1 //-----------------------------------------------------------------------------
2 // Jonathan Westhues, Aug 2005
3 // Gerhard de Koning Gans, April 2008, May 2011
5 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
6 // at your option, any later version. See the LICENSE.txt file for the text of
8 //-----------------------------------------------------------------------------
9 // Definitions internal to the app source.
10 //-----------------------------------------------------------------------------
20 #include "../common/crc32.h"
23 extern const uint8_t OddByteParity
[256];
24 extern int rsamples
; // = 0;
25 extern int tracing
; // = TRUE;
26 extern uint8_t trigger
;
28 // This may be used (sparingly) to declare a function to be copied to
29 // and executed from RAM
30 #define RAMFUNC __attribute((long_call, section(".ramfunc")))
33 void ReadMem(int addr
);
34 void __attribute__((noreturn
)) AppMain(void);
36 //void DbpIntegers(int a, int b, int c);
37 void DbpString(char *str
);
38 void Dbprintf(const char *fmt
, ...);
39 void Dbhexdump(int len
, uint8_t *d
, bool bAsci
);
41 // ADC Vref = 3300mV, and an (10M+1M):1M voltage divider on the HF input can measure voltages up to 36300 mV
42 #define MAX_ADC_HF_VOLTAGE 36300
43 // ADC Vref = 3300mV, and an (10000k+240k):240k voltage divider on the LF input can measure voltages up to 140800 mV
44 #define MAX_ADC_LF_VOLTAGE 140800
47 void ToSendStuffBit(int b
);
48 void ToSendReset(void);
49 void ListenReaderField(int limit
);
51 extern uint8_t ToSend
[];
54 void FpgaSendCommand(uint16_t cmd
, uint16_t v
);
55 void FpgaWriteConfWord(uint8_t v
);
56 void FpgaDownloadAndGo(int bitstream_version
);
57 int FpgaGatherBitstreamVersion();
58 void FpgaGatherVersion(char *dst
, int len
);
59 void FpgaSetupSsc(void);
60 void SetupSpi(int mode
);
61 bool FpgaSetupSscDma(uint8_t *buf
, int len
);
62 #define FpgaDisableSscDma(void) AT91C_BASE_PDC_SSC->PDC_PTCR = AT91C_PDC_RXTDIS;
63 #define FpgaEnableSscDma(void) AT91C_BASE_PDC_SSC->PDC_PTCR = AT91C_PDC_RXTEN;
64 void SetAdcMuxFor(uint32_t whichGpio
);
66 // Definitions for the FPGA commands.
67 #define FPGA_CMD_SET_CONFREG (1<<12)
68 #define FPGA_CMD_SET_DIVISOR (2<<12)
69 #define FPGA_CMD_SET_USER_BYTE1 (3<<12)
70 // Definitions for the FPGA configuration word.
72 #define FPGA_MAJOR_MODE_LF_ADC (0<<5)
73 #define FPGA_MAJOR_MODE_LF_EDGE_DETECT (1<<5)
74 #define FPGA_MAJOR_MODE_LF_PASSTHRU (2<<5)
76 #define FPGA_MAJOR_MODE_HF_READER_TX (0<<5)
77 #define FPGA_MAJOR_MODE_HF_READER_RX_XCORR (1<<5)
78 #define FPGA_MAJOR_MODE_HF_SIMULATOR (2<<5)
79 #define FPGA_MAJOR_MODE_HF_ISO14443A (3<<5)
81 #define FPGA_MAJOR_MODE_OFF (7<<5)
83 #define FPGA_LF_ADC_READER_FIELD (1<<0)
84 // Options for LF_EDGE_DETECT
85 #define FPGA_CMD_SET_EDGE_DETECT_THRESHOLD FPGA_CMD_SET_USER_BYTE1
86 #define FPGA_LF_EDGE_DETECT_READER_FIELD (1<<0)
87 #define FPGA_LF_EDGE_DETECT_TOGGLE_MODE (1<<1)
88 // Options for the HF reader, tx to tag
89 #define FPGA_HF_READER_TX_SHALLOW_MOD (1<<0)
90 // Options for the HF reader, correlating against rx from tag
91 #define FPGA_HF_READER_RX_XCORR_848_KHZ (1<<0)
92 #define FPGA_HF_READER_RX_XCORR_SNOOP (1<<1)
93 #define FPGA_HF_READER_RX_XCORR_QUARTER_FREQ (1<<2)
94 // Options for the HF simulated tag, how to modulate
95 #define FPGA_HF_SIMULATOR_NO_MODULATION (0<<0)
96 #define FPGA_HF_SIMULATOR_MODULATE_BPSK (1<<0)
97 #define FPGA_HF_SIMULATOR_MODULATE_212K (2<<0)
98 #define FPGA_HF_SIMULATOR_MODULATE_424K (4<<0)
99 #define FPGA_HF_SIMULATOR_MODULATE_424K_8BIT 0x5//101
101 // Options for ISO14443A
102 #define FPGA_HF_ISO14443A_SNIFFER (0<<0)
103 #define FPGA_HF_ISO14443A_TAGSIM_LISTEN (1<<0)
104 #define FPGA_HF_ISO14443A_TAGSIM_MOD (2<<0)
105 #define FPGA_HF_ISO14443A_READER_LISTEN (3<<0)
106 #define FPGA_HF_ISO14443A_READER_MOD (4<<0)
109 extern uint8_t decimation
;
110 extern uint8_t bits_per_sample
;
111 extern bool averaging
;
113 void AcquireRawAdcSamples125k(int divisor
);
114 void ModThenAcquireRawAdcSamples125k(int delay_off
,int period_0
,int period_1
,uint8_t *command
);
115 void ReadTItag(void);
116 void WriteTItag(uint32_t idhi
, uint32_t idlo
, uint16_t crc
);
117 void AcquireTiType(void);
118 void AcquireRawBitsTI(void);
119 void SimulateTagLowFrequency(int period
, int gap
, int ledcontrol
);
120 void CmdHIDsimTAG(int hi
, int lo
, int ledcontrol
);
121 void CmdFSKsimTAG(uint16_t arg1
, uint16_t arg2
, size_t size
, uint8_t *BitStream
);
122 void CmdASKsimTag(uint16_t arg1
, uint16_t arg2
, size_t size
, uint8_t *BitStream
);
123 void CmdPSKsimTag(uint16_t arg1
, uint16_t arg2
, size_t size
, uint8_t *BitStream
);
124 void CmdHIDdemodFSK(int findone
, int *high
, int *low
, int ledcontrol
);
125 void CmdEM410xdemod(int findone
, int *high
, int *low
, int ledcontrol
);
126 void CmdIOdemodFSK(int findone
, int *high
, int *low
, int ledcontrol
);
127 void CopyIOtoT55x7(uint32_t hi
, uint32_t lo
, uint8_t longFMT
); // Clone an ioProx card to T5557/T5567
128 void SimulateTagLowFrequencyBidir(int divisor
, int max_bitlen
);
129 void CopyHIDtoT55x7(uint32_t hi2
, uint32_t hi
, uint32_t lo
, uint8_t longFMT
); // Clone an HID card to T5557/T5567
130 void WriteEM410x(uint32_t card
, uint32_t id_hi
, uint32_t id_lo
);
131 void CopyIndala64toT55x7(int hi
, int lo
); // Clone Indala 64-bit tag by UID to T55x7
132 void CopyIndala224toT55x7(int uid1
, int uid2
, int uid3
, int uid4
, int uid5
, int uid6
, int uid7
); // Clone Indala 224-bit tag by UID to T55x7
133 void T55xxWriteBlock(uint32_t Data
, uint32_t Block
, uint32_t Pwd
, uint8_t PwdMode
);
134 void T55xxReadBlock(uint32_t Block
, uint32_t Pwd
, uint8_t PwdMode
);
135 void T55xxReadTrace(void);
136 int DemodPCF7931(uint8_t **outBlocks
);
137 int IsBlock0PCF7931(uint8_t *Block
);
138 int IsBlock1PCF7931(uint8_t *Block
);
140 void EM4xReadWord(uint8_t Address
, uint32_t Pwd
, uint8_t PwdMode
);
141 void EM4xWriteWord(uint32_t Data
, uint8_t Address
, uint32_t Pwd
, uint8_t PwdMode
);
144 void SimulateIso14443Tag(void);
145 void AcquireRawAdcSamplesIso14443(uint32_t parameter
);
146 void ReadSTMemoryIso14443(uint32_t);
147 void RAMFUNC
SnoopIso14443(void);
148 void SendRawCommand14443B(uint32_t, uint32_t, uint8_t, uint8_t[]);
151 void RAMFUNC
SnoopIso14443a(uint8_t param
);
152 void SimulateIso14443aTag(int tagType
, int uid_1st
, int uid_2nd
, byte_t
* data
);
153 void ReaderIso14443a(UsbCommand
* c
);
154 // Also used in iclass.c
155 bool RAMFUNC
LogTrace(const uint8_t *btBytes
, uint16_t len
, uint32_t timestamp_start
, uint32_t timestamp_end
, uint8_t *parity
, bool readerToTag
);
156 void GetParity(const uint8_t *pbtCmd
, uint16_t len
, uint8_t *parity
);
157 void iso14a_set_trigger(bool enable
);
159 void RAMFUNC
SniffMifare(uint8_t param
);
162 void EPA_PACE_Collect_Nonce(UsbCommand
* c
);
165 void ReaderMifare(bool first_try
);
166 int32_t dist_nt(uint32_t nt1
, uint32_t nt2
);
167 void MifareReadBlock(uint8_t arg0
, uint8_t arg1
, uint8_t arg2
, uint8_t *data
);
168 void MifareUReadBlock(uint8_t arg0
,uint8_t *datain
);
169 void MifareUC_Auth1(uint8_t arg0
, uint8_t *datain
);
170 void MifareUC_Auth2(uint32_t arg0
, uint8_t *datain
);
171 void MifareUReadCard(uint8_t arg0
, int Pages
, uint8_t *datain
);
172 void MifareReadSector(uint8_t arg0
, uint8_t arg1
, uint8_t arg2
, uint8_t *datain
);
173 void MifareWriteBlock(uint8_t arg0
, uint8_t arg1
, uint8_t arg2
, uint8_t *datain
);
174 void MifareUWriteBlock(uint8_t arg0
,uint8_t *datain
);
175 void MifareUWriteBlock_Special(uint8_t arg0
,uint8_t *datain
);
176 void MifareNested(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
);
177 void MifareChkKeys(uint8_t arg0
, uint8_t arg1
, uint8_t arg2
, uint8_t *datain
);
178 void Mifare1ksim(uint8_t arg0
, uint8_t arg1
, uint8_t arg2
, uint8_t *datain
);
179 void MifareSetDbgLvl(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
);
180 void MifareEMemClr(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
);
181 void MifareEMemSet(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
);
182 void MifareEMemGet(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
);
183 void MifareECardLoad(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
);
184 void MifareCSetBlock(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
); // Work with "magic Chinese" card
185 void MifareCGetBlock(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
);
186 void MifareCIdent(); // is "magic chinese" card?
189 void Mifare_DES_Auth1(uint8_t arg0
,uint8_t *datain
);
190 void Mifare_DES_Auth2(uint32_t arg0
, uint8_t *datain
);
193 bool InitDesfireCard();
194 void MifareSendCommand(uint8_t arg0
,uint8_t arg1
, uint8_t *datain
);
195 void MifareDesfireGetInformation();
196 void MifareDES_Auth1(uint8_t arg0
,uint8_t arg1
,uint8_t arg2
, uint8_t *datain
);
197 void ReaderMifareDES(uint32_t param
, uint32_t param2
, uint8_t * datain
);
198 int DesfireAPDU(uint8_t *cmd
, size_t cmd_len
, uint8_t *dataout
);
199 size_t CreateAPDU( uint8_t *datain
, size_t len
, uint8_t *dataout
);
201 void OnError(uint8_t reason
);
208 void RecordRawAdcSamplesIso15693(void);
209 void AcquireRawAdcSamplesIso15693(void);
210 void ReaderIso15693(uint32_t parameter
); // Simulate an ISO15693 reader - greg
211 void SimTagIso15693(uint32_t parameter
, uint8_t *uid
); // simulate an ISO15693 tag - greg
212 void BruteforceIso15693Afi(uint32_t speed
); // find an AFI of a tag - atrox
213 void DirectTag15693Command(uint32_t datalen
,uint32_t speed
, uint32_t recv
, uint8_t data
[]); // send arbitrary commands from CLI - atrox
214 void SetDebugIso15693(uint32_t flag
);
217 void RAMFUNC
SnoopIClass(void);
218 void SimulateIClass(uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, uint8_t *datain
);
219 void ReaderIClass(uint8_t arg0
);
220 void ReaderIClass_Replay(uint8_t arg0
,uint8_t *MAC
);
221 void IClass_iso14443A_GetPublic(uint8_t arg0
);
224 void SnoopHitag(uint32_t type
);
225 void SimulateHitagTag(bool tag_mem_supplied
, byte_t
* data
);
226 void ReaderHitag(hitag_function htf
, hitag_data
* htd
);
229 bool cmd_receive(UsbCommand
* cmd
);
230 bool cmd_send(uint32_t cmd
, uint32_t arg0
, uint32_t arg1
, uint32_t arg2
, void* data
, size_t len
);