git.zerfleddert.de Git - proxmark3-svn/blob - common/desfire.h

   1 #ifndef __DESFIRE_H
   2 #define __DESFIRE_H
   3
   4 #include <string.h>
   5 #include <stdarg.h>
   6 #include "aes.h"
   7 #include "mifare.h"
   8
   9 #define MAX_CRYPTO_BLOCK_SIZE 16
  10 /* Mifare DESFire EV1 Application crypto operations */
  11 #define APPLICATION_CRYPTO_DES    0x00
  12 #define APPLICATION_CRYPTO_3K3DES 0x40
  13 #define APPLICATION_CRYPTO_AES    0x80
  14
  15 #define MAC_LENGTH 4
  16 #define CMAC_LENGTH 8
  17
  18 typedef enum {
  19     MCD_SEND,
  20     MCD_RECEIVE
  21 } MifareCryptoDirection;
  22
  23 typedef enum {
  24     MCO_ENCYPHER,
  25     MCO_DECYPHER
  26 } MifareCryptoOperation;
  27
  28 #define MDCM_MASK 0x000F
  29
  30 #define CMAC_NONE 0
  31
  32 // Data send to the PICC is used to update the CMAC
  33 #define CMAC_COMMAND 0x010
  34 // Data received from the PICC is used to update the CMAC
  35 #define CMAC_VERIFY  0x020
  36
  37 // MAC the command (when MDCM_MACED)
  38 #define MAC_COMMAND 0x100
  39 // The command returns a MAC to verify (when MDCM_MACED)
  40 #define MAC_VERIFY  0x200
  41
  42 #define ENC_COMMAND 0x1000
  43 #define NO_CRC      0x2000
  44
  45 #define MAC_MASK   0x0F0
  46 #define CMAC_MACK  0xF00
  47
  48 /* Communication mode */
  49 #define MDCM_PLAIN      0x00
  50 #define MDCM_MACED      0x01
  51 #define MDCM_ENCIPHERED 0x03
  52
  53 /* Error code managed by the library */
  54 #define CRYPTO_ERROR            0x01
  55
  56
  57 enum DESFIRE_AUTH_SCHEME {
  58         AS_LEGACY,
  59         AS_NEW
  60 };
  61
  62 enum DESFIRE_CRYPTOALGO {
  63         T_DES = 0x00,
  64         T_3DES = 0x01,
  65         T_3K3DES = 0x02,
  66         T_AES = 0x03
  67 };
  68
  69
  70 #define DESFIRE_KEY(key) ((struct desfire_key *) key)
  71 struct desfire_key {
  72     enum DESFIRE_CRYPTOALGO type;
  73     uint8_t data[24];
  74     // DES_key_schedule ks1;
  75     // DES_key_schedule ks2;
  76     // DES_key_schedule ks3;
  77         AesCtx aes_ks;
  78     uint8_t cmac_sk1[24];
  79     uint8_t cmac_sk2[24];
  80     uint8_t aes_version;
  81 };
  82 typedef struct desfire_key *desfirekey_t;
  83
  84 #define DESFIRE(tag) ((struct desfire_tag *) tag)
  85 struct desfire_tag {
  86     iso14a_card_select_t info;
  87     int active;
  88     uint8_t last_picc_error;
  89     uint8_t last_internal_error;
  90     uint8_t last_pcd_error;
  91     desfirekey_t session_key;
  92         enum DESFIRE_AUTH_SCHEME authentication_scheme;
  93     uint8_t authenticated_key_no;
  94
  95         uint8_t ivect[MAX_CRYPTO_BLOCK_SIZE];
  96     uint8_t cmac[16];
  97     uint8_t *crypto_buffer;
  98     size_t crypto_buffer_size;
  99     uint32_t selected_application;
 100 };
 101 typedef struct desfire_tag *desfiretag_t;
 102
 103
 104 /* File types */
 105 enum DESFIRE_FILE_TYPES {
 106     MDFT_STANDARD_DATA_FILE             = 0x00,
 107     MDFT_BACKUP_DATA_FILE               = 0x01,
 108     MDFT_VALUE_FILE_WITH_BACKUP         = 0x02,
 109     MDFT_LINEAR_RECORD_FILE_WITH_BACKUP = 0x03,
 110     MDFT_CYCLIC_RECORD_FILE_WITH_BACKUP = 0x04
 111 };
 112
 113 enum DESFIRE_STATUS {
 114     OPERATION_OK                                = 0x00,
 115     NO_CHANGES                                  = 0x0c,
 116     OUT_OF_EEPROM_ERROR                 = 0x0e,
 117     ILLEGAL_COMMAND_CODE                = 0x1c,
 118     INTEGRITY_ERROR                     = 0x1e,
 119     NO_SUCH_KEY                                 = 0x40,
 120     LENGTH_ERROR                                = 0x7e,
 121     PERMISSION_DENIED                   = 0x9d,
 122     PARAMETER_ERROR                     = 0x9e,
 123     APPLICATION_NOT_FOUND               = 0xa0,
 124     APPL_INTEGRITY_ERROR                = 0xa1,
 125     AUTHENTICATION_ERROR                = 0xae,
 126     ADDITIONAL_FRAME                    = 0xaf,
 127     BOUNDARY_ERROR                              = 0xbe,
 128     PICC_INTEGRITY_ERROR                = 0xc1,
 129     COMMAND_ABORTED                     = 0xca,
 130     PICC_DISABLED_ERROR                 = 0xcd,
 131     COUNT_ERROR                                 = 0xce,
 132     DUPLICATE_ERROR                     = 0xde,
 133     EEPROM_ERROR                                = 0xee,
 134     FILE_NOT_FOUND                              = 0xf0,
 135     FILE_INTEGRITY_ERROR                = 0xf1
 136 };
 137
 138 enum DESFIRE_CMD {
 139     CREATE_APPLICATION                  = 0xca,
 140     DELETE_APPLICATION                  = 0xda,
 141     GET_APPLICATION_IDS                 = 0x6a,
 142     SELECT_APPLICATION                  = 0x5a,
 143     FORMAT_PICC                                 = 0xfc,
 144     GET_VERSION                                 = 0x60,
 145     READ_DATA                                   = 0xbd,
 146     WRITE_DATA                                  = 0x3d,
 147     GET_VALUE                                   = 0x6c,
 148     CREDIT                                              = 0x0c,
 149     DEBIT                                               = 0xdc,
 150     LIMITED_CREDIT                              = 0x1c,
 151     WRITE_RECORD                                = 0x3b,
 152     READ_RECORDS                                = 0xbb,
 153     CLEAR_RECORD_FILE                   = 0xeb,
 154     COMMIT_TRANSACTION                  = 0xc7,
 155     ABORT_TRANSACTION                   = 0xa7,
 156     GET_FREE_MEMORY             = 0x6e,
 157         GET_FILE_IDS                            = 0x6f,
 158     GET_FILE_SETTINGS                   = 0xf5,
 159     CHANGE_FILE_SETTINGS                = 0x5f,
 160     CREATE_STD_DATA_FILE                = 0xcd,
 161     CREATE_BACKUP_DATA_FILE     = 0xcb,
 162     CREATE_VALUE_FILE                   = 0xcc,
 163     CREATE_LINEAR_RECORD_FILE   = 0xc1,
 164     CREATE_CYCLIC_RECORD_FILE   = 0xc0,
 165     DELETE_FILE                                 = 0xdf,
 166     AUTHENTICATE                                = 0x0a,  // AUTHENTICATE_NATIVE
 167         AUTHENTICATE_ISO                        = 0x1a,  // AUTHENTICATE_STANDARD
 168         AUTHENTICATE_AES                        = 0xaa,
 169     CHANGE_KEY_SETTINGS                 = 0x54,
 170     GET_KEY_SETTINGS                    = 0x45,
 171     CHANGE_KEY                                  = 0xc4,
 172     GET_KEY_VERSION                     = 0x64,
 173     AUTHENTICATION_FRAME                = 0xAF
 174 };
 175
 176 #endif
 177