| 1 | //----------------------------------------------------------------------------- |
| 2 | // Jonathan Westhues, Aug 2005 |
| 3 | // Gerhard de Koning Gans, April 2008, May 2011 |
| 4 | // |
| 5 | // This code is licensed to you under the terms of the GNU GPL, version 2 or, |
| 6 | // at your option, any later version. See the LICENSE.txt file for the text of |
| 7 | // the license. |
| 8 | //----------------------------------------------------------------------------- |
| 9 | // Definitions internal to the app source. |
| 10 | //----------------------------------------------------------------------------- |
| 11 | |
| 12 | #ifndef __APPS_H |
| 13 | #define __APPS_H |
| 14 | |
| 15 | #include <stdint.h> |
| 16 | #include <stddef.h> |
| 17 | #include <stdlib.h> |
| 18 | #include <sys/types.h> |
| 19 | #include "common.h" |
| 20 | #include "crc32.h" |
| 21 | #include "lfdemod.h" |
| 22 | #include "BigBuf.h" |
| 23 | #include "fpgaloader.h" |
| 24 | #include "usb_cdc.h" |
| 25 | #include "hitag2.h" |
| 26 | #include "mifare.h" |
| 27 | #include "pcf7931.h" |
| 28 | //#include "des.h" |
| 29 | //#include "aes.h" |
| 30 | #include "desfire.h" |
| 31 | |
| 32 | |
| 33 | extern const uint8_t OddByteParity[256]; |
| 34 | extern int rsamples; // = 0; |
| 35 | extern int tracing; // = TRUE; |
| 36 | extern uint8_t trigger; |
| 37 | |
| 38 | // This may be used (sparingly) to declare a function to be copied to |
| 39 | // and executed from RAM |
| 40 | #define RAMFUNC __attribute((long_call, section(".ramfunc"))) |
| 41 | |
| 42 | /// appmain.h |
| 43 | void ReadMem(int addr); |
| 44 | void __attribute__((noreturn)) AppMain(void); |
| 45 | void SamyRun(void); |
| 46 | //void DbpIntegers(int a, int b, int c); |
| 47 | void DbpString(char *str); |
| 48 | void Dbprintf(const char *fmt, ...); |
| 49 | void Dbhexdump(int len, uint8_t *d, bool bAsci); |
| 50 | |
| 51 | // ADC Vref = 3300mV, and an (10M+1M):1M voltage divider on the HF input can measure voltages up to 36300 mV |
| 52 | #define MAX_ADC_HF_VOLTAGE 36300 |
| 53 | // ADC Vref = 3300mV, and an (10000k+240k):240k voltage divider on the LF input can measure voltages up to 140800 mV |
| 54 | #define MAX_ADC_LF_VOLTAGE 140800 |
| 55 | int AvgAdc(int ch); |
| 56 | |
| 57 | void ToSendStuffBit(int b); |
| 58 | void ToSendReset(void); |
| 59 | void ListenReaderField(int limit); |
| 60 | extern int ToSendMax; |
| 61 | extern uint8_t ToSend[]; |
| 62 | |
| 63 | |
| 64 | /// lfops.h |
| 65 | extern uint8_t decimation; |
| 66 | extern uint8_t bits_per_sample ; |
| 67 | extern bool averaging; |
| 68 | |
| 69 | void AcquireRawAdcSamples125k(int divisor); |
| 70 | void ModThenAcquireRawAdcSamples125k(uint32_t delay_off, uint32_t period_0, uint32_t period_1, uint8_t *command); |
| 71 | void ReadTItag(void); |
| 72 | void WriteTItag(uint32_t idhi, uint32_t idlo, uint16_t crc); |
| 73 | |
| 74 | void AcquireTiType(void); |
| 75 | void AcquireRawBitsTI(void); |
| 76 | void SimulateTagLowFrequency(int period, int gap, int ledcontrol); |
| 77 | void SimulateTagLowFrequencyBidir(int divisor, int max_bitlen); |
| 78 | void CmdHIDsimTAG(int hi, int lo, int ledcontrol); |
| 79 | void CmdFSKsimTAG(uint16_t arg1, uint16_t arg2, size_t size, uint8_t *BitStream); |
| 80 | void CmdASKsimTag(uint16_t arg1, uint16_t arg2, size_t size, uint8_t *BitStream); |
| 81 | void CmdPSKsimTag(uint16_t arg1, uint16_t arg2, size_t size, uint8_t *BitStream); |
| 82 | void CmdHIDdemodFSK(int findone, int *high, int *low, int ledcontrol); |
| 83 | void CmdAWIDdemodFSK(int findone, int *high, int *low, int ledcontrol); // Realtime demodulation mode for AWID26 |
| 84 | void CmdEM410xdemod(int findone, int *high, int *low, int ledcontrol); |
| 85 | void CmdIOdemodFSK(int findone, int *high, int *low, int ledcontrol); |
| 86 | void CopyIOtoT55x7(uint32_t hi, uint32_t lo); // Clone an ioProx card to T5557/T5567 |
| 87 | void CopyHIDtoT55x7(uint32_t hi2, uint32_t hi, uint32_t lo, uint8_t longFMT); // Clone an HID card to T5557/T5567 |
| 88 | void CopyVikingtoT55xx(uint32_t block1, uint32_t block2, uint8_t Q5); |
| 89 | void WriteEM410x(uint32_t card, uint32_t id_hi, uint32_t id_lo); |
| 90 | void CopyIndala64toT55x7(uint32_t hi, uint32_t lo); // Clone Indala 64-bit tag by UID to T55x7 |
| 91 | void CopyIndala224toT55x7(uint32_t uid1, uint32_t uid2, uint32_t uid3, uint32_t uid4, uint32_t uid5, uint32_t uid6, uint32_t uid7); // Clone Indala 224-bit tag by UID to T55x7 |
| 92 | void T55xxResetRead(void); |
| 93 | void T55xxWriteBlock(uint32_t Data, uint8_t Block, uint32_t Pwd, uint8_t PwdMode); |
| 94 | void T55xxWriteBlockExt(uint32_t Data, uint8_t Block, uint32_t Pwd, uint8_t PwdMode); |
| 95 | void T55xxReadBlock(uint16_t arg0, uint8_t Block, uint32_t Pwd); |
| 96 | void T55xxWakeUp(uint32_t Pwd); |
| 97 | void TurnReadLFOn(); |
| 98 | void EM4xReadWord(uint8_t Address, uint32_t Pwd, uint8_t PwdMode); |
| 99 | void EM4xWriteWord(uint32_t Data, uint8_t Address, uint32_t Pwd, uint8_t PwdMode); |
| 100 | |
| 101 | /// iso14443.h |
| 102 | void SimulateIso14443bTag(void); |
| 103 | void AcquireRawAdcSamplesIso14443b(uint32_t parameter); |
| 104 | void ReadSTMemoryIso14443b(uint32_t); |
| 105 | void RAMFUNC SnoopIso14443b(void); |
| 106 | void SendRawCommand14443B(uint32_t, uint32_t, uint8_t, uint8_t[]); |
| 107 | |
| 108 | /// iso14443a.h |
| 109 | void RAMFUNC SniffIso14443a(uint8_t param); |
| 110 | void SimulateIso14443aTag(int tagType, int flags, byte_t* data); |
| 111 | void ReaderIso14443a(UsbCommand * c); |
| 112 | // Also used in iclass.c |
| 113 | bool RAMFUNC LogTrace(const uint8_t *btBytes, uint16_t len, uint32_t timestamp_start, uint32_t timestamp_end, uint8_t *parity, bool readerToTag); |
| 114 | void GetParity(const uint8_t *pbtCmd, uint16_t len, uint8_t *parity); |
| 115 | void iso14a_set_trigger(bool enable); |
| 116 | |
| 117 | void RAMFUNC SniffMifare(uint8_t param); |
| 118 | |
| 119 | /// epa.h |
| 120 | void EPA_PACE_Collect_Nonce(UsbCommand * c); |
| 121 | void EPA_PACE_Replay(UsbCommand *c); |
| 122 | |
| 123 | // mifarecmd.h |
| 124 | //void ReaderMifare(bool first_try); |
| 125 | void ReaderMifare(bool first_try, uint8_t block ); |
| 126 | int32_t dist_nt(uint32_t nt1, uint32_t nt2); |
| 127 | void MifareReadBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *data); |
| 128 | void MifareUReadBlock(uint8_t arg0, uint8_t arg1, uint8_t *datain); |
| 129 | void MifareUC_Auth(uint8_t arg0, uint8_t *datain); |
| 130 | void MifareUReadCard(uint8_t arg0, uint16_t arg1, uint8_t arg2, uint8_t *datain); |
| 131 | void MifareReadSector(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain); |
| 132 | void MifareWriteBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain); |
| 133 | //void MifareUWriteBlockCompat(uint8_t arg0,uint8_t *datain); |
| 134 | void MifareUWriteBlock(uint8_t arg0, uint8_t arg1, uint8_t *datain); |
| 135 | void MifareNested(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
| 136 | void MifareAcquireEncryptedNonces(uint32_t arg0, uint32_t arg1, uint32_t flags, uint8_t *datain); |
| 137 | void MifareChkKeys(uint16_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain); |
| 138 | void Mifare1ksim(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain); |
| 139 | void MifareSetDbgLvl(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
| 140 | void MifareEMemClr(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
| 141 | void MifareEMemSet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
| 142 | void MifareEMemGet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
| 143 | void MifareECardLoad(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
| 144 | void MifareCSetBlock(uint32_t arg0, uint32_t arg1, uint8_t *datain); // Work with "magic Chinese" card |
| 145 | void MifareCGetBlock(uint32_t arg0, uint32_t arg1, uint8_t *datain); |
| 146 | void MifareCIdent(); // is "magic chinese" card? |
| 147 | void MifareUSetPwd(uint8_t arg0, uint8_t *datain); |
| 148 | void OnSuccessMagic(); |
| 149 | void OnErrorMagic(uint8_t reason); |
| 150 | void MifareCollectNonces(uint32_t arg0, uint32_t arg1); |
| 151 | |
| 152 | //desfire |
| 153 | void Mifare_DES_Auth1(uint8_t arg0,uint8_t *datain); |
| 154 | void Mifare_DES_Auth2(uint32_t arg0, uint8_t *datain); |
| 155 | |
| 156 | // mifaredesfire.h |
| 157 | bool InitDesfireCard(); |
| 158 | void MifareSendCommand(uint8_t arg0,uint8_t arg1, uint8_t *datain); |
| 159 | void MifareDesfireGetInformation(); |
| 160 | void MifareDES_Auth1(uint8_t arg0,uint8_t arg1,uint8_t arg2, uint8_t *datain); |
| 161 | void ReaderMifareDES(uint32_t param, uint32_t param2, uint8_t * datain); |
| 162 | int DesfireAPDU(uint8_t *cmd, size_t cmd_len, uint8_t *dataout); |
| 163 | size_t CreateAPDU( uint8_t *datain, size_t len, uint8_t *dataout); |
| 164 | void OnSuccess(); |
| 165 | void OnError(uint8_t reason); |
| 166 | |
| 167 | |
| 168 | // desfire_crypto.h |
| 169 | void *mifare_cryto_preprocess_data (desfiretag_t tag, void *data, size_t *nbytes, off_t offset, int communication_settings); |
| 170 | void *mifare_cryto_postprocess_data (desfiretag_t tag, void *data, ssize_t *nbytes, int communication_settings); |
| 171 | void mifare_cypher_single_block (desfirekey_t key, uint8_t *data, uint8_t *ivect, MifareCryptoDirection direction, MifareCryptoOperation operation, size_t block_size); |
| 172 | void mifare_cypher_blocks_chained (desfiretag_t tag, desfirekey_t key, uint8_t *ivect, uint8_t *data, size_t data_size, MifareCryptoDirection direction, MifareCryptoOperation operation); |
| 173 | size_t key_block_size (const desfirekey_t key); |
| 174 | size_t padded_data_length (const size_t nbytes, const size_t block_size); |
| 175 | size_t maced_data_length (const desfirekey_t key, const size_t nbytes); |
| 176 | size_t enciphered_data_length (const desfiretag_t tag, const size_t nbytes, int communication_settings); |
| 177 | void cmac_generate_subkeys (desfirekey_t key); |
| 178 | void cmac (const desfirekey_t key, uint8_t *ivect, const uint8_t *data, size_t len, uint8_t *cmac); |
| 179 | |
| 180 | /// iso15693.h |
| 181 | void RecordRawAdcSamplesIso15693(void); |
| 182 | void AcquireRawAdcSamplesIso15693(void); |
| 183 | void ReaderIso15693(uint32_t parameter); // Simulate an ISO15693 reader - greg |
| 184 | void SimTagIso15693(uint32_t parameter, uint8_t *uid); // simulate an ISO15693 tag - greg |
| 185 | void BruteforceIso15693Afi(uint32_t speed); // find an AFI of a tag - atrox |
| 186 | void DirectTag15693Command(uint32_t datalen,uint32_t speed, uint32_t recv, uint8_t data[]); // send arbitrary commands from CLI - atrox |
| 187 | void SetDebugIso15693(uint32_t flag); |
| 188 | |
| 189 | /// iclass.h |
| 190 | void RAMFUNC SnoopIClass(void); |
| 191 | void SimulateIClass(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); |
| 192 | void ReaderIClass(uint8_t arg0); |
| 193 | void ReaderIClass_Replay(uint8_t arg0,uint8_t *MAC); |
| 194 | void IClass_iso14443A_GetPublic(uint8_t arg0); |
| 195 | void iClass_Authentication(uint8_t *MAC); |
| 196 | void iClass_WriteBlock(uint8_t blockNo, uint8_t *data); |
| 197 | void iClass_ReadBlk(uint8_t blockNo); |
| 198 | bool iClass_ReadBlock(uint8_t blockNo, uint8_t *readdata); |
| 199 | void iClass_Dump(uint8_t blockno, uint8_t numblks); |
| 200 | void iClass_Clone(uint8_t startblock, uint8_t endblock, uint8_t *data); |
| 201 | void iClass_ReadCheck(uint8_t blockNo, uint8_t keyType); |
| 202 | |
| 203 | |
| 204 | // hitag2.h |
| 205 | void SnoopHitag(uint32_t type); |
| 206 | void SimulateHitagTag(bool tag_mem_supplied, byte_t* data); |
| 207 | void ReaderHitag(hitag_function htf, hitag_data* htd); |
| 208 | |
| 209 | // cmd.h |
| 210 | bool cmd_receive(UsbCommand* cmd); |
| 211 | bool cmd_send(uint32_t cmd, uint32_t arg0, uint32_t arg1, uint32_t arg2, void* data, size_t len); |
| 212 | |
| 213 | /// util.h |
| 214 | void HfSnoop(int , int); |
| 215 | //EMV functions emvcmd.h |
| 216 | void EMVTransaction(void); |
| 217 | void EMVgetUDOL(void); |
| 218 | void EMVloadvalue(uint32_t tag, uint8_t* datain); |
| 219 | void EMVdumpcard(void); |
| 220 | |
| 221 | #endif |