git.zerfleddert.de Git - proxmark3-svn/blob - client/cmdlfvisa2000.c

   1 //-----------------------------------------------------------------------------
   2 //
   3 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
   4 // at your option, any later version. See the LICENSE.txt file for the text of
   5 // the license.
   6 //-----------------------------------------------------------------------------
   7 // Low frequency Presco tag commands
   8 //-----------------------------------------------------------------------------
   9
  10 #include "cmdlfvisa2000.h"
  11
  12 #define BL0CK1 0x56495332
  13
  14 static int CmdHelp(const char *Cmd);
  15
  16 int usage_lf_visa2k_clone(void){
  17         PrintAndLog("clone a Visa2000 tag to a T55x7 tag.");
  18         PrintAndLog("Usage: lf visa2k clone [h] <card ID> <Q5>");
  19         PrintAndLog("Options:");
  20         PrintAndLog("      h          : This help");
  21         PrintAndLog("      <card ID>  : Visa2k card ID");
  22         PrintAndLog("      <Q5>       : specify write to Q5 (t5555 instead of t55x7)");
  23         PrintAndLog("");
  24         PrintAndLog("Sample: lf visa2k clone 112233");
  25         return 0;
  26 }
  27
  28 int usage_lf_visa2k_sim(void) {
  29         PrintAndLog("Enables simulation of visa2k card with specified card number.");
  30         PrintAndLog("Simulation runs until the button is pressed or another USB command is issued.");
  31         PrintAndLog("");
  32         PrintAndLog("Usage:  lf visa2k sim [h] <card ID>");
  33         PrintAndLog("Options:");
  34         PrintAndLog("      h          : This help");
  35         PrintAndLog("      <card ID>  : Visa2k card ID");
  36         PrintAndLog("");
  37         PrintAndLog("Sample: lf visa2k sim 112233");
  38         return 0;
  39 }
  40
  41 static uint8_t visa_chksum( uint32_t id ) {
  42     uint8_t sum = 0;
  43     for (uint8_t i = 0; i < 32; i += 4)
  44         sum ^=  (id >> i) & 0xF;
  45     return sum & 0xF;
  46 }
  47
  48 static uint8_t visa_parity( uint32_t id) {
  49         // 4bit parity LUT
  50         uint8_t par_lut[] = {
  51                 0,1,1,0
  52                 ,1,0,0,1
  53                 ,1,0,0,1
  54                 ,0,1,1,0
  55         };
  56         uint8_t par = 0;
  57         par |= par_lut[ NIBBLE_HIGH( (id >> 8) & 0xFF) ] << 3;
  58         par |= par_lut[ NIBBLE_LOW( (id >> 8) & 0xFF) ] << 2;
  59         par |= par_lut[ NIBBLE_HIGH( id & 0xFF ) ] << 1;
  60         par |= par_lut[ NIBBLE_LOW( id & 0xFF) ];
  61         return par;
  62 }
  63
  64
  65 /**
  66 *
  67 * 56495332 00096ebd 00000077 —> tag id 618173
  68 * aaaaaaaa iiiiiiii -----..c
  69 *
  70 * a = fixed value  ascii 'VIS2'
  71 * i = card id
  72 * c = checksum  (xor of card id)
  73 * . = unknown
  74 *
  75 **/
  76 //see ASKDemod for what args are accepted
  77 int CmdVisa2kDemod(const char *Cmd) {
  78
  79         // save GraphBuffer - to restore it later
  80         save_restoreGB(1);
  81
  82         //sCmdAskEdgeDetect("");
  83
  84         //ASK / Manchester
  85         bool st = TRUE;
  86         if (!ASKDemod_ext("64 0 0", FALSE, FALSE, 1, &st)) {
  87                 if (g_debugMode) PrintAndLog("DEBUG: Error - Visa2k: ASK/Manchester Demod failed");
  88                 save_restoreGB(0);
  89                 return 0;
  90         }
  91         size_t size = DemodBufferLen;
  92         int ans = Visa2kDemod_AM(DemodBuffer, &size);
  93         if (ans < 0){
  94                 if (g_debugMode){
  95                         if (ans == -1)
  96                                 PrintAndLog("DEBUG: Error - Visa2k: too few bits found");
  97                         else if (ans == -2)
  98                                 PrintAndLog("DEBUG: Error - Visa2k: preamble not found");
  99                         else if (ans == -3)
 100                                 PrintAndLog("DEBUG: Error - Visa2k: Size not correct: %d", size);
 101                         else
 102                                 PrintAndLog("DEBUG: Error - Visa2k: ans: %d", ans);
 103                 }
 104                 save_restoreGB(0);
 105                 return 0;
 106         }
 107         setDemodBuf(DemodBuffer, 96, ans);
 108         setGrid_Clock(64);
 109
 110         //got a good demod
 111         uint32_t raw1 = bytebits_to_byte(DemodBuffer, 32);
 112         uint32_t raw2 = bytebits_to_byte(DemodBuffer+32, 32);
 113         uint32_t raw3 = bytebits_to_byte(DemodBuffer+64, 32);
 114
 115         // chksum
 116         uint8_t calc = visa_chksum(raw2);
 117         uint8_t chk = raw3 & 0xF;
 118
 119         // test checksums
 120         if ( chk != calc ) {
 121                 printf("DEBUG: error: Visa2000 checksum failed %x - %x\n", chk, calc);
 122                 save_restoreGB(0);
 123                 return 0;
 124         }
 125         // parity
 126         uint8_t calc_par = visa_parity(raw2);
 127         uint8_t chk_par = (raw3 & 0xF0) >> 4;
 128         if ( calc_par != chk_par) {
 129                 printf("DEBUG: error: Visa2000 parity failed %x - %x\n", chk_par, calc_par);
 130                 save_restoreGB(0);
 131                 return 0;
 132         }
 133         PrintAndLog("Visa2000 Tag Found: Card ID %u,  Raw: %08X%08X%08X", raw2,  raw1 ,raw2, raw3);
 134         save_restoreGB(0);
 135         return 1;
 136 }
 137
 138 int CmdVisa2kRead(const char *Cmd) {
 139         CmdLFRead("s");
 140         getSamples("12000",TRUE);
 141         return CmdVisa2kDemod(Cmd);
 142 }
 143
 144 int CmdVisa2kClone(const char *Cmd) {
 145
 146         uint64_t id = 0;
 147         uint32_t blocks[4] = {T55x7_MODULATION_MANCHESTER | T55x7_BITRATE_RF_64 | T55x7_ST_TERMINATOR | 3 << T55x7_MAXBLOCK_SHIFT, BL0CK1, 0};
 148
 149         char cmdp = param_getchar(Cmd, 0);
 150         if (strlen(Cmd) == 0 || cmdp == 'h' || cmdp == 'H') return usage_lf_visa2k_clone();
 151
 152         id = param_get32ex(Cmd, 0, 0, 10);
 153
 154         //Q5
 155         if (param_getchar(Cmd, 1) == 'Q' || param_getchar(Cmd, 1) == 'q') {
 156                 //t5555 (Q5) BITRATE = (RF-2)/2 (iceman)
 157                 blocks[0] = T5555_MODULATION_MANCHESTER | ((64-2)>>1) << T5555_BITRATE_SHIFT | T5555_ST_TERMINATOR | 3 << T5555_MAXBLOCK_SHIFT;
 158         }
 159
 160         //
 161         blocks[2] = id;
 162         blocks[3] =  (visa_parity(id) << 4) | visa_chksum(id);
 163
 164         PrintAndLog("Preparing to clone Visa2000 to T55x7 with CardId: %u", id);
 165         PrintAndLog("Blk | Data ");
 166         PrintAndLog("----+------------");
 167         for(int i = 0; i<4; ++i)
 168                 PrintAndLog(" %02d | 0x%08x", i , blocks[i]);
 169
 170         UsbCommand resp;
 171         UsbCommand c = {CMD_T55XX_WRITE_BLOCK, {0,0,0}};
 172
 173         for (int i = 3; i >= 0; --i) {
 174                 c.arg[0] = blocks[i];
 175                 c.arg[1] = i;
 176                 clearCommandBuffer();
 177                 SendCommand(&c);
 178                 if (!WaitForResponseTimeout(CMD_ACK, &resp, T55XX_WRITE_TIMEOUT)){
 179                         PrintAndLog("Error occurred, device did not respond during write operation.");
 180                         return -1;
 181                 }
 182         }
 183     return 0;
 184 }
 185
 186 int CmdVisa2kSim(const char *Cmd) {
 187
 188         uint32_t id = 0;
 189         char cmdp = param_getchar(Cmd, 0);
 190         if (strlen(Cmd) == 0 || cmdp == 'h' || cmdp == 'H') return usage_lf_visa2k_sim();
 191
 192         id = param_get32ex(Cmd, 0, 0, 10);
 193
 194         uint8_t clk = 64, encoding = 1, separator = 1, invert = 0;
 195         uint16_t arg1, arg2;
 196         size_t size = 96;
 197         arg1 = clk << 8 | encoding;
 198         arg2 = invert << 8 | separator;
 199
 200         PrintAndLog("Simulating Visa2000 - CardId: %u", id);
 201
 202         UsbCommand c = {CMD_ASK_SIM_TAG, {arg1, arg2, size}};
 203
 204         uint32_t blocks[3] = { BL0CK1, id, (visa_parity(id) << 4) | visa_chksum(id) };
 205
 206         for(int i=0; i<3; ++i)
 207                 num_to_bytebits(blocks[i], 32, c.d.asBytes + i*32);
 208
 209         clearCommandBuffer();
 210         SendCommand(&c);
 211         return 0;
 212 }
 213
 214 static command_t CommandTable[] = {
 215     {"help",    CmdHelp,                1, "This help"},
 216         {"read",        CmdVisa2kRead,  0, "Attempt to read and extract tag data"},
 217         {"clone",       CmdVisa2kClone, 0, "clone Visa2000 tag"},
 218         {"sim",         CmdVisa2kSim,   0, "simulate Visa2000 tag"},
 219     {NULL, NULL, 0, NULL}
 220 };
 221
 222 int CmdLFVisa2k(const char *Cmd) {
 223         clearCommandBuffer();
 224     CmdsParse(CommandTable, Cmd);
 225     return 0;
 226 }
 227
 228 int CmdHelp(const char *Cmd) {
 229     CmdsHelp(CommandTable);
 230     return 0;
 231 }