More work on iclass simulation attack
[legacy-proxmark3.git] / armsrc / apps.h
blobc6520702a852a4c0f91718c86d3089687371021d
1 //-----------------------------------------------------------------------------
2 // Jonathan Westhues, Aug 2005
3 // Gerhard de Koning Gans, April 2008, May 2011
4 //
5 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
6 // at your option, any later version. See the LICENSE.txt file for the text of
7 // the license.
8 //-----------------------------------------------------------------------------
9 // Definitions internal to the app source.
10 //-----------------------------------------------------------------------------
12 #ifndef __APPS_H
13 #define __APPS_H
15 #include <stdint.h>
16 #include <stddef.h>
17 #include "common.h"
18 #include "hitag2.h"
19 #include "mifare.h"
21 // The large multi-purpose buffer, typically used to hold A/D samples,
22 // maybe processed in some way.
23 uint32_t BigBuf[10000];
24 // BIG CHANGE - UNDERSTAND THIS BEFORE WE COMMIT
25 #define TRACE_OFFSET 0
26 #define TRACE_SIZE 3000
27 #define RECV_CMD_OFFSET 3032
28 #define RECV_CMD_SIZE 64
29 #define RECV_RES_OFFSET 3096
30 #define RECV_RES_SIZE 64
31 #define DMA_BUFFER_OFFSET 3160
32 #define DMA_BUFFER_SIZE 4096
33 #define FREE_BUFFER_OFFSET 7256
34 #define FREE_BUFFER_SIZE 2744
36 extern const uint8_t OddByteParity[256];
37 extern uint8_t *trace; // = (uint8_t *) BigBuf;
38 extern int traceLen; // = 0;
39 extern int rsamples; // = 0;
40 extern int tracing; // = TRUE;
41 extern uint8_t trigger;
43 // This may be used (sparingly) to declare a function to be copied to
44 // and executed from RAM
45 #define RAMFUNC __attribute((long_call, section(".ramfunc")))
47 /// appmain.h
48 void ReadMem(int addr);
49 void __attribute__((noreturn)) AppMain(void);
50 void SamyRun(void);
51 //void DbpIntegers(int a, int b, int c);
52 void DbpString(char *str);
53 void Dbprintf(const char *fmt, ...);
54 void Dbhexdump(int len, uint8_t *d, bool bAsci);
56 int AvgAdc(int ch);
58 void ToSendStuffBit(int b);
59 void ToSendReset(void);
60 void ListenReaderField(int limit);
61 void AcquireRawAdcSamples125k(int at134khz);
62 void DoAcquisition125k(void);
63 extern int ToSendMax;
64 extern uint8_t ToSend[];
65 extern uint32_t BigBuf[];
67 /// fpga.h
68 void FpgaSendCommand(uint16_t cmd, uint16_t v);
69 void FpgaWriteConfWord(uint8_t v);
70 void FpgaDownloadAndGo(void);
71 void FpgaGatherVersion(char *dst, int len);
72 void FpgaSetupSsc(void);
73 void SetupSpi(int mode);
74 bool FpgaSetupSscDma(uint8_t *buf, int len);
75 #define FpgaDisableSscDma(void) AT91C_BASE_PDC_SSC->PDC_PTCR = AT91C_PDC_RXTDIS;
76 #define FpgaEnableSscDma(void) AT91C_BASE_PDC_SSC->PDC_PTCR = AT91C_PDC_RXTEN;
77 void SetAdcMuxFor(uint32_t whichGpio);
79 // Definitions for the FPGA commands.
80 #define FPGA_CMD_SET_CONFREG (1<<12)
81 #define FPGA_CMD_SET_DIVISOR (2<<12)
82 // Definitions for the FPGA configuration word.
83 #define FPGA_MAJOR_MODE_LF_READER (0<<5)
84 #define FPGA_MAJOR_MODE_LF_EDGE_DETECT (1<<5)
85 #define FPGA_MAJOR_MODE_HF_READER_TX (2<<5)
86 #define FPGA_MAJOR_MODE_HF_READER_RX_XCORR (3<<5)
87 #define FPGA_MAJOR_MODE_HF_SIMULATOR (4<<5)
88 #define FPGA_MAJOR_MODE_HF_ISO14443A (5<<5)
89 #define FPGA_MAJOR_MODE_LF_PASSTHRU (6<<5)
90 #define FPGA_MAJOR_MODE_OFF (7<<5)
91 // Options for LF_EDGE_DETECT
92 #define FPGA_LF_EDGE_DETECT_READER_FIELD (1<<0)
93 // Options for the HF reader, tx to tag
94 #define FPGA_HF_READER_TX_SHALLOW_MOD (1<<0)
95 // Options for the HF reader, correlating against rx from tag
96 #define FPGA_HF_READER_RX_XCORR_848_KHZ (1<<0)
97 #define FPGA_HF_READER_RX_XCORR_SNOOP (1<<1)
98 #define FPGA_HF_READER_RX_XCORR_QUARTER_FREQ (1<<2)
99 // Options for the HF simulated tag, how to modulate
100 #define FPGA_HF_SIMULATOR_NO_MODULATION (0<<0)
101 #define FPGA_HF_SIMULATOR_MODULATE_BPSK (1<<0)
102 #define FPGA_HF_SIMULATOR_MODULATE_212K (2<<0)
103 #define FPGA_HF_SIMULATOR_MODULATE_424K (4<<0)
104 // Options for ISO14443A
105 #define FPGA_HF_ISO14443A_SNIFFER (0<<0)
106 #define FPGA_HF_ISO14443A_TAGSIM_LISTEN (1<<0)
107 #define FPGA_HF_ISO14443A_TAGSIM_MOD (2<<0)
108 #define FPGA_HF_ISO14443A_READER_LISTEN (3<<0)
109 #define FPGA_HF_ISO14443A_READER_MOD (4<<0)
111 /// lfops.h
112 void AcquireRawAdcSamples125k(int divisor);
113 void ModThenAcquireRawAdcSamples125k(int delay_off,int period_0,int period_1,uint8_t *command);
114 void ReadTItag(void);
115 void WriteTItag(uint32_t idhi, uint32_t idlo, uint16_t crc);
116 void AcquireTiType(void);
117 void AcquireRawBitsTI(void);
118 void SimulateTagLowFrequency(int period, int gap, int ledcontrol);
119 void CmdHIDsimTAG(int hi, int lo, int ledcontrol);
120 void CmdHIDdemodFSK(int findone, int *high, int *low, int ledcontrol);
121 void CmdIOdemodFSK(int findone, int *high, int *low, int ledcontrol);
122 void CopyIOtoT55x7(uint32_t hi, uint32_t lo, uint8_t longFMT); // Clone an ioProx card to T5557/T5567
123 void SimulateTagLowFrequencyBidir(int divisor, int max_bitlen);
124 void CopyHIDtoT55x7(uint32_t hi2, uint32_t hi, uint32_t lo, uint8_t longFMT); // Clone an HID card to T5557/T5567
125 void WriteEM410x(uint32_t card, uint32_t id_hi, uint32_t id_lo);
126 void CopyIndala64toT55x7(int hi, int lo); // Clone Indala 64-bit tag by UID to T55x7
127 void CopyIndala224toT55x7(int uid1, int uid2, int uid3, int uid4, int uid5, int uid6, int uid7); // Clone Indala 224-bit tag by UID to T55x7
128 void T55xxWriteBlock(uint32_t Data, uint32_t Block, uint32_t Pwd, uint8_t PwdMode);
129 void T55xxReadBlock(uint32_t Block, uint32_t Pwd, uint8_t PwdMode );
130 void T55xxReadTrace(void);
131 int DemodPCF7931(uint8_t **outBlocks);
132 int IsBlock0PCF7931(uint8_t *Block);
133 int IsBlock1PCF7931(uint8_t *Block);
134 void ReadPCF7931();
135 void EM4xReadWord(uint8_t Address, uint32_t Pwd, uint8_t PwdMode);
136 void EM4xWriteWord(uint32_t Data, uint8_t Address, uint32_t Pwd, uint8_t PwdMode);
138 /// iso14443.h
139 void SimulateIso14443Tag(void);
140 void AcquireRawAdcSamplesIso14443(uint32_t parameter);
141 void ReadSTMemoryIso14443(uint32_t);
142 void RAMFUNC SnoopIso14443(void);
143 void SendRawCommand14443B(uint32_t, uint32_t, uint8_t, uint8_t[]);
145 /// iso14443a.h
146 void RAMFUNC SnoopIso14443a(uint8_t param);
147 void SimulateIso14443aTag(int tagType, int uid_1st, int uid_2nd, byte_t* data);
148 void ReaderIso14443a(UsbCommand * c);
149 // Also used in iclass.c
150 bool RAMFUNC LogTrace(const uint8_t * btBytes, uint8_t iLen, uint32_t iSamples, uint32_t dwParity, bool readerToTag);
151 uint32_t GetParity(const uint8_t * pbtCmd, int iLen);
152 void iso14a_set_trigger(bool enable);
153 void iso14a_clear_trace();
154 void iso14a_set_tracing(bool enable);
155 void RAMFUNC SniffMifare(uint8_t param);
157 /// epa.h
158 void EPA_PACE_Collect_Nonce(UsbCommand * c);
160 // mifarecmd.h
161 void ReaderMifare(bool first_try);
162 int32_t dist_nt(uint32_t nt1, uint32_t nt2);
163 void MifareReadBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *data);
164 void MifareUReadBlock(uint8_t arg0,uint8_t *datain);
165 void MifareUReadCard(uint8_t arg0,uint8_t *datain);
166 void MifareReadSector(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain);
167 void MifareWriteBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain);
168 void MifareUWriteBlock(uint8_t arg0,uint8_t *datain);
169 void MifareUWriteBlock_Special(uint8_t arg0,uint8_t *datain);
170 void MifareNested(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
171 void MifareChkKeys(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain);
172 void Mifare1ksim(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain);
173 void MifareSetDbgLvl(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
174 void MifareEMemClr(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
175 void MifareEMemSet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
176 void MifareEMemGet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
177 void MifareECardLoad(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
178 void MifareCSetBlock(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); // Work with "magic Chinese" card
179 void MifareCGetBlock(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
181 /// iso15693.h
182 void RecordRawAdcSamplesIso15693(void);
183 void AcquireRawAdcSamplesIso15693(void);
184 void ReaderIso15693(uint32_t parameter); // Simulate an ISO15693 reader - greg
185 void SimTagIso15693(uint32_t parameter); // simulate an ISO15693 tag - greg
186 void BruteforceIso15693Afi(uint32_t speed); // find an AFI of a tag - atrox
187 void DirectTag15693Command(uint32_t datalen,uint32_t speed, uint32_t recv, uint8_t data[]); // send arbitrary commands from CLI - atrox
188 void SetDebugIso15693(uint32_t flag);
190 /// iclass.h
191 void RAMFUNC SnoopIClass(void);
192 void SimulateIClass(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
193 void ReaderIClass(uint8_t arg0);
194 //int doIClassSimulation(uint8_t csn[], int breakAfterMacReceived);
195 // hitag2.h
196 void SnoopHitag(uint32_t type);
197 void SimulateHitagTag(bool tag_mem_supplied, byte_t* data);
198 void ReaderHitag(hitag_function htf, hitag_data* htd);
200 // cmd.h
201 bool cmd_receive(UsbCommand* cmd);
202 bool cmd_send(uint32_t cmd, uint32_t arg0, uint32_t arg1, uint32_t arg2, void* data, size_t len);
204 /// util.h
206 #endif