]> git.zerfleddert.de Git - proxmark3-svn/blame - client/cmdlft55xx.c
projects / proxmark3-svn / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
ADD: some more keys found on a pastebin
[proxmark3-svn] / client / cmdlft55xx.c
CommitLineData
54a942b0 1//-----------------------------------------------------------------------------\r
2//\r
3// This code is licensed to you under the terms of the GNU GPL, version 2 or,\r
4// at your option, any later version. See the LICENSE.txt file for the text of\r
5// the license.\r
6//-----------------------------------------------------------------------------\r
7// Low frequency T55xx commands\r
8//-----------------------------------------------------------------------------\r
9\r
10#include <stdio.h>\r
11#include <string.h>\r
12#include <inttypes.h>\r
224ce36e 13#include <time.h>\r
54a942b0 14#include "proxmark3.h"\r
15#include "ui.h"\r
16#include "graph.h"\r
13d77ef9 17#include "cmdmain.h"\r
54a942b0 18#include "cmdparser.h"\r
19#include "cmddata.h"\r
20#include "cmdlf.h"\r
21#include "cmdlft55xx.h"\r
13d77ef9 22#include "util.h"\r
23#include "data.h"\r
24#include "lfdemod.h"\r
25#include "../common/crc.h"\r
26#include "../common/iso14443crc.h"\r
27#include "cmdhf14a.h"\r
28\r
29#define CONFIGURATION_BLOCK 0x00\r
30#define TRACE_BLOCK 0x01\r
952a812c 31#define T55x7_PWD 0x00000010\r
13d77ef9 32\r
33// Default configuration\r
34t55xx_conf_block_t config = { .modulation = DEMOD_ASK, .inverted = FALSE, .offset = 0x00, .block0 = 0x00};\r
35\r
36int usage_t55xx_config(){\r
37 PrintAndLog("Usage: lf t55xx config [d <demodulation>] [i 1] [o <offset>]");\r
38 PrintAndLog("Options: ");\r
39 PrintAndLog(" h This help");\r
40 PrintAndLog(" b <8|16|32|40|50|64|100|128> Set bitrate");\r
e98572a1 41 PrintAndLog(" d <FSK|FSK1|FSK1a|FSK2|FSK2a|ASK|PSK1|PSK2|NRZ|BI|BIa> Set demodulation FSK / ASK / PSK / NRZ / Biphase / Biphase A");\r
13d77ef9 42 PrintAndLog(" i [1] Invert data signal, defaults to normal");\r
43 PrintAndLog(" o [offset] Set offset, where data should start decode in bitstream");\r
44 PrintAndLog("");\r
45 PrintAndLog("Examples:");\r
46 PrintAndLog(" lf t55xx config d FSK - FSK demodulation");\r
47 PrintAndLog(" lf t55xx config d FSK i 1 - FSK demodulation, inverse data");\r
48 PrintAndLog(" lf t55xx config d FSK i 1 o 3 - FSK demodulation, inverse data, offset=3,start from position 3 to decode data");\r
49 PrintAndLog("");\r
50 return 0;\r
51}\r
52int usage_t55xx_read(){\r
53 PrintAndLog("Usage: lf t55xx read <block> <password>");\r
54 PrintAndLog(" <block>, block number to read. Between 0-7");\r
55 PrintAndLog(" <password>, OPTIONAL password (8 hex characters)");\r
56 PrintAndLog("");\r
57 PrintAndLog("Examples:");\r
58 PrintAndLog(" lf t55xx read 0 - read data from block 0");\r
59 PrintAndLog(" lf t55xx read 0 feedbeef - read data from block 0 password feedbeef");\r
60 PrintAndLog("");\r
61 return 0;\r
62}\r
63int usage_t55xx_write(){\r
64 PrintAndLog("Usage: lf t55xx wr <block> <data> [password]");\r
2d2f7d19 65 PrintAndLog(" <block>, block number to write. Between 0-7");\r
13d77ef9 66 PrintAndLog(" <data>, 4 bytes of data to write (8 hex characters)");\r
67 PrintAndLog(" [password], OPTIONAL password 4bytes (8 hex characters)");\r
68 PrintAndLog("");\r
69 PrintAndLog("Examples:");\r
2d2f7d19 70 PrintAndLog(" lf t55xx wr 3 11223344 - write 11223344 to block 3");\r
71 PrintAndLog(" lf t55xx wr 3 11223344 feedbeef - write 11223344 to block 3 password feedbeef");\r
13d77ef9 72 PrintAndLog("");\r
73 return 0;\r
74}\r
75int usage_t55xx_trace() {\r
76 PrintAndLog("Usage: lf t55xx trace [1]");\r
77 PrintAndLog(" [graph buffer data], if set, use Graphbuffer otherwise read data from tag.");\r
78 PrintAndLog("");\r
79 PrintAndLog("Examples:");\r
80 PrintAndLog(" lf t55xx trace");\r
81 PrintAndLog(" lf t55xx trace 1");\r
82 PrintAndLog("");\r
83 return 0;\r
84}\r
85int usage_t55xx_info() {\r
86 PrintAndLog("Usage: lf t55xx info [1]");\r
87 PrintAndLog(" [graph buffer data], if set, use Graphbuffer otherwise read data from tag.");\r
88 PrintAndLog("");\r
89 PrintAndLog("Examples:");\r
90 PrintAndLog(" lf t55xx info");\r
91 PrintAndLog(" lf t55xx info 1");\r
92 PrintAndLog("");\r
93 return 0;\r
94}\r
95int usage_t55xx_dump(){\r
96 PrintAndLog("Usage: lf t55xx dump <password>");\r
97 PrintAndLog(" <password>, OPTIONAL password 4bytes (8 hex symbols)");\r
98 PrintAndLog("");\r
99 PrintAndLog("Examples:");\r
100 PrintAndLog(" lf t55xx dump");\r
101 PrintAndLog(" lf t55xx dump feedbeef");\r
102 PrintAndLog("");\r
103 return 0;\r
104}\r
105int usage_t55xx_detect(){\r
106 PrintAndLog("Usage: lf t55xx detect");\r
107 PrintAndLog("");\r
108 PrintAndLog("Examples:");\r
109 PrintAndLog(" lf t55xx detect");\r
110 PrintAndLog(" lf t55xx detect 1");\r
111 PrintAndLog("");\r
112 return 0;\r
113}\r
54a942b0 114\r
115static int CmdHelp(const char *Cmd);\r
116\r
13d77ef9 117int CmdT55xxSetConfig(const char *Cmd) {\r
54a942b0 118\r
13d77ef9 119 uint8_t offset = 0;\r
120 bool errors = FALSE;\r
121 uint8_t cmdp = 0;\r
122 char modulation[5] = {0x00};\r
123 char tmp = 0x00;\r
124 uint8_t bitRate = 0;\r
125 uint8_t rates[9] = {8,16,32,40,50,64,100,128,0};\r
126 while(param_getchar(Cmd, cmdp) != 0x00 && !errors)\r
127 {\r
128 tmp = param_getchar(Cmd, cmdp);\r
129 switch(tmp)\r
130 {\r
131 case 'h':\r
132 case 'H':\r
133 return usage_t55xx_config();\r
134 case 'b':\r
135 errors |= param_getdec(Cmd, cmdp+1, &bitRate);\r
136 if ( !errors){\r
137 uint8_t i = 0;\r
138 for (; i < 9; i++){\r
139 if (rates[i]==bitRate) {\r
140 config.bitrate = i;\r
141 break;\r
142 }\r
143 }\r
144 if (i==9) errors = TRUE;\r
145 }\r
146 cmdp+=2;\r
147 break;\r
148 case 'd':\r
149 param_getstr(Cmd, cmdp+1, modulation);\r
150 cmdp += 2;\r
54a942b0 151\r
2767fc02 152 if ( strcmp(modulation, "FSK" ) == 0) {\r
13d77ef9 153 config.modulation = DEMOD_FSK;\r
2767fc02 154 } else if ( strcmp(modulation, "FSK1" ) == 0) {\r
13d77ef9 155 config.modulation = DEMOD_FSK1;\r
2767fc02 156 config.inverted=1;\r
157 } else if ( strcmp(modulation, "FSK1a" ) == 0) {\r
13d77ef9 158 config.modulation = DEMOD_FSK1a;\r
2767fc02 159 config.inverted=0;\r
160 } else if ( strcmp(modulation, "FSK2" ) == 0) {\r
13d77ef9 161 config.modulation = DEMOD_FSK2;\r
2767fc02 162 config.inverted=0;\r
163 } else if ( strcmp(modulation, "FSK2a" ) == 0) {\r
13d77ef9 164 config.modulation = DEMOD_FSK2a;\r
2767fc02 165 config.inverted=1;\r
166 } else if ( strcmp(modulation, "ASK" ) == 0) {\r
13d77ef9 167 config.modulation = DEMOD_ASK;\r
2767fc02 168 } else if ( strcmp(modulation, "NRZ" ) == 0) {\r
13d77ef9 169 config.modulation = DEMOD_NRZ;\r
2767fc02 170 } else if ( strcmp(modulation, "PSK1" ) == 0) {\r
13d77ef9 171 config.modulation = DEMOD_PSK1;\r
2767fc02 172 } else if ( strcmp(modulation, "PSK2" ) == 0) {\r
13d77ef9 173 config.modulation = DEMOD_PSK2;\r
2767fc02 174 } else if ( strcmp(modulation, "PSK3" ) == 0) {\r
13d77ef9 175 config.modulation = DEMOD_PSK3;\r
2767fc02 176 } else if ( strcmp(modulation, "BIa" ) == 0) {\r
13d77ef9 177 config.modulation = DEMOD_BIa;\r
2767fc02 178 config.inverted=1;\r
179 } else if ( strcmp(modulation, "BI" ) == 0) {\r
13d77ef9 180 config.modulation = DEMOD_BI;\r
2767fc02 181 config.inverted=0;\r
182 } else {\r
13d77ef9 183 PrintAndLog("Unknown modulation '%s'", modulation);\r
184 errors = TRUE;\r
185 }\r
186 break;\r
187 case 'i':\r
188 config.inverted = param_getchar(Cmd,cmdp+1) == '1';\r
189 cmdp+=2;\r
190 break;\r
191 case 'o':\r
192 errors |= param_getdec(Cmd, cmdp+1, &offset);\r
193 if ( !errors )\r
194 config.offset = offset;\r
195 cmdp+=2;\r
196 break;\r
197 default:\r
198 PrintAndLog("Unknown parameter '%c'", param_getchar(Cmd, cmdp));\r
199 errors = TRUE;\r
200 break;\r
201 }\r
202 }\r
54a942b0 203\r
13d77ef9 204 // No args\r
205 if (cmdp == 0) {\r
206 printConfiguration( config );\r
207 return 0;\r
208 }\r
209 //Validations\r
210 if (errors)\r
211 return usage_t55xx_config();\r
54a942b0 212\r
13d77ef9 213 config.block0 = 0;\r
214 printConfiguration ( config );\r
215 return 0;\r
216}\r
54a942b0 217\r
13d77ef9 218int CmdT55xxReadBlock(const char *Cmd) {\r
219 int block = -1;\r
220 int password = 0xFFFFFFFF; //default to blank Block 7\r
221\r
222 char cmdp = param_getchar(Cmd, 0);\r
2285d9dd 223 if (cmdp == 'h' || cmdp == 'H') return usage_t55xx_read();\r
13d77ef9 224\r
225 int res = sscanf(Cmd, "%d %x", &block, &password);\r
226\r
2285d9dd 227 if ( res < 1 || res > 2 ) return usage_t55xx_read();\r
13d77ef9 228 \r
229 if ((block < 0) | (block > 7)) {\r
230 PrintAndLog("Block must be between 0 and 7");\r
231 return 1;\r
232 } \r
233\r
234 UsbCommand c = {CMD_T55XX_READ_BLOCK, {0, block, 0}};\r
235 c.d.asBytes[0] = 0x0; \r
236\r
237 //Password mode\r
238 if ( res == 2 ) {\r
952a812c 239 \r
240 // try reading the config block and verify that PWD bit is set before doing this!\r
241 AquireData( CONFIGURATION_BLOCK );\r
242 if ( !tryDetectModulation() ) {\r
243 PrintAndLog("Could not detect is PWD bit is set in config block. Exits.");\r
244 return 1;\r
245 }\r
246 //if PWD bit is set, allow to execute read command with password.\r
247 if (( config.block0 & T55x7_PWD ) == 1) {\r
248 c.arg[2] = password;\r
249 c.d.asBytes[0] = 0x1; \r
250 } else { \r
251 PrintAndLog("PWD bit is NOT set in config block. Reading without password...");\r
252 }\r
13d77ef9 253 }\r
254\r
db25599d 255 clearCommandBuffer();\r
13d77ef9 256 SendCommand(&c);\r
257 if ( !WaitForResponseTimeout(CMD_ACK,NULL,2500) ) {\r
258 PrintAndLog("command execution time out");\r
259 return 2;\r
260 }\r
261 \r
262 uint8_t got[12000];\r
263 GetFromBigBuf(got,sizeof(got),0);\r
264 WaitForResponse(CMD_ACK,NULL);\r
a739812e 265 setGraphBuf(got, sizeof(got));\r
266 //DemodBufferLen=0;\r
1fbf8956 267 if (!DecodeT55xxBlock()) return 3;\r
13d77ef9 268 char blk[10]={0};\r
269 sprintf(blk,"%d", block);\r
270 printT55xxBlock(blk);\r
271 return 0;\r
54a942b0 272}\r
273\r
13d77ef9 274bool DecodeT55xxBlock(){\r
275 \r
fef74fdc 276 char buf[30] = {0x00};\r
13d77ef9 277 char *cmdStr = buf;\r
278 int ans = 0;\r
279 uint8_t bitRate[8] = {8,16,32,40,50,64,100,128};\r
13d77ef9 280 DemodBufferLen = 0x00;\r
54a942b0 281\r
cc15a118 282 //trim 1/2 a clock from beginning\r
ac2df346 283 //snprintf(cmdStr, sizeof(buf),"%d", bitRate[config.bitrate]/2 );\r
284 //CmdLtrim(cmdStr);\r
13d77ef9 285 switch( config.modulation ){\r
286 case DEMOD_FSK:\r
224ce36e 287 snprintf(cmdStr, sizeof(buf),"%d %d", bitRate[config.bitrate], config.inverted );\r
13d77ef9 288 ans = FSKrawDemod(cmdStr, FALSE);\r
289 break;\r
290 case DEMOD_FSK1:\r
13d77ef9 291 case DEMOD_FSK1a:\r
224ce36e 292 snprintf(cmdStr, sizeof(buf),"%d %d 8 5", bitRate[config.bitrate], config.inverted );\r
13d77ef9 293 ans = FSKrawDemod(cmdStr, FALSE);\r
294 break;\r
295 case DEMOD_FSK2:\r
13d77ef9 296 case DEMOD_FSK2a:\r
224ce36e 297 snprintf(cmdStr, sizeof(buf),"%d %d 10 8", bitRate[config.bitrate], config.inverted );\r
13d77ef9 298 ans = FSKrawDemod(cmdStr, FALSE);\r
299 break;\r
300 case DEMOD_ASK:\r
224ce36e 301 snprintf(cmdStr, sizeof(buf),"%d %d 0", bitRate[config.bitrate], config.inverted );\r
fef74fdc 302 ans = ASKDemod(cmdStr, FALSE, FALSE, 1);\r
13d77ef9 303 break;\r
304 case DEMOD_PSK1:\r
224ce36e 305 snprintf(cmdStr, sizeof(buf),"%d %d 0", bitRate[config.bitrate], config.inverted );\r
13d77ef9 306 ans = PSKDemod(cmdStr, FALSE);\r
13d77ef9 307 break;\r
2767fc02 308 case DEMOD_PSK2: //inverted won't affect this\r
309 case DEMOD_PSK3: //not fully implemented\r
224ce36e 310 snprintf(cmdStr, sizeof(buf),"%d 0 1", bitRate[config.bitrate] );\r
13d77ef9 311 ans = PSKDemod(cmdStr, FALSE);\r
312 psk1TOpsk2(DemodBuffer, DemodBufferLen);\r
313 break;\r
314 case DEMOD_NRZ:\r
224ce36e 315 snprintf(cmdStr, sizeof(buf),"%d %d 1", bitRate[config.bitrate], config.inverted );\r
13d77ef9 316 ans = NRZrawDemod(cmdStr, FALSE);\r
317 break;\r
318 case DEMOD_BI:\r
13d77ef9 319 case DEMOD_BIa:\r
224ce36e 320 snprintf(cmdStr, sizeof(buf),"0 %d %d 0", bitRate[config.bitrate], config.inverted );\r
13d77ef9 321 ans = ASKbiphaseDemod(cmdStr, FALSE);\r
322 break;\r
323 default:\r
324 return FALSE;\r
325 }\r
326 return (bool) ans;\r
327}\r
54a942b0 328\r
13d77ef9 329int CmdT55xxDetect(const char *Cmd){\r
54a942b0 330\r
13d77ef9 331 char cmdp = param_getchar(Cmd, 0);\r
332 if (strlen(Cmd) > 1 || cmdp == 'h' || cmdp == 'H')\r
333 return usage_t55xx_detect();\r
334 \r
335 if (strlen(Cmd)==0)\r
336 AquireData( CONFIGURATION_BLOCK );\r
337\r
338 if ( !tryDetectModulation() )\r
339 PrintAndLog("Could not detect modulation automatically. Try setting it manually with \'lf t55xx config\'");\r
340\r
341 return 0;\r
54a942b0 342}\r
343\r
13d77ef9 344// detect configuration?\r
345bool tryDetectModulation(){\r
ac2df346 346 //char cmdStr[8] = {0};\r
13d77ef9 347 uint8_t hits = 0;\r
348 t55xx_conf_block_t tests[15];\r
fef74fdc 349 int bitRate=0;\r
322f7eb1 350 uint8_t fc1 = 0, fc2 = 0, clk=0;\r
351 save_restoreGB(1);\r
13d77ef9 352 if (GetFskClock("", FALSE, FALSE)){ \r
13d77ef9 353 fskClocks(&fc1, &fc2, &clk, FALSE);\r
ac2df346 354 //sprintf(cmdStr,"%d", clk/2);\r
355 //CmdLtrim(cmdStr);\r
fef74fdc 356 if ( FSKrawDemod("0 0", FALSE) && test(DEMOD_FSK, &tests[hits].offset, &bitRate)){\r
13d77ef9 357 tests[hits].modulation = DEMOD_FSK;\r
358 if (fc1==8 && fc2 == 5)\r
359 tests[hits].modulation = DEMOD_FSK1a;\r
360 else if (fc1==10 && fc2 == 8)\r
361 tests[hits].modulation = DEMOD_FSK2;\r
fef74fdc 362 tests[hits].bitrate = bitRate;\r
13d77ef9 363 tests[hits].inverted = FALSE;\r
364 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
365 ++hits;\r
366 }\r
fef74fdc 367 if ( FSKrawDemod("0 1", FALSE) && test(DEMOD_FSK, &tests[hits].offset, &bitRate)) {\r
13d77ef9 368 tests[hits].modulation = DEMOD_FSK;\r
fef74fdc 369 if (fc1 == 8 && fc2 == 5)\r
13d77ef9 370 tests[hits].modulation = DEMOD_FSK1;\r
fef74fdc 371 else if (fc1 == 10 && fc2 == 8)\r
13d77ef9 372 tests[hits].modulation = DEMOD_FSK2a;\r
54a942b0 373\r
fef74fdc 374 tests[hits].bitrate = bitRate;\r
13d77ef9 375 tests[hits].inverted = TRUE;\r
376 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
377 ++hits;\r
378 }\r
379 } else {\r
322f7eb1 380 clk = GetAskClock("", FALSE, FALSE);\r
381 if (clk>0) {\r
ac2df346 382 //sprintf(cmdStr,"%d", clk/2);\r
383 //CmdLtrim(cmdStr);\r
411105e0 384 if ( ASKDemod("0 0 0", FALSE, FALSE, 1) && test(DEMOD_ASK, &tests[hits].offset, &bitRate)) {\r
322f7eb1 385 tests[hits].modulation = DEMOD_ASK;\r
386 tests[hits].bitrate = bitRate;\r
387 tests[hits].inverted = FALSE;\r
388 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
389 ++hits;\r
390 }\r
411105e0 391 if ( ASKDemod("0 1 0", FALSE, FALSE, 1) && test(DEMOD_ASK, &tests[hits].offset, &bitRate)) {\r
322f7eb1 392 tests[hits].modulation = DEMOD_ASK;\r
393 tests[hits].bitrate = bitRate;\r
394 tests[hits].inverted = TRUE;\r
395 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
396 ++hits;\r
397 }\r
411105e0 398 if ( ASKbiphaseDemod("0 0 0 0", FALSE) && test(DEMOD_BI, &tests[hits].offset, &bitRate) ) {\r
322f7eb1 399 tests[hits].modulation = DEMOD_BI;\r
400 tests[hits].bitrate = bitRate;\r
401 tests[hits].inverted = FALSE;\r
402 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
403 ++hits;\r
404 }\r
411105e0 405 if ( ASKbiphaseDemod("0 0 1 0", FALSE) && test(DEMOD_BIa, &tests[hits].offset, &bitRate) ) {\r
322f7eb1 406 tests[hits].modulation = DEMOD_BIa;\r
407 tests[hits].bitrate = bitRate;\r
408 tests[hits].inverted = TRUE;\r
409 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
410 ++hits;\r
411 }\r
13d77ef9 412 }\r
322f7eb1 413 //undo trim from ask\r
414 save_restoreGB(0);\r
415 clk = GetNrzClock("", FALSE, FALSE);\r
416 if (clk>0) {\r
ac2df346 417 //sprintf(cmdStr,"%d", clk/2);\r
418 //CmdLtrim(cmdStr);\r
322f7eb1 419 if ( NRZrawDemod("0 0 1", FALSE) && test(DEMOD_NRZ, &tests[hits].offset, &bitRate)) {\r
420 tests[hits].modulation = DEMOD_NRZ;\r
421 tests[hits].bitrate = bitRate;\r
422 tests[hits].inverted = FALSE;\r
423 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
424 ++hits;\r
425 }\r
54a942b0 426\r
322f7eb1 427 if ( NRZrawDemod("0 1 1", FALSE) && test(DEMOD_NRZ, &tests[hits].offset, &bitRate)) {\r
428 tests[hits].modulation = DEMOD_NRZ;\r
429 tests[hits].bitrate = bitRate;\r
430 tests[hits].inverted = TRUE;\r
431 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
432 ++hits;\r
433 }\r
13d77ef9 434 }\r
435 \r
322f7eb1 436 //undo trim from nrz\r
437 save_restoreGB(0);\r
438 clk = GetPskClock("", FALSE, FALSE);\r
439 if (clk>0) {\r
ac2df346 440 //PrintAndLog("clk %d",clk);\r
441 //sprintf(cmdStr,"%d", clk/2);\r
442 //CmdLtrim(cmdStr); \r
322f7eb1 443 if ( PSKDemod("0 0 1", FALSE) && test(DEMOD_PSK1, &tests[hits].offset, &bitRate)) {\r
444 tests[hits].modulation = DEMOD_PSK1;\r
fef74fdc 445 tests[hits].bitrate = bitRate;\r
13d77ef9 446 tests[hits].inverted = FALSE;\r
447 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
448 ++hits;\r
449 }\r
322f7eb1 450 if ( PSKDemod("0 1 1", FALSE) && test(DEMOD_PSK1, &tests[hits].offset, &bitRate)) {\r
451 tests[hits].modulation = DEMOD_PSK1;\r
fef74fdc 452 tests[hits].bitrate = bitRate;\r
322f7eb1 453 tests[hits].inverted = TRUE;\r
13d77ef9 454 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
455 ++hits;\r
456 }\r
322f7eb1 457 // PSK2 - needs a call to psk1TOpsk2.\r
458 if ( PSKDemod("0 0 1", FALSE)) {\r
459 psk1TOpsk2(DemodBuffer, DemodBufferLen);\r
460 if (test(DEMOD_PSK2, &tests[hits].offset, &bitRate)){\r
461 tests[hits].modulation = DEMOD_PSK2;\r
462 tests[hits].bitrate = bitRate;\r
463 tests[hits].inverted = FALSE;\r
464 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
465 ++hits;\r
466 }\r
467 } // inverse waves does not affect this demod\r
468 // PSK3 - needs a call to psk1TOpsk2.\r
469 if ( PSKDemod("0 0 1", FALSE)) {\r
470 psk1TOpsk2(DemodBuffer, DemodBufferLen);\r
471 if (test(DEMOD_PSK3, &tests[hits].offset, &bitRate)){\r
472 tests[hits].modulation = DEMOD_PSK3;\r
473 tests[hits].bitrate = bitRate;\r
474 tests[hits].inverted = FALSE;\r
475 tests[hits].block0 = PackBits(tests[hits].offset, 32, DemodBuffer);\r
476 ++hits;\r
477 }\r
478 } // inverse waves does not affect this demod\r
13d77ef9 479 }\r
480 } \r
481 if ( hits == 1) {\r
482 config.modulation = tests[0].modulation;\r
fef74fdc 483 config.bitrate = tests[0].bitrate;\r
13d77ef9 484 config.inverted = tests[0].inverted;\r
485 config.offset = tests[0].offset;\r
486 config.block0 = tests[0].block0;\r
487 printConfiguration( config );\r
488 return TRUE;\r
489 }\r
490 \r
491 if ( hits > 1) {\r
492 PrintAndLog("Found [%d] possible matches for modulation.",hits);\r
493 for(int i=0; i<hits; ++i){\r
494 PrintAndLog("--[%d]---------------", i+1);\r
495 printConfiguration( tests[i] );\r
496 }\r
497 }\r
498 return FALSE;\r
499}\r
500\r
501bool testModulation(uint8_t mode, uint8_t modread){\r
502 switch( mode ){\r
503 case DEMOD_FSK:\r
504 if (modread > 3 && modread < 8) return TRUE;\r
505 break;\r
506 case DEMOD_ASK:\r
507 if (modread == DEMOD_ASK) return TRUE;\r
508 break;\r
509 case DEMOD_PSK1:\r
510 if (modread == DEMOD_PSK1) return TRUE;\r
511 break;\r
512 case DEMOD_PSK2:\r
513 if (modread == DEMOD_PSK2) return TRUE;\r
514 break;\r
515 case DEMOD_PSK3:\r
516 if (modread == DEMOD_PSK3) return TRUE;\r
517 break;\r
518 case DEMOD_NRZ:\r
519 if (modread == DEMOD_NRZ) return TRUE;\r
520 break;\r
521 case DEMOD_BI:\r
522 if (modread == DEMOD_BI) return TRUE;\r
523 break;\r
524 case DEMOD_BIa:\r
525 if (modread == DEMOD_BIa) return TRUE;\r
526 break; \r
527 default:\r
528 return FALSE;\r
529 }\r
530 return FALSE;\r
531}\r
532\r
533bool testBitRate(uint8_t readRate, uint8_t mod){\r
534 uint8_t expected[8] = {8, 16, 32, 40, 50, 64, 100, 128};\r
535 uint8_t detRate = 0;\r
536 switch( mod ){\r
537 case DEMOD_FSK:\r
13d77ef9 538 case DEMOD_FSK1:\r
13d77ef9 539 case DEMOD_FSK1a:\r
13d77ef9 540 case DEMOD_FSK2:\r
13d77ef9 541 case DEMOD_FSK2a:\r
542 detRate = GetFskClock("",FALSE, FALSE); \r
fef74fdc 543 if (expected[readRate] == detRate) \r
13d77ef9 544 return TRUE;\r
13d77ef9 545 break;\r
546 case DEMOD_ASK:\r
2767fc02 547 case DEMOD_BI:\r
548 case DEMOD_BIa:\r
13d77ef9 549 detRate = GetAskClock("",FALSE, FALSE); \r
fef74fdc 550 if (expected[readRate] == detRate) \r
13d77ef9 551 return TRUE;\r
13d77ef9 552 break;\r
553 case DEMOD_PSK1:\r
13d77ef9 554 case DEMOD_PSK2:\r
13d77ef9 555 case DEMOD_PSK3:\r
556 detRate = GetPskClock("",FALSE, FALSE); \r
fef74fdc 557 if (expected[readRate] == detRate)\r
13d77ef9 558 return TRUE;\r
13d77ef9 559 break;\r
560 case DEMOD_NRZ:\r
561 detRate = GetNrzClock("",FALSE, FALSE); \r
fef74fdc 562 if (expected[readRate] == detRate)\r
13d77ef9 563 return TRUE;\r
13d77ef9 564 break;\r
13d77ef9 565 default:\r
566 return FALSE;\r
567 }\r
568 return FALSE;\r
569}\r
570\r
fef74fdc 571bool test(uint8_t mode, uint8_t *offset, int *fndBitRate){\r
13d77ef9 572\r
fef74fdc 573 if ( DemodBufferLen < 64 ) return FALSE;\r
13d77ef9 574 uint8_t si = 0;\r
575 for (uint8_t idx = 0; idx < 64; idx++){\r
576 si = idx;\r
577 if ( PackBits(si, 32, DemodBuffer) == 0x00 ) continue;\r
578\r
2767fc02 579 uint8_t safer = PackBits(si, 4, DemodBuffer); si += 4; //master key\r
13d77ef9 580 uint8_t resv = PackBits(si, 4, DemodBuffer); si += 4; //was 7 & +=7+3 //should be only 4 bits if extended mode\r
581 // 2nibble must be zeroed.\r
582 // moved test to here, since this gets most faults first.\r
583 if ( resv > 0x00) continue;\r
584\r
2767fc02 585 uint8_t xtRate = PackBits(si, 3, DemodBuffer); si += 3; //extended mode part of rate\r
fef74fdc 586 int bitRate = PackBits(si, 3, DemodBuffer); si += 3; //bit rate\r
587 if (bitRate > 7) continue;\r
13d77ef9 588 uint8_t extend = PackBits(si, 1, DemodBuffer); si += 1; //bit 15 extended mode\r
2767fc02 589 uint8_t modread = PackBits(si, 5, DemodBuffer); si += 5+2+1; \r
590 //uint8_t pskcr = PackBits(si, 2, DemodBuffer); si += 2+1; //could check psk cr\r
591 uint8_t nml01 = PackBits(si, 1, DemodBuffer); si += 1+5; //bit 24, 30, 31 could be tested for 0 if not extended mode\r
13d77ef9 592 uint8_t nml02 = PackBits(si, 2, DemodBuffer); si += 2;\r
593 \r
594 //if extended mode\r
595 bool extMode =( (safer == 0x6 || safer == 0x9) && extend) ? TRUE : FALSE;\r
596\r
597 if (!extMode){\r
598 if (nml01 || nml02 || xtRate) continue;\r
599 }\r
600 //test modulation\r
601 if (!testModulation(mode, modread)) continue;\r
13d77ef9 602 if (!testBitRate(bitRate, mode)) continue;\r
fef74fdc 603 *fndBitRate = bitRate;\r
2767fc02 604 *offset = idx;\r
13d77ef9 605 return TRUE;\r
606 }\r
607 return FALSE;\r
54a942b0 608}\r
609\r
224ce36e 610void printT55xxBlock(const char *blockNum){\r
13d77ef9 611 \r
612 uint8_t i = config.offset;\r
613 uint8_t endpos = 32 + i;\r
614 uint32_t blockData = 0;\r
615 uint8_t bits[64] = {0x00};\r
616\r
617 if ( !DemodBufferLen) return;\r
618\r
619 if ( endpos > DemodBufferLen){\r
620 PrintAndLog("The configured offset %d is too big. Possible offset: %d)", i, DemodBufferLen-32);\r
621 return;\r
622 }\r
623\r
624 for (; i < endpos; ++i)\r
625 bits[i - config.offset]=DemodBuffer[i];\r
626\r
627 blockData = PackBits(0, 32, bits);\r
224ce36e 628 PrintAndLog("[%s] 0x%08X %s", blockNum, blockData, sprint_bin(bits,32));\r
13d77ef9 629}\r
630\r
631int special(const char *Cmd) {\r
632 uint32_t blockData = 0;\r
633 uint8_t bits[32] = {0x00};\r
634\r
635 PrintAndLog("[OFFSET] [DATA] [BINARY]");\r
636 PrintAndLog("----------------------------------------------------");\r
637 int i,j = 0;\r
638 for (; j < 64; ++j){\r
639 \r
640 for (i = 0; i < 32; ++i)\r
641 bits[i]=DemodBuffer[j+i];\r
642 \r
643 blockData = PackBits(0, 32, bits);\r
644 \r
645 PrintAndLog("[%02d] 0x%08X %s",j , blockData, sprint_bin(bits,32)); \r
646 }\r
647 return 0;\r
648}\r
649\r
650void printConfiguration( t55xx_conf_block_t b){\r
651 PrintAndLog("Modulation : %s", GetSelectedModulationStr(b.modulation) );\r
652 PrintAndLog("Bit Rate : %s", GetBitRateStr(b.bitrate) );\r
653 PrintAndLog("Inverted : %s", (b.inverted) ? "Yes" : "No" );\r
654 PrintAndLog("Offset : %d", b.offset);\r
655 PrintAndLog("Block0 : 0x%08X", b.block0);\r
656 PrintAndLog("");\r
657}\r
658\r
659int CmdT55xxWriteBlock(const char *Cmd)\r
54a942b0 660{\r
13d77ef9 661 int block = 8; //default to invalid block\r
662 int data = 0xFFFFFFFF; //default to blank Block \r
663 int password = 0xFFFFFFFF; //default to blank Block 7\r
664 \r
665 char cmdp = param_getchar(Cmd, 0);\r
666 if (cmdp == 'h' || cmdp == 'H') {\r
667 usage_t55xx_write();\r
668 return 0;\r
669 }\r
670 \r
671 int res = sscanf(Cmd, "%d %x %x",&block, &data, &password);\r
672 \r
673 if ( res < 2 || res > 3) {\r
674 usage_t55xx_write();\r
675 return 1;\r
676 }\r
677\r
678 if (block > 7) {\r
679 PrintAndLog("Block number must be between 0 and 7");\r
ac2df346 680 return 1;\r
13d77ef9 681 }\r
682 \r
683 UsbCommand c = {CMD_T55XX_WRITE_BLOCK, {data, block, 0}};\r
a739812e 684 UsbCommand resp;\r
13d77ef9 685 c.d.asBytes[0] = 0x0; \r
686\r
687 PrintAndLog("Writing to block: %d data : 0x%08X", block, data);\r
688\r
689 //Password mode\r
690 if (res == 3) {\r
691 c.arg[2] = password;\r
692 c.d.asBytes[0] = 0x1; \r
693 PrintAndLog("pwd : 0x%08X", password);\r
694 }\r
db25599d 695 clearCommandBuffer();\r
13d77ef9 696 SendCommand(&c);\r
db25599d 697 if (!WaitForResponseTimeout(CMD_ACK, &resp, 1000)){\r
698 PrintAndLog("Error occurred, device did not ACK write operation. (May be due to old firmware)");\r
699 return -1;\r
700 }\r
13d77ef9 701 return 0;\r
54a942b0 702}\r
703\r
13d77ef9 704int CmdT55xxReadTrace(const char *Cmd)\r
54a942b0 705{\r
13d77ef9 706 char cmdp = param_getchar(Cmd, 0);\r
707 \r
708 if (strlen(Cmd) > 1 || cmdp == 'h' || cmdp == 'H') \r
709 return usage_t55xx_trace();\r
710\r
711 if (strlen(Cmd)==0)\r
712 AquireData( TRACE_BLOCK );\r
713 \r
714 if (!DecodeT55xxBlock()) return 1;\r
54a942b0 715\r
13d77ef9 716 if ( !DemodBufferLen) return 1;\r
717 \r
718 RepaintGraphWindow();\r
719 uint8_t repeat = 0;\r
720 if (config.offset > 5) \r
721 repeat = 32;\r
722 uint8_t si = config.offset+repeat;\r
723 uint32_t bl0 = PackBits(si, 32, DemodBuffer);\r
724 uint32_t bl1 = PackBits(si+32, 32, DemodBuffer);\r
725 \r
224ce36e 726 uint32_t acl = PackBits(si, 8, DemodBuffer); si += 8;\r
727 uint32_t mfc = PackBits(si, 8, DemodBuffer); si += 8;\r
728 uint32_t cid = PackBits(si, 5, DemodBuffer); si += 5;\r
729 uint32_t icr = PackBits(si, 3, DemodBuffer); si += 3;\r
730 uint32_t year = PackBits(si, 4, DemodBuffer); si += 4;\r
731 uint32_t quarter = PackBits(si, 2, DemodBuffer); si += 2;\r
732 uint32_t lotid = PackBits(si, 14, DemodBuffer); si += 14;\r
733 uint32_t wafer = PackBits(si, 5, DemodBuffer); si += 5;\r
13d77ef9 734 uint32_t dw = PackBits(si, 15, DemodBuffer); \r
735 \r
224ce36e 736 time_t t = time(NULL);\r
737 struct tm tm = *localtime(&t);\r
738 if ( year > tm.tm_year-110)\r
739 year += 2000;\r
740 else\r
741 year += 2010;\r
742\r
743 if ( acl != 0xE0 ) {\r
744 PrintAndLog("The modulation is most likely wrong since the ACL is not 0xE0. ");\r
745 return 1;\r
746 }\r
747\r
13d77ef9 748 PrintAndLog("");\r
749 PrintAndLog("-- T55xx Trace Information ----------------------------------");\r
750 PrintAndLog("-------------------------------------------------------------");\r
751 PrintAndLog(" ACL Allocation class (ISO/IEC 15963-1) : 0x%02X (%d)", acl, acl);\r
752 PrintAndLog(" MFC Manufacturer ID (ISO/IEC 7816-6) : 0x%02X (%d) - %s", mfc, mfc, getTagInfo(mfc));\r
753 PrintAndLog(" CID : 0x%02X (%d) - %s", cid, cid, GetModelStrFromCID(cid));\r
754 PrintAndLog(" ICR IC Revision : %d",icr );\r
755 PrintAndLog(" Manufactured");\r
cc15a118 756 PrintAndLog(" Year/Quarter : %d/%d",year, quarter);\r
13d77ef9 757 PrintAndLog(" Lot ID : %d", lotid );\r
758 PrintAndLog(" Wafer number : %d", wafer);\r
759 PrintAndLog(" Die Number : %d", dw);\r
760 PrintAndLog("-------------------------------------------------------------");\r
761 PrintAndLog(" Raw Data - Page 1");\r
762 PrintAndLog(" Block 0 : 0x%08X %s", bl0, sprint_bin(DemodBuffer+config.offset+repeat,32) );\r
763 PrintAndLog(" Block 1 : 0x%08X %s", bl1, sprint_bin(DemodBuffer+config.offset+repeat+32,32) );\r
764 PrintAndLog("-------------------------------------------------------------");\r
54a942b0 765\r
13d77ef9 766 /*\r
767 TRACE - BLOCK O\r
768 Bits Definition HEX\r
769 1-8 ACL Allocation class (ISO/IEC 15963-1) 0xE0 \r
770 9-16 MFC Manufacturer ID (ISO/IEC 7816-6) 0x15 Atmel Corporation\r
771 17-21 CID 0x1 = Atmel ATA5577M1 0x2 = Atmel ATA5577M2 \r
772 22-24 ICR IC revision\r
773 25-28 YEAR (BCD encoded) 9 (= 2009)\r
774 29-30 QUARTER 1,2,3,4 \r
775 31-32 LOT ID\r
776 \r
777 TRACE - BLOCK 1\r
778 1-12 LOT ID \r
779 13-17 Wafer number\r
780 18-32 DW, die number sequential\r
781 */\r
782 \r
54a942b0 783 return 0;\r
784}\r
785\r
13d77ef9 786int CmdT55xxInfo(const char *Cmd){\r
787 /*\r
788 Page 0 Block 0 Configuration data.\r
789 Normal mode\r
790 Extended mode\r
791 */\r
792 char cmdp = param_getchar(Cmd, 0);\r
793\r
794 if (strlen(Cmd) > 1 || cmdp == 'h' || cmdp == 'H')\r
795 return usage_t55xx_info();\r
796 \r
797 if (strlen(Cmd)==0)\r
798 AquireData( CONFIGURATION_BLOCK );\r
fef74fdc 799\r
13d77ef9 800 if (!DecodeT55xxBlock()) return 1;\r
801\r
fef74fdc 802 if ( DemodBufferLen < 32) return 1;\r
13d77ef9 803\r
804 uint8_t si = config.offset;\r
805 uint32_t bl0 = PackBits(si, 32, DemodBuffer);\r
806 \r
807 uint32_t safer = PackBits(si, 4, DemodBuffer); si += 4; \r
808 uint32_t resv = PackBits(si, 7, DemodBuffer); si += 7;\r
809 uint32_t dbr = PackBits(si, 3, DemodBuffer); si += 3;\r
810 uint32_t extend = PackBits(si, 1, DemodBuffer); si += 1;\r
811 uint32_t datamod = PackBits(si, 5, DemodBuffer); si += 5;\r
812 uint32_t pskcf = PackBits(si, 2, DemodBuffer); si += 2;\r
813 uint32_t aor = PackBits(si, 1, DemodBuffer); si += 1; \r
814 uint32_t otp = PackBits(si, 1, DemodBuffer); si += 1; \r
815 uint32_t maxblk = PackBits(si, 3, DemodBuffer); si += 3;\r
816 uint32_t pwd = PackBits(si, 1, DemodBuffer); si += 1; \r
817 uint32_t sst = PackBits(si, 1, DemodBuffer); si += 1; \r
818 uint32_t fw = PackBits(si, 1, DemodBuffer); si += 1;\r
819 uint32_t inv = PackBits(si, 1, DemodBuffer); si += 1; \r
820 uint32_t por = PackBits(si, 1, DemodBuffer); si += 1;\r
821 \r
822 PrintAndLog("");\r
823 PrintAndLog("-- T55xx Configuration & Tag Information --------------------");\r
824 PrintAndLog("-------------------------------------------------------------");\r
825 PrintAndLog(" Safer key : %s", GetSaferStr(safer));\r
826 PrintAndLog(" reserved : %d", resv);\r
827 PrintAndLog(" Data bit rate : %s", GetBitRateStr(dbr));\r
828 PrintAndLog(" eXtended mode : %s", (extend) ? "Yes - Warning":"No");\r
829 PrintAndLog(" Modulation : %s", GetModulationStr(datamod));\r
830 PrintAndLog(" PSK clock frequency : %d", pskcf);\r
831 PrintAndLog(" AOR - Answer on Request : %s", (aor) ? "Yes":"No");\r
832 PrintAndLog(" OTP - One Time Pad : %s", (otp) ? "Yes - Warning":"No" );\r
833 PrintAndLog(" Max block : %d", maxblk);\r
834 PrintAndLog(" Password mode : %s", (pwd) ? "Yes":"No");\r
835 PrintAndLog(" Sequence Start Terminator : %s", (sst) ? "Yes":"No");\r
836 PrintAndLog(" Fast Write : %s", (fw) ? "Yes":"No");\r
837 PrintAndLog(" Inverse data : %s", (inv) ? "Yes":"No");\r
838 PrintAndLog(" POR-Delay : %s", (por) ? "Yes":"No");\r
839 PrintAndLog("-------------------------------------------------------------");\r
840 PrintAndLog(" Raw Data - Page 0");\r
841 PrintAndLog(" Block 0 : 0x%08X %s", bl0, sprint_bin(DemodBuffer+config.offset,32) );\r
842 PrintAndLog("-------------------------------------------------------------");\r
843 \r
844 return 0;\r
845}\r
846\r
847int CmdT55xxDump(const char *Cmd){\r
848\r
849 char s[20] = {0x00};\r
850 uint8_t pwd[4] = {0x00};\r
851\r
852 char cmdp = param_getchar(Cmd, 0);\r
853 if ( cmdp == 'h' || cmdp == 'H') {\r
854 usage_t55xx_dump();\r
855 return 0;\r
856 }\r
857\r
858 bool hasPwd = ( strlen(Cmd) > 0); \r
859 if ( hasPwd ){\r
860 if (param_gethex(Cmd, 0, pwd, 8)) {\r
861 PrintAndLog("password must include 8 HEX symbols");\r
862 return 1;\r
863 }\r
864 }\r
865 \r
866 for ( int i = 0; i <8; ++i){\r
867 memset(s,0,sizeof(s));\r
868 if ( hasPwd ) {\r
869 sprintf(s,"%d %02x%02x%02x%02x", i, pwd[0],pwd[1],pwd[2],pwd[3]);\r
870 } else {\r
871 sprintf(s,"%d", i);\r
872 }\r
873 CmdT55xxReadBlock(s);\r
874 }\r
875 return 0;\r
876}\r
877\r
878int AquireData( uint8_t block ){\r
879\r
880 UsbCommand c;\r
881 \r
882 if ( block == CONFIGURATION_BLOCK ) \r
883 c.cmd = CMD_T55XX_READ_BLOCK;\r
884 else if (block == TRACE_BLOCK )\r
885 c.cmd = CMD_T55XX_READ_TRACE;\r
886 \r
887 c.arg[0] = 0x00;\r
888 c.arg[1] = 0x00;\r
889 c.arg[2] = 0x00;\r
890 c.d.asBytes[0] = 0x0; \r
891\r
892 //Password mode\r
893 // if ( res == 2 ) {\r
894 // c.arg[2] = password;\r
895 // c.d.asBytes[0] = 0x1; \r
896 // }\r
897\r
db25599d 898 clearCommandBuffer();\r
13d77ef9 899 SendCommand(&c);\r
900 if ( !WaitForResponseTimeout(CMD_ACK,NULL,2500) ) {\r
901 PrintAndLog("command execution time out");\r
902 return 1;\r
903 }\r
904\r
905 uint8_t got[12000];\r
906 GetFromBigBuf(got,sizeof(got),0);\r
907 WaitForResponse(CMD_ACK,NULL);\r
908 setGraphBuf(got, 12000);\r
909 return 0;\r
910}\r
911\r
912char * GetBitRateStr(uint32_t id){\r
fef74fdc 913 static char buf[25];\r
914\r
13d77ef9 915 char *retStr = buf;\r
916 switch (id){\r
917 case 0: \r
9795e535 918 snprintf(retStr,sizeof(buf),"%d - RF/8",id);\r
13d77ef9 919 break;\r
920 case 1:\r
9795e535 921 snprintf(retStr,sizeof(buf),"%d - RF/16",id);\r
13d77ef9 922 break;\r
923 case 2: \r
9795e535 924 snprintf(retStr,sizeof(buf),"%d - RF/32",id);\r
13d77ef9 925 break;\r
926 case 3:\r
9795e535 927 snprintf(retStr,sizeof(buf),"%d - RF/40",id);\r
13d77ef9 928 break;\r
929 case 4:\r
9795e535 930 snprintf(retStr,sizeof(buf),"%d - RF/50",id);\r
13d77ef9 931 break;\r
932 case 5:\r
9795e535 933 snprintf(retStr,sizeof(buf),"%d - RF/64",id);\r
13d77ef9 934 break;\r
935 case 6:\r
9795e535 936 snprintf(retStr,sizeof(buf),"%d - RF/100",id);\r
13d77ef9 937 break;\r
938 case 7:\r
9795e535 939 snprintf(retStr,sizeof(buf),"%d - RF/128",id);\r
13d77ef9 940 break;\r
941 default:\r
9795e535 942 snprintf(retStr,sizeof(buf),"%d - (Unknown)",id);\r
13d77ef9 943 break;\r
944 }\r
945\r
946 return buf;\r
947}\r
948\r
949char * GetSaferStr(uint32_t id){\r
950 static char buf[40];\r
951 char *retStr = buf;\r
952 \r
9795e535 953 snprintf(retStr,sizeof(buf),"%d",id);\r
13d77ef9 954 if (id == 6) {\r
9795e535 955 snprintf(retStr,sizeof(buf),"%d - passwd",id);\r
13d77ef9 956 }\r
957 if (id == 9 ){\r
9795e535 958 snprintf(retStr,sizeof(buf),"%d - testmode",id);\r
13d77ef9 959 }\r
960 \r
961 return buf;\r
962}\r
9795e535 963\r
13d77ef9 964char * GetModulationStr( uint32_t id){\r
2767fc02 965 static char buf[60];\r
13d77ef9 966 char *retStr = buf;\r
967 \r
968 switch (id){\r
969 case 0: \r
9795e535 970 snprintf(retStr,sizeof(buf),"%d - DIRECT (ASK/NRZ)",id);\r
13d77ef9 971 break;\r
972 case 1:\r
9795e535 973 snprintf(retStr,sizeof(buf),"%d - PSK 1 phase change when input changes",id);\r
13d77ef9 974 break;\r
975 case 2: \r
9795e535 976 snprintf(retStr,sizeof(buf),"%d - PSK 2 phase change on bitclk if input high",id);\r
13d77ef9 977 break;\r
978 case 3:\r
9795e535 979 snprintf(retStr,sizeof(buf),"%d - PSK 3 phase change on rising edge of input",id);\r
13d77ef9 980 break;\r
981 case 4:\r
9795e535 982 snprintf(retStr,sizeof(buf),"%d - FSK 1 RF/8 RF/5",id);\r
13d77ef9 983 break;\r
984 case 5:\r
9795e535 985 snprintf(retStr,sizeof(buf),"%d - FSK 2 RF/8 RF/10",id);\r
13d77ef9 986 break;\r
987 case 6:\r
9795e535 988 snprintf(retStr,sizeof(buf),"%d - FSK 1a RF/5 RF/8",id);\r
13d77ef9 989 break;\r
990 case 7:\r
9795e535 991 snprintf(retStr,sizeof(buf),"%d - FSK 2a RF/10 RF/8",id);\r
13d77ef9 992 break;\r
993 case 8:\r
cc15a118 994 snprintf(retStr,sizeof(buf),"%d - Manchester",id);\r
13d77ef9 995 break;\r
996 case 16:\r
9795e535 997 snprintf(retStr,sizeof(buf),"%d - Biphase",id);\r
13d77ef9 998 break;\r
999 case 0x18:\r
9795e535 1000 snprintf(retStr,sizeof(buf),"%d - Biphase a - AKA Conditional Dephase Encoding(CDP)",id);\r
13d77ef9 1001 break;\r
1002 case 17:\r
9795e535 1003 snprintf(retStr,sizeof(buf),"%d - Reserved",id);\r
13d77ef9 1004 break;\r
1005 default:\r
9795e535 1006 snprintf(retStr,sizeof(buf),"0x%02X (Unknown)",id);\r
13d77ef9 1007 break;\r
1008 }\r
1009 return buf;\r
1010}\r
1011\r
1012char * GetModelStrFromCID(uint32_t cid){\r
1013 \r
1014 static char buf[10];\r
1015 char *retStr = buf;\r
1016 \r
224ce36e 1017 if (cid == 1) snprintf(retStr, sizeof(buf),"ATA5577M1");\r
1018 if (cid == 2) snprintf(retStr, sizeof(buf),"ATA5577M2"); \r
13d77ef9 1019 return buf;\r
1020}\r
1021\r
1022char * GetSelectedModulationStr( uint8_t id){\r
1023\r
9795e535 1024 static char buf[20];\r
13d77ef9 1025 char *retStr = buf;\r
1026\r
1027 switch (id){\r
1028 case DEMOD_FSK:\r
9795e535 1029 snprintf(retStr,sizeof(buf),"FSK");\r
13d77ef9 1030 break;\r
1031 case DEMOD_FSK1:\r
9795e535 1032 snprintf(retStr,sizeof(buf),"FSK1");\r
13d77ef9 1033 break;\r
1034 case DEMOD_FSK1a:\r
9795e535 1035 snprintf(retStr,sizeof(buf),"FSK1a");\r
13d77ef9 1036 break;\r
1037 case DEMOD_FSK2:\r
9795e535 1038 snprintf(retStr,sizeof(buf),"FSK2");\r
13d77ef9 1039 break;\r
1040 case DEMOD_FSK2a:\r
9795e535 1041 snprintf(retStr,sizeof(buf),"FSK2a");\r
13d77ef9 1042 break;\r
1043 case DEMOD_ASK: \r
9795e535 1044 snprintf(retStr,sizeof(buf),"ASK");\r
13d77ef9 1045 break;\r
1046 case DEMOD_NRZ:\r
9795e535 1047 snprintf(retStr,sizeof(buf),"DIRECT/NRZ");\r
13d77ef9 1048 break;\r
1049 case DEMOD_PSK1:\r
9795e535 1050 snprintf(retStr,sizeof(buf),"PSK1");\r
13d77ef9 1051 break;\r
1052 case DEMOD_PSK2:\r
9795e535 1053 snprintf(retStr,sizeof(buf),"PSK2");\r
13d77ef9 1054 break;\r
1055 case DEMOD_PSK3:\r
9795e535 1056 snprintf(retStr,sizeof(buf),"PSK3");\r
13d77ef9 1057 break;\r
1058 case DEMOD_BI:\r
9795e535 1059 snprintf(retStr,sizeof(buf),"BIPHASE");\r
13d77ef9 1060 break;\r
1061 case DEMOD_BIa:\r
9795e535 1062 snprintf(retStr,sizeof(buf),"BIPHASEa - (CDP)");\r
13d77ef9 1063 break;\r
1064 default:\r
9795e535 1065 snprintf(retStr,sizeof(buf),"(Unknown)");\r
13d77ef9 1066 break;\r
1067 }\r
1068 return buf;\r
1069}\r
1070\r
e98572a1 1071void t55x7_create_config_block( int tagtype ){\r
1072 //switch?\r
1073 \r
1074 \r
1075}\r
1076\r
ad6219fc 1077/*\r
13d77ef9 1078uint32_t PackBits(uint8_t start, uint8_t len, uint8_t* bits){\r
1079 \r
1080 int i = start;\r
1081 int j = len-1;\r
1082\r
1083 if (len > 32) return 0;\r
1084\r
1085 uint32_t tmp = 0;\r
1086 for (; j >= 0; --j, ++i)\r
1087 tmp |= bits[i] << j;\r
1088\r
1089 return tmp;\r
1090}\r
ad6219fc 1091*/\r
54a942b0 1092static command_t CommandTable[] =\r
1093{\r
13d77ef9 1094 {"help", CmdHelp, 1, "This help"},\r
1095 {"config", CmdT55xxSetConfig, 1, "Set/Get T55XX configuration (modulation, inverted, offset, rate)"},\r
1096 {"detect", CmdT55xxDetect, 0, "[1] Try detecting the tag modulation from reading the configuration block."},\r
1097 {"read", CmdT55xxReadBlock, 0, "<block> [password] -- Read T55xx block data (page 0) [optional password]"},\r
1098 {"write", CmdT55xxWriteBlock,0, "<block> <data> [password] -- Write T55xx block data (page 0) [optional password]"},\r
1099 {"trace", CmdT55xxReadTrace, 0, "[1] Show T55xx traceability data (page 1/ blk 0-1)"},\r
1100 {"info", CmdT55xxInfo, 0, "[1] Show T55xx configuration data (page 0/ blk 0)"},\r
1101 {"dump", CmdT55xxDump, 0, "[password] Dump T55xx card block 0-7. [optional password]"},\r
1102 {"special", special, 0, "Show block changes with 64 different offsets"},\r
54a942b0 1103 {NULL, NULL, 0, NULL}\r
1104};\r
1105\r
1106int CmdLFT55XX(const char *Cmd)\r
1107{\r
1108 CmdsParse(CommandTable, Cmd);\r
1109 return 0;\r
1110}\r
1111\r
1112int CmdHelp(const char *Cmd)\r
1113{\r
1114 CmdsHelp(CommandTable);\r
1115 return 0;\r
1116}\r
Proxmark3 GIT tracking
Impressum, Datenschutz