1 /*****************************************************************************
4 * THIS CODE IS CREATED FOR EXPERIMENTATION AND EDUCATIONAL USE ONLY.
6 * USAGE OF THIS CODE IN OTHER WAYS MAY INFRINGE UPON THE INTELLECTUAL
7 * PROPERTY OF OTHER PARTIES, SUCH AS INSIDE SECURE AND HID GLOBAL,
8 * AND MAY EXPOSE YOU TO AN INFRINGEMENT ACTION FROM THOSE PARTIES.
10 * THIS CODE SHOULD NEVER BE USED TO INFRINGE PATENTS OR INTELLECTUAL PROPERTY RIGHTS.
12 *****************************************************************************
14 * This file is part of loclass. It is a reconstructon of the cipher engine
15 * used in iClass, and RFID techology.
17 * The implementation is based on the work performed by
18 * Flavio D. Garcia, Gerhard de Koning Gans, Roel Verdult and
19 * Milosch Meriac in the paper "Dismantling IClass".
21 * Copyright (C) 2014 Martin Holst Swende
23 * This is free software: you can redistribute it and/or modify
24 * it under the terms of the GNU General Public License version 2 as published
25 * by the Free Software Foundation, or, at your option, any later version.
27 * This file is distributed in the hope that it will be useful,
28 * but WITHOUT ANY WARRANTY; without even the implied warranty of
29 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
30 * GNU General Public License for more details.
32 * You should have received a copy of the GNU General Public License
33 * along with loclass. If not, see <http://www.gnu.org/licenses/>.
36 ****************************************************************************/
41 #include "fileutils.h"
42 #include "cipherutils.h"
45 * @brief Return and remove the first bit (x0) in the stream : <x0 x1 x2 x3 ... xn >
49 bool headBit( BitstreamIn
*stream
)
51 int bytepos
= stream
->position
>> 3; // divide by 8
52 int bitpos
= (stream
->position
++) & 7; // mask out 00000111
53 return (*(stream
->buffer
+ bytepos
) >> (7-bitpos
)) & 1;
56 * @brief Return and remove the last bit (xn) in the stream: <x0 x1 x2 ... xn>
60 bool tailBit( BitstreamIn
*stream
)
62 int bitpos
= stream
->numbits
-1 - (stream
->position
++);
64 int bytepos
= bitpos
>> 3;
66 return (*(stream
->buffer
+ bytepos
) >> (7-bitpos
)) & 1;
69 * @brief Pushes bit onto the stream
73 void pushBit( BitstreamOut
* stream
, bool bit
)
75 int bytepos
= stream
->position
>> 3; // divide by 8
76 int bitpos
= stream
->position
& 7;
77 *(stream
->buffer
+bytepos
) |= (bit
& 1) << (7 - bitpos
);
83 * @brief Pushes the lower six bits onto the stream
84 * as b0 b1 b2 b3 b4 b5 b6
88 void push6bits( BitstreamOut
* stream
, uint8_t bits
)
90 pushBit(stream
, bits
& 0x20);
91 pushBit(stream
, bits
& 0x10);
92 pushBit(stream
, bits
& 0x08);
93 pushBit(stream
, bits
& 0x04);
94 pushBit(stream
, bits
& 0x02);
95 pushBit(stream
, bits
& 0x01);
101 * @return number of bits left in stream
103 int bitsLeft( BitstreamIn
*stream
)
105 return stream
->numbits
- stream
->position
;
110 * @return Number of bits stored in stream
112 int numBits(BitstreamOut
*stream
)
114 return stream
->numbits
;
117 void x_num_to_bytes(uint64_t n
, size_t len
, uint8_t* dest
)
120 dest
[len
] = (uint8_t) n
;
125 uint64_t x_bytes_to_num(uint8_t* src
, size_t len
)
130 num
= (num
<< 8) | (*src
);
135 uint8_t reversebytes(uint8_t b
) {
136 b
= (b
& 0xF0) >> 4 | (b
& 0x0F) << 4;
137 b
= (b
& 0xCC) >> 2 | (b
& 0x33) << 2;
138 b
= (b
& 0xAA) >> 1 | (b
& 0x55) << 1;
141 void reverse_arraybytes(uint8_t* arr
, size_t len
)
144 for( i
=0; i
< len
; i
++)
146 arr
[i
] = reversebytes(arr
[i
]);
149 void reverse_arraycopy(uint8_t* arr
, uint8_t* dest
, size_t len
)
152 for( i
=0; i
< len
; i
++)
154 dest
[i
] = reversebytes(arr
[i
]);
158 void printarr(char * name
, uint8_t* arr
, int len
)
161 size_t outsize
= 40+strlen(name
)+len
*5;
162 char* output
= malloc(outsize
);
163 memset(output
, 0,outsize
);
166 cx
= snprintf(output
,outsize
, "uint8_t %s[] = {", name
);
167 for(i
=0 ; i
< len
; i
++)
169 cx
+= snprintf(output
+cx
,outsize
-cx
,"0x%02x,",*(arr
+i
));//5 bytes per byte
171 cx
+= snprintf(output
+cx
,outsize
-cx
,"};");
176 void printvar(char * name
, uint8_t* arr
, int len
)
179 size_t outsize
= 40+strlen(name
)+len
*2;
180 char* output
= malloc(outsize
);
181 memset(output
, 0,outsize
);
184 cx
= snprintf(output
,outsize
,"%s = ", name
);
185 for(i
=0 ; i
< len
; i
++)
187 cx
+= snprintf(output
+cx
,outsize
-cx
,"%02x",*(arr
+i
));//2 bytes per byte
194 void printarr_human_readable(char * title
, uint8_t* arr
, int len
)
197 size_t outsize
= 100+strlen(title
)+len
*4;
198 char* output
= malloc(outsize
);
199 memset(output
, 0,outsize
);
203 cx
= snprintf(output
,outsize
, "\n\t%s\n", title
);
204 for(i
=0 ; i
< len
; i
++)
207 cx
+= snprintf(output
+cx
,outsize
-cx
,"\n%02x| ", i
);
208 cx
+= snprintf(output
+cx
,outsize
-cx
, "%02x ",*(arr
+i
));
214 //-----------------------------
215 // Code for testing below
216 //-----------------------------
221 uint8_t input
[] = {0xDE,0xAD,0xBE,0xEF,0xDE,0xAD,0xBE,0xEF};
222 uint8_t output
[] = {0,0,0,0,0,0,0,0};
223 BitstreamIn in
= { input
, sizeof(input
) * 8,0};
224 BitstreamOut out
={ output
, 0,0}
226 while(bitsLeft(&in
) > 0)
228 pushBit(&out
, headBit(&in
));
229 //printf("Bits left: %d\n", bitsLeft(&in));
230 //printf("Bits out: %d\n", numBits(&out));
232 if(memcmp(input
, output
, sizeof(input
)) == 0)
234 prnlog(" Bitstream test 1 ok");
237 prnlog(" Bitstream test 1 failed");
239 for(i
= 0 ; i
< sizeof(input
) ; i
++)
241 prnlog(" IN %02x, OUT %02x", input
[i
], output
[i
]);
248 int testReversedBitstream()
250 uint8_t input
[] = {0xDE,0xAD,0xBE,0xEF,0xDE,0xAD,0xBE,0xEF};
251 uint8_t reverse
[] = {0,0,0,0,0,0,0,0};
252 uint8_t output
[] = {0,0,0,0,0,0,0,0};
253 BitstreamIn in
= { input
, sizeof(input
) * 8,0};
254 BitstreamOut out
={ output
, 0,0};
255 BitstreamIn reversed_in
={ reverse
, sizeof(input
)*8,0};
256 BitstreamOut reversed_out
={ reverse
,0 ,0};
258 while(bitsLeft(&in
) > 0)
260 pushBit(&reversed_out
, tailBit(&in
));
262 while(bitsLeft(&reversed_in
) > 0)
264 pushBit(&out
, tailBit(&reversed_in
));
266 if(memcmp(input
, output
, sizeof(input
)) == 0)
268 prnlog(" Bitstream test 2 ok");
271 prnlog(" Bitstream test 2 failed");
273 for(i
= 0 ; i
< sizeof(input
) ; i
++)
275 prnlog(" IN %02x, MIDDLE: %02x, OUT %02x", input
[i
],reverse
[i
], output
[i
]);
283 int testCipherUtils(void)
285 prnlog("[+] Testing some internals...");
287 retval
|= testBitStream();
288 retval
|= testReversedBitstream();