]>
Commit | Line | Data |
---|---|---|
8556b852 | 1 | //-----------------------------------------------------------------------------\r |
b62a5a84 | 2 | // Merlok - June 2011, 2012\r |
8556b852 M |
3 | // Gerhard de Koning Gans - May 2008\r |
4 | // Hagen Fritsch - June 2010\r | |
3fe4ff4f | 5 | // Midnitesnake - Dec 2013\r |
6 | // Andy Davies - Apr 2014\r | |
7 | // Iceman - May 2014\r | |
8556b852 M |
8 | //\r |
9 | // This code is licensed to you under the terms of the GNU GPL, version 2 or,\r | |
10 | // at your option, any later version. See the LICENSE.txt file for the text of\r | |
11 | // the license.\r | |
12 | //-----------------------------------------------------------------------------\r | |
13 | // Routines to support ISO 14443 type A.\r | |
14 | //-----------------------------------------------------------------------------\r | |
15 | \r | |
16 | #include "mifarecmd.h"\r | |
17 | #include "apps.h"\r | |
787b5bd8 | 18 | #include "util.h"\r |
4d2e4eea | 19 | \r |
a631936e | 20 | #include "crc.h"\r |
21 | \r | |
8556b852 | 22 | //-----------------------------------------------------------------------------\r |
baeaf579 | 23 | // Select, Authenticate, Read a MIFARE tag. \r |
8556b852 M |
24 | // read block\r |
25 | //-----------------------------------------------------------------------------\r | |
26 | void MifareReadBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain)\r | |
27 | {\r | |
28 | // params\r | |
29 | uint8_t blockNo = arg0;\r | |
30 | uint8_t keyType = arg1;\r | |
31 | uint64_t ui64Key = 0;\r | |
32 | ui64Key = bytes_to_num(datain, 6);\r | |
33 | \r | |
34 | // variables\r | |
35 | byte_t isOK = 0;\r | |
36 | byte_t dataoutbuf[16];\r | |
1c611bbd | 37 | uint8_t uid[10];\r |
8556b852 M |
38 | uint32_t cuid;\r |
39 | struct Crypto1State mpcs = {0, 0};\r | |
40 | struct Crypto1State *pcs;\r | |
41 | pcs = &mpcs;\r | |
42 | \r | |
43 | // clear trace\r | |
3000dc4e | 44 | clear_trace();\r |
7bc95e2e | 45 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
8556b852 M |
46 | \r |
47 | LED_A_ON();\r | |
48 | LED_B_OFF();\r | |
49 | LED_C_OFF();\r | |
50 | \r | |
51 | while (true) {\r | |
52 | if(!iso14443a_select_card(uid, NULL, &cuid)) {\r | |
baeaf579 | 53 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r |
8556b852 M |
54 | break;\r |
55 | };\r | |
56 | \r | |
57 | if(mifare_classic_auth(pcs, cuid, blockNo, keyType, ui64Key, AUTH_FIRST)) {\r | |
baeaf579 | 58 | if (MF_DBGLEVEL >= 1) Dbprintf("Auth error");\r |
8556b852 M |
59 | break;\r |
60 | };\r | |
61 | \r | |
62 | if(mifare_classic_readblock(pcs, cuid, blockNo, dataoutbuf)) {\r | |
baeaf579 | 63 | if (MF_DBGLEVEL >= 1) Dbprintf("Read block error");\r |
8556b852 M |
64 | break;\r |
65 | };\r | |
66 | \r | |
67 | if(mifare_classic_halt(pcs, cuid)) {\r | |
baeaf579 | 68 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r |
8556b852 M |
69 | break;\r |
70 | };\r | |
71 | \r | |
72 | isOK = 1;\r | |
73 | break;\r | |
74 | }\r | |
75 | \r | |
76 | // ----------------------------- crypto1 destroy\r | |
77 | crypto1_destroy(pcs);\r | |
78 | \r | |
79 | if (MF_DBGLEVEL >= 2) DbpString("READ BLOCK FINISHED");\r | |
80 | \r | |
8556b852 | 81 | LED_B_ON();\r |
baeaf579 | 82 | cmd_send(CMD_ACK,isOK,0,0,dataoutbuf,16);\r |
8556b852 M |
83 | LED_B_OFF();\r |
84 | \r | |
a631936e | 85 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
86 | LEDsoff();\r | |
87 | }\r | |
88 | \r | |
4d2e4eea | 89 | void MifareUC_Auth(uint8_t arg0, uint8_t *keybytes){\r |
a631936e | 90 | \r |
4d2e4eea | 91 | bool turnOffField = (arg0 == 1);\r |
a631936e | 92 | \r |
aa60d156 | 93 | LED_A_ON(); LED_B_OFF(); LED_C_OFF();\r |
3000dc4e | 94 | clear_trace();\r |
a631936e | 95 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
96 | \r | |
4d2e4eea | 97 | if(!iso14443a_select_card(NULL, NULL, NULL)) {\r |
aa60d156 | 98 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Can't select card");\r |
0ec548dc | 99 | OnError(0);\r |
a631936e | 100 | return;\r |
101 | };\r | |
102 | \r | |
e7e95088 | 103 | if(!mifare_ultra_auth(keybytes)){\r |
4d2e4eea | 104 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Authentication failed");\r |
0ec548dc | 105 | OnError(1);\r |
a631936e | 106 | return;\r |
107 | }\r | |
108 | \r | |
4d2e4eea | 109 | if (turnOffField) {\r |
110 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r | |
111 | LEDsoff();\r | |
cceabb79 | 112 | }\r |
9d87eb66 | 113 | cmd_send(CMD_ACK,1,0,0,0,0);\r |
7cc204bf | 114 | }\r |
115 | \r | |
8d53ea14 | 116 | // Arg0 = BlockNo,\r |
117 | // Arg1 = UsePwd bool\r | |
75377d29 | 118 | // datain = PWD bytes,\r |
0ec548dc | 119 | void MifareUReadBlock(uint8_t arg0, uint8_t arg1, uint8_t *datain)\r |
7cc204bf | 120 | {\r |
7cc204bf | 121 | uint8_t blockNo = arg0;\r |
787b5bd8 | 122 | byte_t dataout[16] = {0x00};\r |
4d2e4eea | 123 | bool useKey = (arg1 == 1); //UL_C\r |
124 | bool usePwd = (arg1 == 2); //UL_EV1/NTAG\r | |
8d53ea14 | 125 | \r |
75377d29 | 126 | LEDsoff();\r |
127 | LED_A_ON();\r | |
3000dc4e | 128 | clear_trace();\r |
787b5bd8 | 129 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
f168b263 | 130 | \r |
4d2e4eea | 131 | int len = iso14443a_select_card(NULL, NULL, NULL);\r |
787b5bd8 | 132 | if(!len) {\r |
aa60d156 | 133 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Can't select card (RC:%02X)",len);\r |
0ec548dc | 134 | OnError(1);\r |
787b5bd8 | 135 | return;\r |
aa60d156 | 136 | }\r |
f168b263 | 137 | \r |
4d2e4eea | 138 | // UL-C authentication\r |
139 | if ( useKey ) {\r | |
8258f409 | 140 | uint8_t key[16] = {0x00};\r |
4d2e4eea | 141 | memcpy(key, datain, sizeof(key) );\r |
142 | \r | |
e7e95088 | 143 | if ( !mifare_ultra_auth(key) ) {\r |
aa60d156 | 144 | OnError(1);\r |
f168b263 | 145 | return;\r |
0ec548dc | 146 | }\r |
4d2e4eea | 147 | }\r |
f168b263 | 148 | \r |
4d2e4eea | 149 | // UL-EV1 / NTAG authentication\r |
8258f409 | 150 | if ( usePwd ) {\r |
4d2e4eea | 151 | uint8_t pwd[4] = {0x00};\r |
152 | memcpy(pwd, datain, 4);\r | |
153 | uint8_t pack[4] = {0,0,0,0};\r | |
e7e95088 | 154 | if (!mifare_ul_ev1_auth(pwd, pack)) {\r |
0ec548dc | 155 | OnError(1);\r |
f168b263 | 156 | return;\r |
062b7cb9 | 157 | }\r |
8258f409 | 158 | } \r |
f168b263 | 159 | \r |
aa60d156 | 160 | if( mifare_ultra_readblock(blockNo, dataout) ) {\r |
161 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Read block error");\r | |
0ec548dc | 162 | OnError(2);\r |
787b5bd8 | 163 | return;\r |
aa60d156 | 164 | }\r |
8258f409 | 165 | \r |
aa60d156 | 166 | if( mifare_ultra_halt() ) {\r |
167 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Halt error");\r | |
0ec548dc | 168 | OnError(3);\r |
787b5bd8 | 169 | return;\r |
aa60d156 | 170 | }\r |
8258f409 | 171 | \r |
787b5bd8 | 172 | cmd_send(CMD_ACK,1,0,0,dataout,16);\r |
7cc204bf | 173 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
174 | LEDsoff();\r | |
175 | }\r | |
e7e95088 | 176 | \r |
7cc204bf | 177 | //-----------------------------------------------------------------------------\r |
baeaf579 | 178 | // Select, Authenticate, Read a MIFARE tag. \r |
179 | // read sector (data = 4 x 16 bytes = 64 bytes, or 16 x 16 bytes = 256 bytes)\r | |
8556b852 M |
180 | //-----------------------------------------------------------------------------\r |
181 | void MifareReadSector(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain)\r | |
182 | {\r | |
183 | // params\r | |
184 | uint8_t sectorNo = arg0;\r | |
185 | uint8_t keyType = arg1;\r | |
186 | uint64_t ui64Key = 0;\r | |
187 | ui64Key = bytes_to_num(datain, 6);\r | |
188 | \r | |
189 | // variables\r | |
3fe4ff4f | 190 | byte_t isOK = 0;\r |
baeaf579 | 191 | byte_t dataoutbuf[16 * 16];\r |
1c611bbd | 192 | uint8_t uid[10];\r |
8556b852 M |
193 | uint32_t cuid;\r |
194 | struct Crypto1State mpcs = {0, 0};\r | |
195 | struct Crypto1State *pcs;\r | |
196 | pcs = &mpcs;\r | |
197 | \r | |
198 | // clear trace\r | |
3000dc4e | 199 | clear_trace();\r |
8556b852 | 200 | \r |
7bc95e2e | 201 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
8556b852 M |
202 | \r |
203 | LED_A_ON();\r | |
204 | LED_B_OFF();\r | |
205 | LED_C_OFF();\r | |
206 | \r | |
baeaf579 | 207 | isOK = 1;\r |
208 | if(!iso14443a_select_card(uid, NULL, &cuid)) {\r | |
209 | isOK = 0;\r | |
8556b852 | 210 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r |
baeaf579 | 211 | }\r |
baeaf579 | 212 | \r |
e7e95088 | 213 | \r |
baeaf579 | 214 | if(isOK && mifare_classic_auth(pcs, cuid, FirstBlockOfSector(sectorNo), keyType, ui64Key, AUTH_FIRST)) {\r |
215 | isOK = 0;\r | |
8556b852 | 216 | if (MF_DBGLEVEL >= 1) Dbprintf("Auth error");\r |
baeaf579 | 217 | }\r |
218 | \r | |
219 | for (uint8_t blockNo = 0; isOK && blockNo < NumBlocksPerSector(sectorNo); blockNo++) {\r | |
220 | if(mifare_classic_readblock(pcs, cuid, FirstBlockOfSector(sectorNo) + blockNo, dataoutbuf + 16 * blockNo)) {\r | |
221 | isOK = 0;\r | |
222 | if (MF_DBGLEVEL >= 1) Dbprintf("Read sector %2d block %2d error", sectorNo, blockNo);\r | |
8556b852 | 223 | break;\r |
baeaf579 | 224 | }\r |
225 | }\r | |
8556b852 | 226 | \r |
baeaf579 | 227 | if(mifare_classic_halt(pcs, cuid)) {\r |
8556b852 | 228 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r |
8556b852 | 229 | }\r |
baeaf579 | 230 | \r |
8556b852 M |
231 | // ----------------------------- crypto1 destroy\r |
232 | crypto1_destroy(pcs);\r | |
233 | \r | |
234 | if (MF_DBGLEVEL >= 2) DbpString("READ SECTOR FINISHED");\r | |
235 | \r | |
8556b852 | 236 | LED_B_ON();\r |
baeaf579 | 237 | cmd_send(CMD_ACK,isOK,0,0,dataoutbuf,16*NumBlocksPerSector(sectorNo));\r |
6e82300d | 238 | LED_B_OFF();\r |
8556b852 M |
239 | \r |
240 | // Thats it...\r | |
241 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r | |
242 | LEDsoff();\r | |
7cc204bf | 243 | }\r |
244 | \r | |
8d53ea14 | 245 | // arg0 = blockNo (start)\r |
246 | // arg1 = Pages (number of blocks)\r | |
247 | // arg2 = useKey\r | |
248 | // datain = KEY bytes\r | |
249 | void MifareUReadCard(uint8_t arg0, uint16_t arg1, uint8_t arg2, uint8_t *datain)\r | |
7cc204bf | 250 | {\r |
0a0d9a58 | 251 | // free eventually allocated BigBuf memory\r |
252 | BigBuf_free();\r | |
0a0d9a58 | 253 | clear_trace();\r |
254 | \r | |
0ec548dc | 255 | // params\r |
8d53ea14 | 256 | uint8_t blockNo = arg0;\r |
257 | uint16_t blocks = arg1;\r | |
4d2e4eea | 258 | bool useKey = (arg2 == 1); //UL_C\r |
259 | bool usePwd = (arg2 == 2); //UL_EV1/NTAG\r | |
e7e95088 | 260 | uint32_t countblocks = 0;\r |
0a0d9a58 | 261 | uint8_t *dataout = BigBuf_malloc(CARD_MEMORY_SIZE);\r |
262 | if (dataout == NULL){\r | |
263 | Dbprintf("out of memory");\r | |
264 | OnError(1);\r | |
265 | return;\r | |
266 | }\r | |
7cc204bf | 267 | \r |
1ec21089 | 268 | LEDsoff();\r |
92690507 | 269 | LED_A_ON();\r |
787b5bd8 | 270 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
7cc204bf | 271 | \r |
1ec21089 | 272 | int len = iso14443a_select_card(NULL, NULL, NULL);\r |
787b5bd8 | 273 | if (!len) {\r |
aa60d156 | 274 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Can't select card (RC:%d)",len);\r |
0ec548dc | 275 | OnError(1);\r |
787b5bd8 | 276 | return;\r |
277 | }\r | |
75377d29 | 278 | \r |
8258f409 | 279 | // UL-C authentication\r |
75377d29 | 280 | if ( useKey ) {\r |
281 | uint8_t key[16] = {0x00};\r | |
8258f409 | 282 | memcpy(key, datain, sizeof(key) );\r |
75377d29 | 283 | \r |
9d87eb66 | 284 | if ( !mifare_ultra_auth(key) ) {\r |
75377d29 | 285 | OnError(1);\r |
286 | return;\r | |
287 | }\r | |
75377d29 | 288 | }\r |
289 | \r | |
8258f409 | 290 | // UL-EV1 / NTAG authentication\r |
291 | if (usePwd) {\r | |
292 | uint8_t pwd[4] = {0x00};\r | |
293 | memcpy(pwd, datain, sizeof(pwd));\r | |
cceabb79 | 294 | uint8_t pack[4] = {0,0,0,0};\r |
295 | \r | |
9d87eb66 | 296 | if (!mifare_ul_ev1_auth(pwd, pack)){\r |
cceabb79 | 297 | OnError(1);\r |
cceabb79 | 298 | return; \r |
299 | }\r | |
300 | }\r | |
301 | \r | |
75377d29 | 302 | for (int i = 0; i < blocks; i++){\r |
d7acc640 | 303 | if ((i*4) + 4 > CARD_MEMORY_SIZE) {\r |
9d87eb66 | 304 | Dbprintf("Data exceeds buffer!!");\r |
305 | break;\r | |
306 | }\r | |
8d53ea14 | 307 | \r |
e7e95088 | 308 | len = mifare_ultra_readblock(blockNo + i, dataout + 4 * i);\r |
787b5bd8 | 309 | \r |
310 | if (len) {\r | |
aa60d156 | 311 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Read block %d error",i);\r |
e7e95088 | 312 | // if no blocks read - error out\r |
313 | if (i==0){\r | |
9d87eb66 | 314 | OnError(2);\r |
787b5bd8 | 315 | return;\r |
e7e95088 | 316 | } else {\r |
317 | //stop at last successful read block and return what we got\r | |
318 | break;\r | |
319 | }\r | |
787b5bd8 | 320 | } else {\r |
4d2e4eea | 321 | countblocks++;\r |
787b5bd8 | 322 | }\r |
323 | }\r | |
75377d29 | 324 | \r |
4d2e4eea | 325 | len = mifare_ultra_halt();\r |
326 | if (len) {\r | |
aa60d156 | 327 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Halt error");\r |
0ec548dc | 328 | OnError(3);\r |
787b5bd8 | 329 | return;\r |
330 | }\r | |
7cc204bf | 331 | \r |
4d2e4eea | 332 | if (MF_DBGLEVEL >= MF_DBG_EXTENDED) Dbprintf("Blocks read %d", countblocks);\r |
7cc204bf | 333 | \r |
e7e95088 | 334 | countblocks *= 4;\r |
7444d916 | 335 | cmd_send(CMD_ACK, 1, countblocks, BigBuf_max_traceLen(),0 , 0);\r |
31d1caa5 MHS |
336 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
337 | LEDsoff();\r | |
7444d916 | 338 | \r |
7cc204bf | 339 | }\r |
340 | \r | |
7cc204bf | 341 | //-----------------------------------------------------------------------------\r |
baeaf579 | 342 | // Select, Authenticate, Write a MIFARE tag. \r |
7cc204bf | 343 | // read block\r |
8556b852 M |
344 | //-----------------------------------------------------------------------------\r |
345 | void MifareWriteBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain)\r | |
346 | {\r | |
347 | // params\r | |
348 | uint8_t blockNo = arg0;\r | |
349 | uint8_t keyType = arg1;\r | |
350 | uint64_t ui64Key = 0;\r | |
351 | byte_t blockdata[16];\r | |
352 | \r | |
353 | ui64Key = bytes_to_num(datain, 6);\r | |
354 | memcpy(blockdata, datain + 10, 16);\r | |
355 | \r | |
356 | // variables\r | |
357 | byte_t isOK = 0;\r | |
1c611bbd | 358 | uint8_t uid[10];\r |
8556b852 M |
359 | uint32_t cuid;\r |
360 | struct Crypto1State mpcs = {0, 0};\r | |
361 | struct Crypto1State *pcs;\r | |
362 | pcs = &mpcs;\r | |
363 | \r | |
364 | // clear trace\r | |
3000dc4e | 365 | clear_trace();\r |
8556b852 | 366 | \r |
7bc95e2e | 367 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
8556b852 M |
368 | \r |
369 | LED_A_ON();\r | |
370 | LED_B_OFF();\r | |
371 | LED_C_OFF();\r | |
372 | \r | |
373 | while (true) {\r | |
374 | if(!iso14443a_select_card(uid, NULL, &cuid)) {\r | |
375 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r | |
376 | break;\r | |
377 | };\r | |
378 | \r | |
379 | if(mifare_classic_auth(pcs, cuid, blockNo, keyType, ui64Key, AUTH_FIRST)) {\r | |
380 | if (MF_DBGLEVEL >= 1) Dbprintf("Auth error");\r | |
381 | break;\r | |
382 | };\r | |
383 | \r | |
384 | if(mifare_classic_writeblock(pcs, cuid, blockNo, blockdata)) {\r | |
385 | if (MF_DBGLEVEL >= 1) Dbprintf("Write block error");\r | |
386 | break;\r | |
387 | };\r | |
388 | \r | |
389 | if(mifare_classic_halt(pcs, cuid)) {\r | |
390 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
391 | break;\r | |
392 | };\r | |
393 | \r | |
394 | isOK = 1;\r | |
395 | break;\r | |
396 | }\r | |
397 | \r | |
398 | // ----------------------------- crypto1 destroy\r | |
399 | crypto1_destroy(pcs);\r | |
400 | \r | |
401 | if (MF_DBGLEVEL >= 2) DbpString("WRITE BLOCK FINISHED");\r | |
402 | \r | |
8556b852 | 403 | LED_B_ON();\r |
9492e0b0 | 404 | cmd_send(CMD_ACK,isOK,0,0,0,0);\r |
6e82300d | 405 | LED_B_OFF();\r |
8556b852 M |
406 | \r |
407 | \r | |
408 | // Thats it...\r | |
409 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r | |
410 | LEDsoff();\r | |
7cc204bf | 411 | }\r |
412 | \r | |
413 | void MifareUWriteBlock(uint8_t arg0, uint8_t *datain)\r | |
414 | {\r | |
f168b263 | 415 | uint8_t blockNo = arg0;\r |
787b5bd8 | 416 | byte_t blockdata[16] = {0x00};\r |
7cc204bf | 417 | \r |
f168b263 | 418 | memcpy(blockdata, datain, 16);\r |
419 | \r | |
787b5bd8 | 420 | uint8_t uid[10] = {0x00};\r |
7cc204bf | 421 | \r |
aa60d156 | 422 | LED_A_ON(); LED_B_OFF(); LED_C_OFF();\r |
7cc204bf | 423 | \r |
aa60d156 | 424 | clear_trace();\r |
425 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r | |
7cc204bf | 426 | \r |
aa60d156 | 427 | if(!iso14443a_select_card(uid, NULL, NULL)) {\r |
428 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r | |
429 | OnError(0);\r | |
430 | return;\r | |
431 | };\r | |
432 | \r | |
433 | if(mifare_ultra_writeblock(blockNo, blockdata)) {\r | |
434 | if (MF_DBGLEVEL >= 1) Dbprintf("Write block error");\r | |
435 | OnError(0);\r | |
436 | return; };\r | |
437 | \r | |
438 | if(mifare_ultra_halt()) {\r | |
439 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
440 | OnError(0);\r | |
441 | return;\r | |
442 | };\r | |
f168b263 | 443 | \r |
aa60d156 | 444 | if (MF_DBGLEVEL >= 2) DbpString("WRITE BLOCK FINISHED");\r |
7cc204bf | 445 | \r |
aa60d156 | 446 | cmd_send(CMD_ACK,1,0,0,0,0);\r |
447 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r | |
448 | LEDsoff();\r | |
7cc204bf | 449 | }\r |
450 | \r | |
fff69a1e | 451 | // Arg0 : Block to write to.\r |
452 | // Arg1 : 0 = use no authentication.\r | |
453 | // 1 = use 0x1A authentication.\r | |
454 | // 2 = use 0x1B authentication.\r | |
455 | // datain : 4 first bytes is data to be written.\r | |
456 | // : 4/16 next bytes is authentication key.\r | |
457 | void MifareUWriteBlock_Special(uint8_t arg0, uint8_t arg1, uint8_t *datain)\r | |
7cc204bf | 458 | {\r |
baeaf579 | 459 | uint8_t blockNo = arg0;\r |
fff69a1e | 460 | bool useKey = (arg1 == 1); //UL_C\r |
461 | bool usePwd = (arg1 == 2); //UL_EV1/NTAG\r | |
787b5bd8 | 462 | byte_t blockdata[4] = {0x00};\r |
7cc204bf | 463 | \r |
8258f409 | 464 | memcpy(blockdata, datain,4);\r |
aa60d156 | 465 | \r |
8d53ea14 | 466 | LEDsoff();\r |
467 | LED_A_ON();\r | |
aa60d156 | 468 | clear_trace();\r |
469 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r | |
470 | \r | |
e7e95088 | 471 | if(!iso14443a_select_card(NULL, NULL, NULL)) {\r |
aa60d156 | 472 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r |
473 | OnError(0);\r | |
474 | return;\r | |
475 | };\r | |
7cc204bf | 476 | \r |
fff69a1e | 477 | // UL-C authentication\r |
478 | if ( useKey ) {\r | |
479 | uint8_t key[16] = {0x00}; \r | |
480 | memcpy(key, datain+4, sizeof(key) );\r | |
481 | \r | |
482 | if ( !mifare_ultra_auth(key) ) {\r | |
483 | OnError(1);\r | |
484 | return; \r | |
485 | }\r | |
486 | }\r | |
487 | \r | |
488 | // UL-EV1 / NTAG authentication\r | |
489 | if (usePwd) { \r | |
490 | uint8_t pwd[4] = {0x00};\r | |
491 | memcpy(pwd, datain+4, 4);\r | |
492 | uint8_t pack[4] = {0,0,0,0};\r | |
493 | if (!mifare_ul_ev1_auth(pwd, pack)) {\r | |
494 | OnError(1);\r | |
495 | return; \r | |
496 | }\r | |
497 | }\r | |
498 | \r | |
aa60d156 | 499 | if(mifare_ultra_special_writeblock(blockNo, blockdata)) {\r |
500 | if (MF_DBGLEVEL >= 1) Dbprintf("Write block error");\r | |
501 | OnError(0);\r | |
502 | return;\r | |
503 | };\r | |
504 | \r | |
505 | if(mifare_ultra_halt()) {\r | |
506 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
507 | OnError(0);\r | |
508 | return;\r | |
509 | };\r | |
510 | \r | |
511 | if (MF_DBGLEVEL >= 2) DbpString("WRITE BLOCK FINISHED");\r | |
512 | \r | |
513 | cmd_send(CMD_ACK,1,0,0,0,0);\r | |
514 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r | |
515 | LEDsoff();\r | |
516 | }\r | |
517 | \r | |
518 | void MifareUSetPwd(uint8_t arg0, uint8_t *datain){\r | |
519 | \r | |
520 | uint8_t pwd[16] = {0x00};\r | |
521 | byte_t blockdata[4] = {0x00};\r | |
522 | \r | |
523 | memcpy(pwd, datain, 16);\r | |
524 | \r | |
525 | LED_A_ON(); LED_B_OFF(); LED_C_OFF();\r | |
3000dc4e | 526 | clear_trace();\r |
baeaf579 | 527 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
7cc204bf | 528 | \r |
aa60d156 | 529 | if(!iso14443a_select_card(NULL, NULL, NULL)) {\r |
530 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r | |
531 | OnError(0);\r | |
532 | return;\r | |
533 | };\r | |
7cc204bf | 534 | \r |
aa60d156 | 535 | blockdata[0] = pwd[7];\r |
536 | blockdata[1] = pwd[6];\r | |
537 | blockdata[2] = pwd[5];\r | |
538 | blockdata[3] = pwd[4];\r | |
539 | if(mifare_ultra_special_writeblock( 44, blockdata)) {\r | |
540 | if (MF_DBGLEVEL >= 1) Dbprintf("Write block error");\r | |
541 | OnError(44);\r | |
542 | return;\r | |
543 | };\r | |
7cc204bf | 544 | \r |
aa60d156 | 545 | blockdata[0] = pwd[3];\r |
546 | blockdata[1] = pwd[2];\r | |
547 | blockdata[2] = pwd[1];\r | |
548 | blockdata[3] = pwd[0];\r | |
549 | if(mifare_ultra_special_writeblock( 45, blockdata)) {\r | |
550 | if (MF_DBGLEVEL >= 1) Dbprintf("Write block error");\r | |
551 | OnError(45);\r | |
552 | return;\r | |
553 | };\r | |
7cc204bf | 554 | \r |
aa60d156 | 555 | blockdata[0] = pwd[15];\r |
556 | blockdata[1] = pwd[14];\r | |
557 | blockdata[2] = pwd[13];\r | |
558 | blockdata[3] = pwd[12];\r | |
559 | if(mifare_ultra_special_writeblock( 46, blockdata)) {\r | |
560 | if (MF_DBGLEVEL >= 1) Dbprintf("Write block error");\r | |
561 | OnError(46);\r | |
562 | return;\r | |
563 | };\r | |
7cc204bf | 564 | \r |
aa60d156 | 565 | blockdata[0] = pwd[11];\r |
566 | blockdata[1] = pwd[10];\r | |
567 | blockdata[2] = pwd[9];\r | |
568 | blockdata[3] = pwd[8];\r | |
569 | if(mifare_ultra_special_writeblock( 47, blockdata)) {\r | |
570 | if (MF_DBGLEVEL >= 1) Dbprintf("Write block error");\r | |
571 | OnError(47);\r | |
572 | return;\r | |
573 | }; \r | |
7cc204bf | 574 | \r |
aa60d156 | 575 | if(mifare_ultra_halt()) {\r |
576 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
577 | OnError(0);\r | |
578 | return;\r | |
579 | };\r | |
7cc204bf | 580 | \r |
aa60d156 | 581 | cmd_send(CMD_ACK,1,0,0,0,0);\r |
baeaf579 | 582 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
583 | LEDsoff();\r | |
7cc204bf | 584 | }\r |
585 | \r | |
586 | // Return 1 if the nonce is invalid else return 0\r | |
6a1f2d82 | 587 | int valid_nonce(uint32_t Nt, uint32_t NtEnc, uint32_t Ks1, uint8_t *parity) {\r |
7cc204bf | 588 | return ((oddparity((Nt >> 24) & 0xFF) == ((parity[0]) ^ oddparity((NtEnc >> 24) & 0xFF) ^ BIT(Ks1,16))) & \\r |
8556b852 M |
589 | (oddparity((Nt >> 16) & 0xFF) == ((parity[1]) ^ oddparity((NtEnc >> 16) & 0xFF) ^ BIT(Ks1,8))) & \\r |
590 | (oddparity((Nt >> 8) & 0xFF) == ((parity[2]) ^ oddparity((NtEnc >> 8) & 0xFF) ^ BIT(Ks1,0)))) ? 1 : 0;\r | |
591 | }\r | |
592 | \r | |
9492e0b0 | 593 | \r |
8556b852 M |
594 | //-----------------------------------------------------------------------------\r |
595 | // MIFARE nested authentication. \r | |
596 | // \r | |
597 | //-----------------------------------------------------------------------------\r | |
9492e0b0 | 598 | void MifareNested(uint32_t arg0, uint32_t arg1, uint32_t calibrate, uint8_t *datain)\r |
8556b852 M |
599 | {\r |
600 | // params\r | |
9492e0b0 | 601 | uint8_t blockNo = arg0 & 0xff;\r |
602 | uint8_t keyType = (arg0 >> 8) & 0xff;\r | |
603 | uint8_t targetBlockNo = arg1 & 0xff;\r | |
604 | uint8_t targetKeyType = (arg1 >> 8) & 0xff;\r | |
8556b852 M |
605 | uint64_t ui64Key = 0;\r |
606 | \r | |
607 | ui64Key = bytes_to_num(datain, 6);\r | |
608 | \r | |
609 | // variables\r | |
9492e0b0 | 610 | uint16_t rtr, i, j, len;\r |
611 | uint16_t davg;\r | |
612 | static uint16_t dmin, dmax;\r | |
1c611bbd | 613 | uint8_t uid[10];\r |
6a1f2d82 | 614 | uint32_t cuid, nt1, nt2, nttmp, nttest, ks1;\r |
615 | uint8_t par[1];\r | |
9492e0b0 | 616 | uint32_t target_nt[2], target_ks[2];\r |
617 | \r | |
8556b852 | 618 | uint8_t par_array[4];\r |
9492e0b0 | 619 | uint16_t ncount = 0;\r |
8556b852 M |
620 | struct Crypto1State mpcs = {0, 0};\r |
621 | struct Crypto1State *pcs;\r | |
622 | pcs = &mpcs;\r | |
f71f4deb | 623 | uint8_t receivedAnswer[MAX_MIFARE_FRAME_SIZE];\r |
8556b852 | 624 | \r |
9492e0b0 | 625 | uint32_t auth1_time, auth2_time;\r |
626 | static uint16_t delta_time;\r | |
627 | \r | |
f71f4deb | 628 | // free eventually allocated BigBuf memory\r |
629 | BigBuf_free();\r | |
8556b852 | 630 | // clear trace\r |
3000dc4e MHS |
631 | clear_trace();\r |
632 | set_tracing(false);\r | |
8556b852 | 633 | \r |
7bc95e2e | 634 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
8556b852 M |
635 | \r |
636 | LED_A_ON();\r | |
8556b852 M |
637 | LED_C_OFF();\r |
638 | \r | |
8556b852 | 639 | \r |
9492e0b0 | 640 | // statistics on nonce distance\r |
641 | if (calibrate) { // for first call only. Otherwise reuse previous calibration\r | |
642 | LED_B_ON();\r | |
3fe4ff4f | 643 | WDT_HIT();\r |
8556b852 | 644 | \r |
9492e0b0 | 645 | davg = dmax = 0;\r |
646 | dmin = 2000;\r | |
647 | delta_time = 0;\r | |
8556b852 | 648 | \r |
9492e0b0 | 649 | for (rtr = 0; rtr < 17; rtr++) {\r |
8556b852 | 650 | \r |
9492e0b0 | 651 | // prepare next select. No need to power down the card.\r |
652 | if(mifare_classic_halt(pcs, cuid)) {\r | |
653 | if (MF_DBGLEVEL >= 1) Dbprintf("Nested: Halt error");\r | |
654 | rtr--;\r | |
655 | continue;\r | |
656 | }\r | |
657 | \r | |
658 | if(!iso14443a_select_card(uid, NULL, &cuid)) {\r | |
659 | if (MF_DBGLEVEL >= 1) Dbprintf("Nested: Can't select card");\r | |
660 | rtr--;\r | |
661 | continue;\r | |
662 | };\r | |
663 | \r | |
664 | auth1_time = 0;\r | |
665 | if(mifare_classic_authex(pcs, cuid, blockNo, keyType, ui64Key, AUTH_FIRST, &nt1, &auth1_time)) {\r | |
666 | if (MF_DBGLEVEL >= 1) Dbprintf("Nested: Auth1 error");\r | |
667 | rtr--;\r | |
668 | continue;\r | |
669 | };\r | |
670 | \r | |
671 | if (delta_time) {\r | |
672 | auth2_time = auth1_time + delta_time;\r | |
673 | } else {\r | |
674 | auth2_time = 0;\r | |
675 | }\r | |
676 | if(mifare_classic_authex(pcs, cuid, blockNo, keyType, ui64Key, AUTH_NESTED, &nt2, &auth2_time)) {\r | |
677 | if (MF_DBGLEVEL >= 1) Dbprintf("Nested: Auth2 error");\r | |
678 | rtr--;\r | |
679 | continue;\r | |
680 | };\r | |
681 | \r | |
b19bd5d6 | 682 | nttmp = prng_successor(nt1, 100); //NXP Mifare is typical around 840,but for some unlicensed/compatible mifare card this can be 160\r |
683 | for (i = 101; i < 1200; i++) {\r | |
9492e0b0 | 684 | nttmp = prng_successor(nttmp, 1);\r |
685 | if (nttmp == nt2) break;\r | |
686 | }\r | |
687 | \r | |
688 | if (i != 1200) {\r | |
689 | if (rtr != 0) {\r | |
690 | davg += i;\r | |
691 | dmin = MIN(dmin, i);\r | |
692 | dmax = MAX(dmax, i);\r | |
693 | }\r | |
694 | else {\r | |
695 | delta_time = auth2_time - auth1_time + 32; // allow some slack for proper timing\r | |
696 | }\r | |
697 | if (MF_DBGLEVEL >= 3) Dbprintf("Nested: calibrating... ntdist=%d", i);\r | |
698 | }\r | |
8556b852 M |
699 | }\r |
700 | \r | |
9492e0b0 | 701 | if (rtr <= 1) return;\r |
8556b852 | 702 | \r |
9492e0b0 | 703 | davg = (davg + (rtr - 1)/2) / (rtr - 1);\r |
704 | \r | |
705 | if (MF_DBGLEVEL >= 3) Dbprintf("min=%d max=%d avg=%d, delta_time=%d", dmin, dmax, davg, delta_time);\r | |
8556b852 | 706 | \r |
9492e0b0 | 707 | dmin = davg - 2;\r |
708 | dmax = davg + 2;\r | |
709 | \r | |
710 | LED_B_OFF();\r | |
711 | \r | |
712 | }\r | |
8556b852 M |
713 | // ------------------------------------------------------------------------------------------------- \r |
714 | \r | |
715 | LED_C_ON();\r | |
716 | \r | |
717 | // get crypted nonces for target sector\r | |
9492e0b0 | 718 | for(i=0; i < 2; i++) { // look for exactly two different nonces\r |
8556b852 | 719 | \r |
9492e0b0 | 720 | target_nt[i] = 0;\r |
721 | while(target_nt[i] == 0) { // continue until we have an unambiguous nonce\r | |
8556b852 | 722 | \r |
9492e0b0 | 723 | // prepare next select. No need to power down the card.\r |
724 | if(mifare_classic_halt(pcs, cuid)) {\r | |
725 | if (MF_DBGLEVEL >= 1) Dbprintf("Nested: Halt error");\r | |
726 | continue;\r | |
727 | }\r | |
8556b852 | 728 | \r |
9492e0b0 | 729 | if(!iso14443a_select_card(uid, NULL, &cuid)) {\r |
730 | if (MF_DBGLEVEL >= 1) Dbprintf("Nested: Can't select card");\r | |
731 | continue;\r | |
732 | };\r | |
8556b852 | 733 | \r |
9492e0b0 | 734 | auth1_time = 0;\r |
735 | if(mifare_classic_authex(pcs, cuid, blockNo, keyType, ui64Key, AUTH_FIRST, &nt1, &auth1_time)) {\r | |
736 | if (MF_DBGLEVEL >= 1) Dbprintf("Nested: Auth1 error");\r | |
737 | continue;\r | |
738 | };\r | |
8556b852 | 739 | \r |
9492e0b0 | 740 | // nested authentication\r |
741 | auth2_time = auth1_time + delta_time;\r | |
6a1f2d82 | 742 | len = mifare_sendcmd_shortex(pcs, AUTH_NESTED, 0x60 + (targetKeyType & 0x01), targetBlockNo, receivedAnswer, par, &auth2_time);\r |
9492e0b0 | 743 | if (len != 4) {\r |
744 | if (MF_DBGLEVEL >= 1) Dbprintf("Nested: Auth2 error len=%d", len);\r | |
745 | continue;\r | |
746 | };\r | |
8556b852 | 747 | \r |
9492e0b0 | 748 | nt2 = bytes_to_num(receivedAnswer, 4); \r |
6a1f2d82 | 749 | if (MF_DBGLEVEL >= 3) Dbprintf("Nonce#%d: Testing nt1=%08x nt2enc=%08x nt2par=%02x", i+1, nt1, nt2, par[0]);\r |
8556b852 | 750 | \r |
9492e0b0 | 751 | // Parity validity check\r |
752 | for (j = 0; j < 4; j++) {\r | |
6a1f2d82 | 753 | par_array[j] = (oddparity(receivedAnswer[j]) != ((par[0] >> (7-j)) & 0x01));\r |
9492e0b0 | 754 | }\r |
755 | \r | |
756 | ncount = 0;\r | |
757 | nttest = prng_successor(nt1, dmin - 1);\r | |
758 | for (j = dmin; j < dmax + 1; j++) {\r | |
759 | nttest = prng_successor(nttest, 1);\r | |
760 | ks1 = nt2 ^ nttest;\r | |
761 | \r | |
762 | if (valid_nonce(nttest, nt2, ks1, par_array)){\r | |
763 | if (ncount > 0) { // we are only interested in disambiguous nonces, try again\r | |
764 | if (MF_DBGLEVEL >= 3) Dbprintf("Nonce#%d: dismissed (ambigous), ntdist=%d", i+1, j);\r | |
765 | target_nt[i] = 0;\r | |
766 | break;\r | |
767 | }\r | |
768 | target_nt[i] = nttest;\r | |
769 | target_ks[i] = ks1;\r | |
770 | ncount++;\r | |
771 | if (i == 1 && target_nt[1] == target_nt[0]) { // we need two different nonces\r | |
772 | target_nt[i] = 0;\r | |
773 | if (MF_DBGLEVEL >= 3) Dbprintf("Nonce#2: dismissed (= nonce#1), ntdist=%d", j);\r | |
8556b852 M |
774 | break;\r |
775 | }\r | |
9492e0b0 | 776 | if (MF_DBGLEVEL >= 3) Dbprintf("Nonce#%d: valid, ntdist=%d", i+1, j);\r |
8556b852 | 777 | }\r |
8556b852 | 778 | }\r |
9492e0b0 | 779 | if (target_nt[i] == 0 && j == dmax+1 && MF_DBGLEVEL >= 3) Dbprintf("Nonce#%d: dismissed (all invalid)", i+1);\r |
8556b852 M |
780 | }\r |
781 | }\r | |
782 | \r | |
783 | LED_C_OFF();\r | |
784 | \r | |
785 | // ----------------------------- crypto1 destroy\r | |
786 | crypto1_destroy(pcs);\r | |
787 | \r | |
9492e0b0 | 788 | byte_t buf[4 + 4 * 4];\r |
789 | memcpy(buf, &cuid, 4);\r | |
790 | memcpy(buf+4, &target_nt[0], 4);\r | |
791 | memcpy(buf+8, &target_ks[0], 4);\r | |
792 | memcpy(buf+12, &target_nt[1], 4);\r | |
793 | memcpy(buf+16, &target_ks[1], 4);\r | |
8556b852 M |
794 | \r |
795 | LED_B_ON();\r | |
9492e0b0 | 796 | cmd_send(CMD_ACK, 0, 2, targetBlockNo + (targetKeyType * 0x100), buf, sizeof(buf));\r |
6e82300d | 797 | LED_B_OFF();\r |
8556b852 | 798 | \r |
9492e0b0 | 799 | if (MF_DBGLEVEL >= 3) DbpString("NESTED FINISHED");\r |
8556b852 | 800 | \r |
8556b852 M |
801 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
802 | LEDsoff();\r | |
3000dc4e | 803 | set_tracing(TRUE);\r |
8556b852 M |
804 | }\r |
805 | \r | |
806 | //-----------------------------------------------------------------------------\r | |
9492e0b0 | 807 | // MIFARE check keys. key count up to 85. \r |
8556b852 M |
808 | // \r |
809 | //-----------------------------------------------------------------------------\r | |
810 | void MifareChkKeys(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain)\r | |
811 | {\r | |
812 | // params\r | |
813 | uint8_t blockNo = arg0;\r | |
814 | uint8_t keyType = arg1;\r | |
815 | uint8_t keyCount = arg2;\r | |
816 | uint64_t ui64Key = 0;\r | |
817 | \r | |
818 | // variables\r | |
819 | int i;\r | |
820 | byte_t isOK = 0;\r | |
1c611bbd | 821 | uint8_t uid[10];\r |
8556b852 M |
822 | uint32_t cuid;\r |
823 | struct Crypto1State mpcs = {0, 0};\r | |
824 | struct Crypto1State *pcs;\r | |
825 | pcs = &mpcs;\r | |
826 | \r | |
827 | // clear debug level\r | |
828 | int OLD_MF_DBGLEVEL = MF_DBGLEVEL; \r | |
829 | MF_DBGLEVEL = MF_DBG_NONE;\r | |
830 | \r | |
831 | // clear trace\r | |
3000dc4e MHS |
832 | clear_trace();\r |
833 | set_tracing(TRUE);\r | |
8556b852 | 834 | \r |
7bc95e2e | 835 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
8556b852 M |
836 | \r |
837 | LED_A_ON();\r | |
838 | LED_B_OFF();\r | |
839 | LED_C_OFF();\r | |
840 | \r | |
8556b852 | 841 | for (i = 0; i < keyCount; i++) {\r |
9492e0b0 | 842 | if(mifare_classic_halt(pcs, cuid)) {\r |
843 | if (MF_DBGLEVEL >= 1) Dbprintf("ChkKeys: Halt error");\r | |
844 | }\r | |
8556b852 M |
845 | \r |
846 | if(!iso14443a_select_card(uid, NULL, &cuid)) {\r | |
9492e0b0 | 847 | if (OLD_MF_DBGLEVEL >= 1) Dbprintf("ChkKeys: Can't select card");\r |
8556b852 M |
848 | break;\r |
849 | };\r | |
850 | \r | |
851 | ui64Key = bytes_to_num(datain + i * 6, 6);\r | |
852 | if(mifare_classic_auth(pcs, cuid, blockNo, keyType, ui64Key, AUTH_FIRST)) {\r | |
853 | continue;\r | |
854 | };\r | |
855 | \r | |
856 | isOK = 1;\r | |
857 | break;\r | |
858 | }\r | |
859 | \r | |
860 | // ----------------------------- crypto1 destroy\r | |
861 | crypto1_destroy(pcs);\r | |
862 | \r | |
8556b852 | 863 | LED_B_ON();\r |
6e82300d | 864 | cmd_send(CMD_ACK,isOK,0,0,datain + i * 6,6);\r |
8556b852 M |
865 | LED_B_OFF();\r |
866 | \r | |
8556b852 M |
867 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
868 | LEDsoff();\r | |
869 | \r | |
870 | // restore debug level\r | |
871 | MF_DBGLEVEL = OLD_MF_DBGLEVEL; \r | |
872 | }\r | |
873 | \r | |
874 | //-----------------------------------------------------------------------------\r | |
875 | // MIFARE commands set debug level\r | |
876 | // \r | |
877 | //-----------------------------------------------------------------------------\r | |
878 | void MifareSetDbgLvl(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain){\r | |
879 | MF_DBGLEVEL = arg0;\r | |
880 | Dbprintf("Debug level: %d", MF_DBGLEVEL);\r | |
881 | }\r | |
882 | \r | |
883 | //-----------------------------------------------------------------------------\r | |
884 | // Work with emulator memory\r | |
885 | // \r | |
886 | //-----------------------------------------------------------------------------\r | |
887 | void MifareEMemClr(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain){\r | |
888 | emlClearMem();\r | |
889 | }\r | |
890 | \r | |
891 | void MifareEMemSet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain){\r | |
892 | emlSetMem(datain, arg0, arg1); // data, block num, blocks count\r | |
893 | }\r | |
894 | \r | |
895 | void MifareEMemGet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain){\r | |
3fe4ff4f | 896 | byte_t buf[USB_CMD_DATA_SIZE];\r |
baeaf579 | 897 | emlGetMem(buf, arg0, arg1); // data, block num, blocks count (max 4)\r |
8556b852 M |
898 | \r |
899 | LED_B_ON();\r | |
3fe4ff4f | 900 | cmd_send(CMD_ACK,arg0,arg1,0,buf,USB_CMD_DATA_SIZE);\r |
8556b852 M |
901 | LED_B_OFF();\r |
902 | }\r | |
903 | \r | |
904 | //-----------------------------------------------------------------------------\r | |
905 | // Load a card into the emulator memory\r | |
906 | // \r | |
907 | //-----------------------------------------------------------------------------\r | |
908 | void MifareECardLoad(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain){\r | |
baeaf579 | 909 | uint8_t numSectors = arg0;\r |
8556b852 M |
910 | uint8_t keyType = arg1;\r |
911 | uint64_t ui64Key = 0;\r | |
912 | uint32_t cuid;\r | |
913 | struct Crypto1State mpcs = {0, 0};\r | |
914 | struct Crypto1State *pcs;\r | |
915 | pcs = &mpcs;\r | |
916 | \r | |
917 | // variables\r | |
918 | byte_t dataoutbuf[16];\r | |
ab8b654e | 919 | byte_t dataoutbuf2[16];\r |
1c611bbd | 920 | uint8_t uid[10];\r |
8556b852 M |
921 | \r |
922 | // clear trace\r | |
3000dc4e MHS |
923 | clear_trace();\r |
924 | set_tracing(false);\r | |
8556b852 | 925 | \r |
7bc95e2e | 926 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
8556b852 M |
927 | \r |
928 | LED_A_ON();\r | |
929 | LED_B_OFF();\r | |
930 | LED_C_OFF();\r | |
931 | \r | |
baeaf579 | 932 | bool isOK = true;\r |
933 | \r | |
934 | if(!iso14443a_select_card(uid, NULL, &cuid)) {\r | |
935 | isOK = false;\r | |
936 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r | |
937 | }\r | |
8556b852 | 938 | \r |
baeaf579 | 939 | for (uint8_t sectorNo = 0; isOK && sectorNo < numSectors; sectorNo++) {\r |
940 | ui64Key = emlGetKey(sectorNo, keyType);\r | |
941 | if (sectorNo == 0){\r | |
942 | if(isOK && mifare_classic_auth(pcs, cuid, FirstBlockOfSector(sectorNo), keyType, ui64Key, AUTH_FIRST)) {\r | |
943 | isOK = false;\r | |
944 | if (MF_DBGLEVEL >= 1) Dbprintf("Sector[%2d]. Auth error", sectorNo);\r | |
8556b852 | 945 | break;\r |
baeaf579 | 946 | }\r |
947 | } else {\r | |
948 | if(isOK && mifare_classic_auth(pcs, cuid, FirstBlockOfSector(sectorNo), keyType, ui64Key, AUTH_NESTED)) {\r | |
949 | isOK = false;\r | |
950 | if (MF_DBGLEVEL >= 1) Dbprintf("Sector[%2d]. Auth nested error", sectorNo);\r | |
8556b852 | 951 | break;\r |
baeaf579 | 952 | }\r |
953 | }\r | |
954 | \r | |
955 | for (uint8_t blockNo = 0; isOK && blockNo < NumBlocksPerSector(sectorNo); blockNo++) {\r | |
956 | if(isOK && mifare_classic_readblock(pcs, cuid, FirstBlockOfSector(sectorNo) + blockNo, dataoutbuf)) {\r | |
957 | isOK = false;\r | |
958 | if (MF_DBGLEVEL >= 1) Dbprintf("Error reading sector %2d block %2d", sectorNo, blockNo);\r | |
ab8b654e M |
959 | break;\r |
960 | };\r | |
baeaf579 | 961 | if (isOK) {\r |
962 | if (blockNo < NumBlocksPerSector(sectorNo) - 1) {\r | |
963 | emlSetMem(dataoutbuf, FirstBlockOfSector(sectorNo) + blockNo, 1);\r | |
964 | } else { // sector trailer, keep the keys, set only the AC\r | |
965 | emlGetMem(dataoutbuf2, FirstBlockOfSector(sectorNo) + blockNo, 1);\r | |
966 | memcpy(&dataoutbuf2[6], &dataoutbuf[6], 4);\r | |
967 | emlSetMem(dataoutbuf2, FirstBlockOfSector(sectorNo) + blockNo, 1);\r | |
968 | }\r | |
969 | }\r | |
8556b852 M |
970 | }\r |
971 | \r | |
baeaf579 | 972 | }\r |
973 | \r | |
974 | if(mifare_classic_halt(pcs, cuid)) {\r | |
975 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
976 | };\r | |
8556b852 M |
977 | \r |
978 | // ----------------------------- crypto1 destroy\r | |
979 | crypto1_destroy(pcs);\r | |
ab8b654e M |
980 | \r |
981 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r | |
982 | LEDsoff();\r | |
8556b852 M |
983 | \r |
984 | if (MF_DBGLEVEL >= 2) DbpString("EMUL FILL SECTORS FINISHED");\r | |
985 | \r | |
8556b852 M |
986 | }\r |
987 | \r | |
0675f200 M |
988 | \r |
989 | //-----------------------------------------------------------------------------\r | |
990 | // Work with "magic Chinese" card (email him: ouyangweidaxian@live.cn)\r | |
991 | // \r | |
992 | //-----------------------------------------------------------------------------\r | |
993 | void MifareCSetBlock(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain){\r | |
994 | \r | |
995 | // params\r | |
996 | uint8_t needWipe = arg0;\r | |
208a0166 M |
997 | // bit 0 - need get UID\r |
998 | // bit 1 - need wupC\r | |
999 | // bit 2 - need HALT after sequence\r | |
1000 | // bit 3 - need init FPGA and field before sequence\r | |
1001 | // bit 4 - need reset FPGA and LED\r | |
1002 | uint8_t workFlags = arg1;\r | |
0675f200 M |
1003 | uint8_t blockNo = arg2;\r |
1004 | \r | |
1005 | // card commands\r | |
1006 | uint8_t wupC1[] = { 0x40 }; \r | |
1007 | uint8_t wupC2[] = { 0x43 }; \r | |
1008 | uint8_t wipeC[] = { 0x41 }; \r | |
1009 | \r | |
1010 | // variables\r | |
1011 | byte_t isOK = 0;\r | |
3fe4ff4f | 1012 | uint8_t uid[10] = {0x00};\r |
1013 | uint8_t d_block[18] = {0x00};\r | |
0675f200 M |
1014 | uint32_t cuid;\r |
1015 | \r | |
f71f4deb | 1016 | uint8_t receivedAnswer[MAX_MIFARE_FRAME_SIZE];\r |
1017 | uint8_t receivedAnswerPar[MAX_MIFARE_PARITY_SIZE];\r | |
6a1f2d82 | 1018 | \r |
3fe4ff4f | 1019 | // reset FPGA and LED\r |
208a0166 | 1020 | if (workFlags & 0x08) {\r |
208a0166 M |
1021 | LED_A_ON();\r |
1022 | LED_B_OFF();\r | |
1023 | LED_C_OFF();\r | |
0675f200 | 1024 | \r |
3000dc4e MHS |
1025 | clear_trace();\r |
1026 | set_tracing(TRUE);\r | |
3fe4ff4f | 1027 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
208a0166 | 1028 | }\r |
0675f200 M |
1029 | \r |
1030 | while (true) {\r | |
3fe4ff4f | 1031 | \r |
0675f200 | 1032 | // get UID from chip\r |
208a0166 | 1033 | if (workFlags & 0x01) {\r |
0675f200 M |
1034 | if(!iso14443a_select_card(uid, NULL, &cuid)) {\r |
1035 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r | |
3ac59c7f | 1036 | //break;\r |
0675f200 M |
1037 | };\r |
1038 | \r | |
1039 | if(mifare_classic_halt(NULL, cuid)) {\r | |
1040 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
3ac59c7f | 1041 | //break;\r |
0675f200 M |
1042 | };\r |
1043 | };\r | |
1044 | \r | |
1045 | // reset chip\r | |
1046 | if (needWipe){\r | |
6a1f2d82 | 1047 | ReaderTransmitBitsPar(wupC1,7,0, NULL);\r |
1048 | if(!ReaderReceive(receivedAnswer, receivedAnswerPar) || (receivedAnswer[0] != 0x0a)) {\r | |
0675f200 M |
1049 | if (MF_DBGLEVEL >= 1) Dbprintf("wupC1 error");\r |
1050 | break;\r | |
1051 | };\r | |
1052 | \r | |
9492e0b0 | 1053 | ReaderTransmit(wipeC, sizeof(wipeC), NULL);\r |
6a1f2d82 | 1054 | if(!ReaderReceive(receivedAnswer, receivedAnswerPar) || (receivedAnswer[0] != 0x0a)) {\r |
0675f200 M |
1055 | if (MF_DBGLEVEL >= 1) Dbprintf("wipeC error");\r |
1056 | break;\r | |
1057 | };\r | |
1058 | \r | |
1059 | if(mifare_classic_halt(NULL, cuid)) {\r | |
1060 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
1061 | break;\r | |
1062 | };\r | |
1063 | }; \r | |
1064 | \r | |
545a1f38 | 1065 | // write block\r |
208a0166 | 1066 | if (workFlags & 0x02) {\r |
6a1f2d82 | 1067 | ReaderTransmitBitsPar(wupC1,7,0, NULL);\r |
1068 | if(!ReaderReceive(receivedAnswer, receivedAnswerPar) || (receivedAnswer[0] != 0x0a)) {\r | |
208a0166 M |
1069 | if (MF_DBGLEVEL >= 1) Dbprintf("wupC1 error");\r |
1070 | break;\r | |
1071 | };\r | |
0675f200 | 1072 | \r |
9492e0b0 | 1073 | ReaderTransmit(wupC2, sizeof(wupC2), NULL);\r |
6a1f2d82 | 1074 | if(!ReaderReceive(receivedAnswer, receivedAnswerPar) || (receivedAnswer[0] != 0x0a)) {\r |
208a0166 M |
1075 | if (MF_DBGLEVEL >= 1) Dbprintf("wupC2 error");\r |
1076 | break;\r | |
1077 | };\r | |
1078 | }\r | |
0675f200 | 1079 | \r |
6a1f2d82 | 1080 | if ((mifare_sendcmd_short(NULL, 0, 0xA0, blockNo, receivedAnswer, receivedAnswerPar, NULL) != 1) || (receivedAnswer[0] != 0x0a)) {\r |
0675f200 M |
1081 | if (MF_DBGLEVEL >= 1) Dbprintf("write block send command error");\r |
1082 | break;\r | |
1083 | };\r | |
1084 | \r | |
1085 | memcpy(d_block, datain, 16);\r | |
1086 | AppendCrc14443a(d_block, 16);\r | |
1087 | \r | |
9492e0b0 | 1088 | ReaderTransmit(d_block, sizeof(d_block), NULL);\r |
6a1f2d82 | 1089 | if ((ReaderReceive(receivedAnswer, receivedAnswerPar) != 1) || (receivedAnswer[0] != 0x0a)) {\r |
0675f200 M |
1090 | if (MF_DBGLEVEL >= 1) Dbprintf("write block send data error");\r |
1091 | break;\r | |
1092 | }; \r | |
1093 | \r | |
208a0166 M |
1094 | if (workFlags & 0x04) {\r |
1095 | if (mifare_classic_halt(NULL, cuid)) {\r | |
1096 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
1097 | break;\r | |
1098 | };\r | |
1099 | }\r | |
0675f200 M |
1100 | \r |
1101 | isOK = 1;\r | |
1102 | break;\r | |
1103 | }\r | |
1104 | \r | |
0675f200 | 1105 | LED_B_ON();\r |
baeaf579 | 1106 | cmd_send(CMD_ACK,isOK,0,0,uid,4);\r |
0675f200 M |
1107 | LED_B_OFF();\r |
1108 | \r | |
545a1f38 | 1109 | if ((workFlags & 0x10) || (!isOK)) {\r |
208a0166 M |
1110 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
1111 | LEDsoff();\r | |
1112 | }\r | |
0675f200 | 1113 | }\r |
545a1f38 | 1114 | \r |
baeaf579 | 1115 | \r |
545a1f38 M |
1116 | void MifareCGetBlock(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain){\r |
1117 | \r | |
1118 | // params\r | |
1119 | // bit 1 - need wupC\r | |
1120 | // bit 2 - need HALT after sequence\r | |
1121 | // bit 3 - need init FPGA and field before sequence\r | |
1122 | // bit 4 - need reset FPGA and LED\r | |
1123 | uint8_t workFlags = arg0;\r | |
1124 | uint8_t blockNo = arg2;\r | |
1125 | \r | |
1126 | // card commands\r | |
1127 | uint8_t wupC1[] = { 0x40 }; \r | |
1128 | uint8_t wupC2[] = { 0x43 }; \r | |
1129 | \r | |
1130 | // variables\r | |
1131 | byte_t isOK = 0;\r | |
3fe4ff4f | 1132 | uint8_t data[18] = {0x00};\r |
545a1f38 M |
1133 | uint32_t cuid = 0;\r |
1134 | \r | |
f71f4deb | 1135 | uint8_t receivedAnswer[MAX_MIFARE_FRAME_SIZE];\r |
1136 | uint8_t receivedAnswerPar[MAX_MIFARE_PARITY_SIZE];\r | |
545a1f38 M |
1137 | \r |
1138 | if (workFlags & 0x08) {\r | |
545a1f38 M |
1139 | LED_A_ON();\r |
1140 | LED_B_OFF();\r | |
1141 | LED_C_OFF();\r | |
1142 | \r | |
3000dc4e MHS |
1143 | clear_trace();\r |
1144 | set_tracing(TRUE);\r | |
3fe4ff4f | 1145 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
545a1f38 M |
1146 | }\r |
1147 | \r | |
1148 | while (true) {\r | |
1149 | if (workFlags & 0x02) {\r | |
7bc95e2e | 1150 | ReaderTransmitBitsPar(wupC1,7,0, NULL);\r |
6a1f2d82 | 1151 | if(!ReaderReceive(receivedAnswer, receivedAnswerPar) || (receivedAnswer[0] != 0x0a)) {\r |
545a1f38 M |
1152 | if (MF_DBGLEVEL >= 1) Dbprintf("wupC1 error");\r |
1153 | break;\r | |
1154 | };\r | |
1155 | \r | |
9492e0b0 | 1156 | ReaderTransmit(wupC2, sizeof(wupC2), NULL);\r |
6a1f2d82 | 1157 | if(!ReaderReceive(receivedAnswer, receivedAnswerPar) || (receivedAnswer[0] != 0x0a)) {\r |
545a1f38 M |
1158 | if (MF_DBGLEVEL >= 1) Dbprintf("wupC2 error");\r |
1159 | break;\r | |
1160 | };\r | |
1161 | }\r | |
1162 | \r | |
1163 | // read block\r | |
6a1f2d82 | 1164 | if ((mifare_sendcmd_short(NULL, 0, 0x30, blockNo, receivedAnswer, receivedAnswerPar, NULL) != 18)) {\r |
545a1f38 M |
1165 | if (MF_DBGLEVEL >= 1) Dbprintf("read block send command error");\r |
1166 | break;\r | |
1167 | };\r | |
1168 | memcpy(data, receivedAnswer, 18);\r | |
1169 | \r | |
1170 | if (workFlags & 0x04) {\r | |
1171 | if (mifare_classic_halt(NULL, cuid)) {\r | |
1172 | if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
1173 | break;\r | |
1174 | };\r | |
1175 | }\r | |
1176 | \r | |
1177 | isOK = 1;\r | |
1178 | break;\r | |
1179 | }\r | |
1180 | \r | |
545a1f38 | 1181 | LED_B_ON();\r |
baeaf579 | 1182 | cmd_send(CMD_ACK,isOK,0,0,data,18);\r |
545a1f38 M |
1183 | LED_B_OFF();\r |
1184 | \r | |
1185 | if ((workFlags & 0x10) || (!isOK)) {\r | |
545a1f38 M |
1186 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
1187 | LEDsoff();\r | |
1188 | }\r | |
1189 | }\r | |
1190 | \r | |
3fe4ff4f | 1191 | void MifareCIdent(){\r |
1192 | \r | |
1193 | // card commands\r | |
1194 | uint8_t wupC1[] = { 0x40 }; \r | |
1195 | uint8_t wupC2[] = { 0x43 }; \r | |
1196 | \r | |
1197 | // variables\r | |
1198 | byte_t isOK = 1;\r | |
1199 | \r | |
f71f4deb | 1200 | uint8_t receivedAnswer[MAX_MIFARE_FRAME_SIZE];\r |
1201 | uint8_t receivedAnswerPar[MAX_MIFARE_PARITY_SIZE];\r | |
3fe4ff4f | 1202 | \r |
1203 | ReaderTransmitBitsPar(wupC1,7,0, NULL);\r | |
1204 | if(!ReaderReceive(receivedAnswer, receivedAnswerPar) || (receivedAnswer[0] != 0x0a)) {\r | |
1205 | isOK = 0;\r | |
1206 | };\r | |
1207 | \r | |
1208 | ReaderTransmit(wupC2, sizeof(wupC2), NULL);\r | |
1209 | if(!ReaderReceive(receivedAnswer, receivedAnswerPar) || (receivedAnswer[0] != 0x0a)) {\r | |
1210 | isOK = 0;\r | |
1211 | };\r | |
1212 | \r | |
1213 | if (mifare_classic_halt(NULL, 0)) {\r | |
1214 | isOK = 0;\r | |
1215 | };\r | |
1216 | \r | |
1217 | cmd_send(CMD_ACK,isOK,0,0,0,0);\r | |
1218 | }\r | |
1219 | \r | |
add0504d | 1220 | void MifareCollectNonces(uint32_t arg0, uint32_t arg1){\r |
1221 | \r | |
1222 | BigBuf_free();\r | |
1223 | \r | |
1224 | uint32_t iterations = arg0;\r | |
1225 | uint8_t uid[10] = {0x00};\r | |
1226 | \r | |
1227 | uint8_t *response = BigBuf_malloc(MAX_MIFARE_FRAME_SIZE);\r | |
1228 | uint8_t *responsePar = BigBuf_malloc(MAX_MIFARE_PARITY_SIZE);\r | |
1229 | \r | |
1230 | uint8_t mf_auth[] = { 0x60,0x00,0xf5,0x7b };\r | |
1231 | \r | |
1232 | // get memory from BigBuf.\r | |
1233 | uint8_t *nonces = BigBuf_malloc(iterations * 4);\r | |
1234 | \r | |
1235 | LED_A_ON();\r | |
1236 | LED_B_OFF();\r | |
1237 | LED_C_OFF();\r | |
1238 | \r | |
1239 | clear_trace();\r | |
1240 | set_tracing(TRUE);\r | |
1241 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r | |
1242 | \r | |
1243 | for (int i = 0; i < iterations; i++) {\r | |
1244 | \r | |
1245 | WDT_HIT();\r | |
1246 | \r | |
1247 | // Test if the action was cancelled\r | |
1248 | if(BUTTON_PRESS()) break;\r | |
1249 | \r | |
1250 | // if(mifare_classic_halt(pcs, cuid)) {\r | |
1251 | // if (MF_DBGLEVEL >= 1) Dbprintf("Halt error");\r | |
1252 | //}\r | |
1253 | \r | |
1254 | if(!iso14443a_select_card(uid, NULL, NULL)) {\r | |
1255 | if (MF_DBGLEVEL >= 1) Dbprintf("Can't select card");\r | |
1256 | continue;\r | |
1257 | };\r | |
1258 | \r | |
1259 | // Transmit MIFARE_CLASSIC_AUTH.\r | |
1260 | ReaderTransmit(mf_auth, sizeof(mf_auth), NULL);\r | |
1261 | \r | |
1262 | // Receive the (4 Byte) "random" nonce\r | |
1263 | if (!ReaderReceive(response, responsePar)) {\r | |
1264 | if (MF_DBGLEVEL >= 1) Dbprintf("Couldn't receive tag nonce");\r | |
1265 | continue;\r | |
1266 | } \r | |
1267 | \r | |
1268 | nonces[i*4] = bytes_to_num(response, 4);\r | |
1269 | }\r | |
1270 | \r | |
1271 | int packLen = iterations * 4;\r | |
1272 | int packSize = 0;\r | |
1273 | int packNum = 0;\r | |
1274 | while (packLen > 0) {\r | |
1275 | packSize = MIN(USB_CMD_DATA_SIZE, packLen);\r | |
1276 | LED_B_ON();\r | |
1277 | cmd_send(CMD_ACK, 77, 0, packSize, nonces - packLen, packSize);\r | |
1278 | LED_B_OFF();\r | |
1279 | \r | |
1280 | packLen -= packSize;\r | |
1281 | packNum++;\r | |
1282 | }\r | |
add0504d | 1283 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r |
1284 | LEDsoff();\r | |
1285 | }\r | |
1286 | \r | |
1287 | //\r | |
3fe4ff4f | 1288 | // DESFIRE\r |
1289 | //\r | |
a631936e | 1290 | \r |
1291 | void Mifare_DES_Auth1(uint8_t arg0, uint8_t *datain){\r | |
1292 | \r | |
1293 | byte_t dataout[11] = {0x00};\r | |
1294 | uint8_t uid[10] = {0x00};\r | |
aa60d156 | 1295 | uint32_t cuid = 0x00;\r |
a631936e | 1296 | \r |
3000dc4e | 1297 | clear_trace();\r |
a631936e | 1298 | iso14443a_setup(FPGA_HF_ISO14443A_READER_LISTEN);\r |
1299 | \r | |
1300 | int len = iso14443a_select_card(uid, NULL, &cuid);\r | |
1301 | if(!len) {\r | |
aa60d156 | 1302 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Can't select card");\r |
0ec548dc | 1303 | OnError(1);\r |
a631936e | 1304 | return;\r |
1305 | };\r | |
1306 | \r | |
1307 | if(mifare_desfire_des_auth1(cuid, dataout)){\r | |
aa60d156 | 1308 | if (MF_DBGLEVEL >= MF_DBG_ERROR) Dbprintf("Authentication part1: Fail.");\r |
0ec548dc | 1309 | OnError(4);\r |
a631936e | 1310 | return;\r |
1311 | }\r | |
1312 | \r | |
1313 | if (MF_DBGLEVEL >= MF_DBG_EXTENDED) DbpString("AUTH 1 FINISHED");\r | |
a631936e | 1314 | cmd_send(CMD_ACK,1,cuid,0,dataout, sizeof(dataout));\r |
1315 | }\r | |
1316 | \r | |
1317 | void Mifare_DES_Auth2(uint32_t arg0, uint8_t *datain){\r | |
1318 | \r | |
1319 | uint32_t cuid = arg0;\r | |
1320 | uint8_t key[16] = {0x00};\r | |
a631936e | 1321 | byte_t dataout[12] = {0x00};\r |
aa60d156 | 1322 | byte_t isOK = 0;\r |
a631936e | 1323 | \r |
1324 | memcpy(key, datain, 16);\r | |
1325 | \r | |
1326 | isOK = mifare_desfire_des_auth2(cuid, key, dataout);\r | |
1327 | \r | |
1328 | if( isOK) {\r | |
aa60d156 | 1329 | if (MF_DBGLEVEL >= MF_DBG_EXTENDED) Dbprintf("Authentication part2: Failed"); \r |
0ec548dc | 1330 | OnError(4);\r |
a631936e | 1331 | return;\r |
1332 | }\r | |
1333 | \r | |
aa60d156 | 1334 | if (MF_DBGLEVEL >= MF_DBG_EXTENDED) DbpString("AUTH 2 FINISHED");\r |
a631936e | 1335 | \r |
1336 | cmd_send(CMD_ACK, isOK, 0, 0, dataout, sizeof(dataout));\r | |
1337 | FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);\r | |
1338 | LEDsoff();\r | |
ce432659 | 1339 | } |