 } else { //phase shift before supposed to based on clock
1471 errCnt++;
1472 dest[numBits++] = 7;
1473 }
1474 } else if (i+1 > lastClkBit + *clock + tol + fc){
1475 lastClkBit += *clock; //no phase shift but clock bit
1476 dest[numBits++] = curPhase;
1477 }
1478 avgWaveVal = 0;
1479 waveStart = i+1;
1480 }
1481 }
1482 avgWaveVal += dest[i+1];
1483 }
1484 *size = numBits;
1485 return errCnt;
1486 }
Impressum, Datenschutz