]> git.zerfleddert.de Git - proxmark3-svn/blob - client/cmdlft55xx.h
CHG: 'hw tune' adhjusted the NON_VOLTAGE limit to 0.999v, below this value the...
[proxmark3-svn] / client / cmdlft55xx.h
1 //-----------------------------------------------------------------------------
2 //
3 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
4 // at your option, any later version. See the LICENSE.txt file for the text of
5 // the license.
6 //-----------------------------------------------------------------------------
7 // Low frequency T55xx commands
8 //-----------------------------------------------------------------------------
9
10 #ifndef CMDLFT55XX_H__
11 #define CMDLFT55XX_H__
12
13 // config blocks
14 #define T55X7_DEFAULT_CONFIG_BLOCK 0x000880E8 // compat mode, data rate 32, manchester, ST, 7 data blocks
15 #define T55X7_RAW_CONFIG_BLOCK 0x000880E0 // compat mode, data rate 32, manchester, 7 data blocks
16 #define T55X7_EM_UNIQUE_CONFIG_BLOCK 0x00148040 // emulate em4x02/unique - compat mode, manchester, data rate 64, 2 data blocks
17 // FDXB requires data inversion and BiPhase 57 is simply BipHase 50 inverted, so we can either do it using the modulation scheme or the inversion flag
18 // we've done both below to prove that it works either way, and the modulation value for BiPhase 50 in the Atmel data sheet of binary "10001" (17) is a typo,
19 // and it should actually be "10000" (16)
20 // #define T55X7_FDXB_CONFIG_BLOCK 903F8080 // emulate fdx-b - xtended mode, BiPhase ('57), data rate 32, 4 data blocks
21 #define T55X7_FDXB_CONFIG_BLOCK 0x903F0082 // emulate fdx-b - xtended mode, BiPhase ('50), invert data, data rate 32, 4 data blocks
22 #define T55X7_HID_26_CONFIG_BLOCK 0x00107060 // hid 26 bit - compat mode, FSK2a, data rate 50, 3 data blocks
23 #define T55X7_PYRAMID_CONFIG_BLOCK 0x00107080 // Pyramid 26 bit - compat mode, FSK2a, data rate 50, 4 data blocks
24 #define T55X7_INDALA_64_CONFIG_BLOCK 0x00081040 // emulate indala 64 bit - compat mode, PSK1, psk carrier FC * 2, data rate 32, maxblock 2
25 #define T55X7_INDALA_224_CONFIG_BLOCK 0x000810E0 // emulate indala 224 bit - compat mode, PSK1, psk carrier FC * 2, data rate 32, maxblock 7
26 #define T55X7_GUARDPROXII_CONFIG_BLOCK 0x00150060 // bitrate 64pcb, Direct modulation, Biphase, 3 data blocks
27 #define T55X7_VIKING_CONFIG_BLOCK 0x00088040 // compat mode, data rate 32, Manchester, 2 data blocks
28 #define T55X7_NORALYS_CONFIG_BLOCK 0x00088C6A // compat mode, (NORALYS - KCP3000)
29 #define T55X7_IOPROX_CONFIG_BLOCK 0x00147040 // maxblock 2
30 #define T55X7_PRESCO_CONFIG_BLOCK 0x00088088 // data rate 32, Manchester, 5 data blocks, STT
31 #define T55X7_bin 0b0010
32
33 #define T5555_DEFAULT_CONFIG_BLOCK 0x6001F004 // data rate 64 , ask, manchester, 2 data blocks?
34 enum {
35 T55x7_RAW = 0x00,
36 T55x7_DEFAULT = 0x00,
37 T5555_DEFAULT = 0x01,
38 EM_UNIQUE = 0x0,
39 FDBX = 0x02,
40 HID_26 = 0x03,
41 INDALA_64 = 0x04,
42 INDALA_224 = 0x05,
43 GUARDPROXXII = 0x06,
44 VIKING = 0x07,
45 NORALSYS = 0x08,
46 IOPROX = 0x09,
47 } t55xx_tag;
48
49 typedef struct {
50 uint32_t bl1;
51 uint32_t bl2;
52 uint32_t acl;
53 uint32_t mfc;
54 uint32_t cid;
55 uint32_t year;
56 uint32_t quarter;
57 uint32_t icr;
58 uint32_t lotid;
59 uint32_t wafer;
60 uint32_t dw;
61 } t55x7_tracedata_t;
62
63 typedef struct {
64 uint32_t bl1;
65 uint32_t bl2;
66 uint32_t icr;
67 char lotidc;
68 uint32_t lotid;
69 uint32_t wafer;
70 uint32_t dw;
71 } t5555_tracedata_t;
72
73 typedef struct {
74 enum {
75 DEMOD_NRZ = 0x00,
76 DEMOD_PSK1 = 0x01,
77 DEMOD_PSK2 = 0x02,
78 DEMOD_PSK3 = 0x03,
79 DEMOD_FSK1 = 0x04,
80 DEMOD_FSK1a = 0x05,
81 DEMOD_FSK2 = 0x06,
82 DEMOD_FSK2a = 0x07,
83 DEMOD_FSK = 0xF0, //generic FSK (auto detect FCs)
84 DEMOD_ASK = 0x08,
85 DEMOD_BI = 0x10,
86 DEMOD_BIa = 0x18,
87 } modulation;
88 bool inverted;
89 uint8_t offset;
90 uint32_t block0;
91 enum {
92 RF_8 = 0x00,
93 RF_16 = 0x01,
94 RF_32 = 0x02,
95 RF_40 = 0x03,
96 RF_50 = 0x04,
97 RF_64 = 0x05,
98 RF_100 = 0x06,
99 RF_128 = 0x07,
100 } bitrate;
101 bool Q5;
102 bool ST;
103 } t55xx_conf_block_t;
104 t55xx_conf_block_t Get_t55xx_Config();
105 void Set_t55xx_Config(t55xx_conf_block_t conf);
106
107 int CmdLFT55XX(const char *Cmd);
108 int CmdT55xxSetConfig(const char *Cmd);
109 int CmdT55xxReadBlock(const char *Cmd);
110 int CmdT55xxWriteBlock(const char *Cmd);
111 int CmdT55xxReadTrace(const char *Cmd);
112 int CmdT55xxInfo(const char *Cmd);
113 int CmdT55xxDetect(const char *Cmd);
114 int CmdResetRead(const char *Cmd);
115 int CmdT55xxWipe(const char *Cmd);
116 int CmdT55xxBruteForce(const char *Cmd);
117
118 char * GetBitRateStr(uint32_t id);
119 char * GetSaferStr(uint32_t id);
120 char * GetModulationStr( uint32_t id);
121 char * GetModelStrFromCID(uint32_t cid);
122 char * GetSelectedModulationStr( uint8_t id);
123 uint32_t PackBits(uint8_t start, uint8_t len, uint8_t *bitstream);
124 void printT5xxHeader(uint8_t page);
125 void printT55xxBlock(const char *demodStr);
126 int printConfiguration( t55xx_conf_block_t b);
127
128 bool DecodeT55xxBlock();
129 bool tryDetectModulation();
130 bool testKnownConfigBlock(uint32_t block0);
131 bool test(uint8_t mode, uint8_t *offset, int *fndBitRate, uint8_t clk, bool *Q5);
132 int special(const char *Cmd);
133 int AquireData( uint8_t page, uint8_t block, bool pwdmode, uint32_t password );
134
135 bool detectPassword(int password);
136
137 void printT55x7Trace( t55x7_tracedata_t data, uint8_t repeat );
138 void printT5555Trace( t5555_tracedata_t data, uint8_t repeat );
139
140 #endif
Impressum, Datenschutz