]>
Commit | Line | Data |
---|---|---|
15c4dc5a | 1 | //----------------------------------------------------------------------------- |
15c4dc5a | 2 | // Jonathan Westhues, Aug 2005 |
cee5a30d | 3 | // Gerhard de Koning Gans, April 2008, May 2011 |
bd20f8f4 | 4 | // |
5 | // This code is licensed to you under the terms of the GNU GPL, version 2 or, | |
6 | // at your option, any later version. See the LICENSE.txt file for the text of | |
7 | // the license. | |
8 | //----------------------------------------------------------------------------- | |
9 | // Definitions internal to the app source. | |
15c4dc5a | 10 | //----------------------------------------------------------------------------- |
11 | ||
12 | #ifndef __APPS_H | |
13 | #define __APPS_H | |
14 | ||
f7e3ed82 | 15 | #include <stdint.h> |
16 | #include <stddef.h> | |
f38a1528 | 17 | #include <stdlib.h> |
f6c18637 | 18 | #include <sys/types.h> |
f38a1528 | 19 | #include <string.h> |
20 | #include <strings.h> | |
f38a1528 | 21 | #include "../common/crc32.h" |
117d9ec2 | 22 | #include "BigBuf.h" |
385f3987 | 23 | #include "../include/hitag2.h" |
0ec548dc | 24 | #include "../include/mifare.h" |
25 | //#include <openssl/des.h> | |
26 | //#include <openssl/aes.h> | |
27 | //#include "des.h" | |
28 | //#include "aes.h" | |
29 | #include "desfire.h" | |
30 | ||
a501c82b | 31 | |
32 | extern const uint8_t OddByteParity[256]; | |
1e262141 | 33 | extern int rsamples; // = 0; |
34 | extern int tracing; // = TRUE; | |
35 | extern uint8_t trigger; | |
15c4dc5a | 36 | |
6c1e2d95 | 37 | // This may be used (sparingly) to declare a function to be copied to |
38 | // and executed from RAM | |
39 | #define RAMFUNC __attribute((long_call, section(".ramfunc"))) | |
40 | ||
15c4dc5a | 41 | /// appmain.h |
42 | void ReadMem(int addr); | |
43 | void __attribute__((noreturn)) AppMain(void); | |
44 | void SamyRun(void); | |
45 | //void DbpIntegers(int a, int b, int c); | |
46 | void DbpString(char *str); | |
47 | void Dbprintf(const char *fmt, ...); | |
d19929cb | 48 | void Dbhexdump(int len, uint8_t *d, bool bAsci); |
15c4dc5a | 49 | |
3b692427 | 50 | // ADC Vref = 3300mV, and an (10M+1M):1M voltage divider on the HF input can measure voltages up to 36300 mV |
51 | #define MAX_ADC_HF_VOLTAGE 36300 | |
52 | // ADC Vref = 3300mV, and an (10000k+240k):240k voltage divider on the LF input can measure voltages up to 140800 mV | |
53 | #define MAX_ADC_LF_VOLTAGE 140800 | |
9ca155ba M |
54 | int AvgAdc(int ch); |
55 | ||
15c4dc5a | 56 | void ToSendStuffBit(int b); |
57 | void ToSendReset(void); | |
58 | void ListenReaderField(int limit); | |
15c4dc5a | 59 | extern int ToSendMax; |
f7e3ed82 | 60 | extern uint8_t ToSend[]; |
15c4dc5a | 61 | |
62 | /// fpga.h | |
f7e3ed82 | 63 | void FpgaSendCommand(uint16_t cmd, uint16_t v); |
64 | void FpgaWriteConfWord(uint8_t v); | |
7cc204bf | 65 | void FpgaDownloadAndGo(int bitstream_version); |
66 | int FpgaGatherBitstreamVersion(); | |
15c4dc5a | 67 | void FpgaGatherVersion(char *dst, int len); |
68 | void FpgaSetupSsc(void); | |
69 | void SetupSpi(int mode); | |
d19929cb | 70 | bool FpgaSetupSscDma(uint8_t *buf, int len); |
71 | #define FpgaDisableSscDma(void) AT91C_BASE_PDC_SSC->PDC_PTCR = AT91C_PDC_RXTDIS; | |
72 | #define FpgaEnableSscDma(void) AT91C_BASE_PDC_SSC->PDC_PTCR = AT91C_PDC_RXTEN; | |
f7e3ed82 | 73 | void SetAdcMuxFor(uint32_t whichGpio); |
15c4dc5a | 74 | |
75 | // Definitions for the FPGA commands. | |
7cc204bf | 76 | #define FPGA_CMD_SET_CONFREG (1<<12) |
77 | #define FPGA_CMD_SET_DIVISOR (2<<12) | |
3b2fee43 | 78 | #define FPGA_CMD_SET_USER_BYTE1 (3<<12) |
15c4dc5a | 79 | // Definitions for the FPGA configuration word. |
7cc204bf | 80 | // LF |
b014c96d | 81 | #define FPGA_MAJOR_MODE_LF_ADC (0<<5) |
82 | #define FPGA_MAJOR_MODE_LF_EDGE_DETECT (1<<5) | |
7cc204bf | 83 | #define FPGA_MAJOR_MODE_LF_PASSTHRU (2<<5) |
84 | // HF | |
85 | #define FPGA_MAJOR_MODE_HF_READER_TX (0<<5) | |
86 | #define FPGA_MAJOR_MODE_HF_READER_RX_XCORR (1<<5) | |
87 | #define FPGA_MAJOR_MODE_HF_SIMULATOR (2<<5) | |
88 | #define FPGA_MAJOR_MODE_HF_ISO14443A (3<<5) | |
89 | // BOTH | |
90 | #define FPGA_MAJOR_MODE_OFF (7<<5) | |
b014c96d | 91 | // Options for LF_ADC |
92 | #define FPGA_LF_ADC_READER_FIELD (1<<0) | |
d19929cb | 93 | // Options for LF_EDGE_DETECT |
3b2fee43 | 94 | #define FPGA_CMD_SET_EDGE_DETECT_THRESHOLD FPGA_CMD_SET_USER_BYTE1 |
d19929cb | 95 | #define FPGA_LF_EDGE_DETECT_READER_FIELD (1<<0) |
3b2fee43 | 96 | #define FPGA_LF_EDGE_DETECT_TOGGLE_MODE (1<<1) |
15c4dc5a | 97 | // Options for the HF reader, tx to tag |
98 | #define FPGA_HF_READER_TX_SHALLOW_MOD (1<<0) | |
99 | // Options for the HF reader, correlating against rx from tag | |
100 | #define FPGA_HF_READER_RX_XCORR_848_KHZ (1<<0) | |
101 | #define FPGA_HF_READER_RX_XCORR_SNOOP (1<<1) | |
7cc204bf | 102 | #define FPGA_HF_READER_RX_XCORR_QUARTER_FREQ (1<<2) |
15c4dc5a | 103 | // Options for the HF simulated tag, how to modulate |
104 | #define FPGA_HF_SIMULATOR_NO_MODULATION (0<<0) | |
105 | #define FPGA_HF_SIMULATOR_MODULATE_BPSK (1<<0) | |
106 | #define FPGA_HF_SIMULATOR_MODULATE_212K (2<<0) | |
83fd67ba | 107 | #define FPGA_HF_SIMULATOR_MODULATE_424K (4<<0) |
645c960f MHS |
108 | #define FPGA_HF_SIMULATOR_MODULATE_424K_8BIT 0x5//101 |
109 | ||
15c4dc5a | 110 | // Options for ISO14443A |
7cc204bf | 111 | #define FPGA_HF_ISO14443A_SNIFFER (0<<0) |
15c4dc5a | 112 | #define FPGA_HF_ISO14443A_TAGSIM_LISTEN (1<<0) |
113 | #define FPGA_HF_ISO14443A_TAGSIM_MOD (2<<0) | |
114 | #define FPGA_HF_ISO14443A_READER_LISTEN (3<<0) | |
115 | #define FPGA_HF_ISO14443A_READER_MOD (4<<0) | |
116 | ||
117 | /// lfops.h | |
f6d9fb17 MHS |
118 | extern uint8_t decimation; |
119 | extern uint8_t bits_per_sample ; | |
120 | extern bool averaging; | |
121 | ||
bf7163bd | 122 | void AcquireRawAdcSamples125k(int divisor); |
f7e3ed82 | 123 | void ModThenAcquireRawAdcSamples125k(int delay_off,int period_0,int period_1,uint8_t *command); |
15c4dc5a | 124 | void ReadTItag(void); |
f7e3ed82 | 125 | void WriteTItag(uint32_t idhi, uint32_t idlo, uint16_t crc); |
15c4dc5a | 126 | void AcquireTiType(void); |
127 | void AcquireRawBitsTI(void); | |
a501c82b | 128 | void SimulateTagLowFrequency( uint16_t period, uint32_t gap, uint8_t ledcontrol); |
385f3987 | 129 | //void SimulateTagLowFrequencyA(int period, int gap); |
a501c82b | 130 | |
385f3987 | 131 | void CmdHIDsimTAG(int hi, int lo, int ledcontrol); |
abd6112f | 132 | void CmdFSKsimTAG(uint16_t arg1, uint16_t arg2, size_t size, uint8_t *BitStream); |
133 | void CmdASKsimTag(uint16_t arg1, uint16_t arg2, size_t size, uint8_t *BitStream); | |
872e3d4d | 134 | void CmdPSKsimTag(uint16_t arg1, uint16_t arg2, size_t size, uint8_t *BitStream); |
15c4dc5a | 135 | void CmdHIDdemodFSK(int findone, int *high, int *low, int ledcontrol); |
6ff6ade2 | 136 | void CmdEM410xdemod(int findone, int *high, int *low, int ledcontrol); |
a1f3bb12 | 137 | void CmdIOdemodFSK(int findone, int *high, int *low, int ledcontrol); |
138 | void CopyIOtoT55x7(uint32_t hi, uint32_t lo, uint8_t longFMT); // Clone an ioProx card to T5557/T5567 | |
15c4dc5a | 139 | void SimulateTagLowFrequencyBidir(int divisor, int max_bitlen); |
54a942b0 | 140 | void CopyHIDtoT55x7(uint32_t hi2, uint32_t hi, uint32_t lo, uint8_t longFMT); // Clone an HID card to T5557/T5567 |
2d4eae76 | 141 | void WriteEM410x(uint32_t card, uint32_t id_hi, uint32_t id_lo); |
2414f978 | 142 | void CopyIndala64toT55x7(int hi, int lo); // Clone Indala 64-bit tag by UID to T55x7 |
143 | void CopyIndala224toT55x7(int uid1, int uid2, int uid3, int uid4, int uid5, int uid6, int uid7); // Clone Indala 224-bit tag by UID to T55x7 | |
54a942b0 | 144 | void T55xxWriteBlock(uint32_t Data, uint32_t Block, uint32_t Pwd, uint8_t PwdMode); |
145 | void T55xxReadBlock(uint32_t Block, uint32_t Pwd, uint8_t PwdMode ); | |
146 | void T55xxReadTrace(void); | |
f6c18637 | 147 | void TurnReadLFOn(); |
54a942b0 | 148 | int DemodPCF7931(uint8_t **outBlocks); |
149 | int IsBlock0PCF7931(uint8_t *Block); | |
150 | int IsBlock1PCF7931(uint8_t *Block); | |
151 | void ReadPCF7931(); | |
152 | void EM4xReadWord(uint8_t Address, uint32_t Pwd, uint8_t PwdMode); | |
153 | void EM4xWriteWord(uint32_t Data, uint8_t Address, uint32_t Pwd, uint8_t PwdMode); | |
15c4dc5a | 154 | |
155 | /// iso14443.h | |
156 | void SimulateIso14443Tag(void); | |
f7e3ed82 | 157 | void AcquireRawAdcSamplesIso14443(uint32_t parameter); |
7cf3ef20 | 158 | void ReadSTMemoryIso14443(uint32_t); |
0f7f9edc | 159 | void RAMFUNC SnoopIso14443(void); |
7cf3ef20 | 160 | void SendRawCommand14443B(uint32_t, uint32_t, uint8_t, uint8_t[]); |
15c4dc5a | 161 | |
162 | /// iso14443a.h | |
5cd9ec01 | 163 | void RAMFUNC SnoopIso14443a(uint8_t param); |
28afbd2b | 164 | void SimulateIso14443aTag(int tagType, int uid_1st, int uid_2nd, byte_t* data); |
902cb3c0 | 165 | void ReaderIso14443a(UsbCommand * c); |
1e262141 | 166 | // Also used in iclass.c |
a501c82b | 167 | bool RAMFUNC LogTrace(const uint8_t *btBytes, uint16_t len, uint32_t timestamp_start, uint32_t timestamp_end, uint8_t *parity, bool readerToTag); |
6a1f2d82 | 168 | void GetParity(const uint8_t *pbtCmd, uint16_t len, uint8_t *parity); |
902cb3c0 | 169 | void iso14a_set_trigger(bool enable); |
3000dc4e | 170 | |
5cd9ec01 | 171 | void RAMFUNC SniffMifare(uint8_t param); |
8556b852 | 172 | |
5acd09bd | 173 | /// epa.h |
902cb3c0 | 174 | void EPA_PACE_Collect_Nonce(UsbCommand * c); |
5acd09bd | 175 | |
8556b852 | 176 | // mifarecmd.h |
1c611bbd | 177 | void ReaderMifare(bool first_try); |
9492e0b0 | 178 | int32_t dist_nt(uint32_t nt1, uint32_t nt2); |
20f9a2a1 | 179 | void MifareReadBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *data); |
0ec548dc | 180 | void MifareUReadBlock(uint8_t arg0, uint8_t arg1, uint8_t *datain); |
f38a1528 | 181 | void MifareUC_Auth1(uint8_t arg0, uint8_t *datain); |
182 | void MifareUC_Auth2(uint32_t arg0, uint8_t *datain); | |
a501c82b | 183 | void MifareUReadCard(uint8_t arg0, int Pages, uint8_t *datain); |
20f9a2a1 M |
184 | void MifareReadSector(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain); |
185 | void MifareWriteBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain); | |
981bd429 | 186 | void MifareUWriteBlock(uint8_t arg0,uint8_t *datain); |
187 | void MifareUWriteBlock_Special(uint8_t arg0,uint8_t *datain); | |
f397b5cc M |
188 | void MifareNested(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
189 | void MifareChkKeys(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain); | |
20f9a2a1 | 190 | void Mifare1ksim(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain); |
8556b852 M |
191 | void MifareSetDbgLvl(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
192 | void MifareEMemClr(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); | |
193 | void MifareEMemSet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); | |
194 | void MifareEMemGet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); | |
195 | void MifareECardLoad(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); | |
0675f200 | 196 | void MifareCSetBlock(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); // Work with "magic Chinese" card |
545a1f38 | 197 | void MifareCGetBlock(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
d52e4e88 | 198 | void MifareCIdent(); // is "magic chinese" card? |
15c4dc5a | 199 | |
6ff6ade2 | 200 | //desfire |
201 | void Mifare_DES_Auth1(uint8_t arg0,uint8_t *datain); | |
202 | void Mifare_DES_Auth2(uint32_t arg0, uint8_t *datain); | |
203 | ||
f38a1528 | 204 | // mifaredesfire.h |
f6c18637 | 205 | bool InitDesfireCard(); |
206 | void MifareSendCommand(uint8_t arg0,uint8_t arg1, uint8_t *datain); | |
207 | void MifareDesfireGetInformation(); | |
208 | void MifareDES_Auth1(uint8_t arg0,uint8_t arg1,uint8_t arg2, uint8_t *datain); | |
209 | void ReaderMifareDES(uint32_t param, uint32_t param2, uint8_t * datain); | |
210 | int DesfireAPDU(uint8_t *cmd, size_t cmd_len, uint8_t *dataout); | |
211 | size_t CreateAPDU( uint8_t *datain, size_t len, uint8_t *dataout); | |
212 | void OnSuccess(); | |
225ccb91 | 213 | void OnError(uint8_t reason); |
f6c18637 | 214 | |
215 | ||
f38a1528 | 216 | |
0ec548dc | 217 | // desfire_crypto.h |
218 | void *mifare_cryto_preprocess_data (desfiretag_t tag, void *data, size_t *nbytes, off_t offset, int communication_settings); | |
219 | void *mifare_cryto_postprocess_data (desfiretag_t tag, void *data, ssize_t *nbytes, int communication_settings); | |
220 | void mifare_cypher_single_block (desfirekey_t key, uint8_t *data, uint8_t *ivect, MifareCryptoDirection direction, MifareCryptoOperation operation, size_t block_size); | |
221 | void mifare_cypher_blocks_chained (desfiretag_t tag, desfirekey_t key, uint8_t *ivect, uint8_t *data, size_t data_size, MifareCryptoDirection direction, MifareCryptoOperation operation); | |
222 | size_t key_block_size (const desfirekey_t key); | |
223 | size_t padded_data_length (const size_t nbytes, const size_t block_size); | |
224 | size_t maced_data_length (const desfirekey_t key, const size_t nbytes); | |
225 | size_t enciphered_data_length (const desfiretag_t tag, const size_t nbytes, int communication_settings); | |
226 | void cmac_generate_subkeys (desfirekey_t key); | |
227 | void cmac (const desfirekey_t key, uint8_t *ivect, const uint8_t *data, size_t len, uint8_t *cmac); | |
f38a1528 | 228 | |
229 | ||
15c4dc5a | 230 | /// iso15693.h |
9455b51c | 231 | void RecordRawAdcSamplesIso15693(void); |
15c4dc5a | 232 | void AcquireRawAdcSamplesIso15693(void); |
f7e3ed82 | 233 | void ReaderIso15693(uint32_t parameter); // Simulate an ISO15693 reader - greg |
3649b640 | 234 | void SimTagIso15693(uint32_t parameter, uint8_t *uid); // simulate an ISO15693 tag - greg |
9455b51c | 235 | void BruteforceIso15693Afi(uint32_t speed); // find an AFI of a tag - atrox |
236 | void DirectTag15693Command(uint32_t datalen,uint32_t speed, uint32_t recv, uint8_t data[]); // send arbitrary commands from CLI - atrox | |
237 | void SetDebugIso15693(uint32_t flag); | |
15c4dc5a | 238 | |
cee5a30d | 239 | /// iclass.h |
240 | void RAMFUNC SnoopIClass(void); | |
ff7bb4ef | 241 | void SimulateIClass(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
1e262141 | 242 | void ReaderIClass(uint8_t arg0); |
f38a1528 | 243 | void ReaderIClass_Replay(uint8_t arg0,uint8_t *MAC); |
244 | void IClass_iso14443A_GetPublic(uint8_t arg0); | |
cee5a30d | 245 | |
d19929cb | 246 | // hitag2.h |
247 | void SnoopHitag(uint32_t type); | |
248 | void SimulateHitagTag(bool tag_mem_supplied, byte_t* data); | |
249 | void ReaderHitag(hitag_function htf, hitag_data* htd); | |
250 | ||
6e82300d | 251 | // cmd.h |
252 | bool cmd_receive(UsbCommand* cmd); | |
79a73ab2 | 253 | bool cmd_send(uint32_t cmd, uint32_t arg0, uint32_t arg1, uint32_t arg2, void* data, size_t len); |
6e82300d | 254 | |
15c4dc5a | 255 | /// util.h |
15c4dc5a | 256 | |
257 | #endif |