2022-03-03 12:48:56 +03:00
|
|
|
#include "keeloq_common.h"
|
2021-10-18 01:54:19 +03:00
|
|
|
|
|
|
|
#include <furi.h>
|
|
|
|
|
|
|
|
#include <m-array.h>
|
|
|
|
|
[FL-2529][FL-1628] New LF-RFID subsystem (#1601)
* Makefile: unit tests pack
* RFID: pulse joiner and its unit test
* Move pulse protocol helpers to appropriate place
* Drop pulse_joiner tests
* Generic protocol, protocols dictionary, unit test
* Protocol dict unit test
* iButton: protocols dictionary
* Lib: varint
* Lib: profiler
* Unit test: varint
* rfid: worker mockup
* LFRFID: em4100 unit test
* Storage: file_exist function
* rfid: fsk osc
* rfid: generic fsk demodulator
* rfid: protocol em4100
* rfid: protocol h10301
* rfid: protocol io prox xsf
* Unit test: rfid protocols
* rfid: new hal
* rfid: raw worker
* Unit test: fix error output
* rfid: worker
* rfid: plain c cli
* fw: migrate to scons
* lfrfid: full io prox support
* unit test: io prox protocol
* SubGHZ: move bit defines to source
* FSK oscillator: level duration compability
* libs: bit manipulation library
* lfrfid: ioprox protocol, use bit library and new level duration method of FSK ocillator
* bit lib: unit tests
* Bit lib: parity tests, remove every nth bit, copy bits
* Lfrfid: awid protocol
* bit lib: uint16 and uint32 getters, unit tests
* lfrfid: FDX-B read, draft version
* Minunit: better memeq assert
* bit lib: reverse, print, print regions
* Protocol dict: get protocol features, get protocol validate count
* lfrfid worker: improved read
* lfrfid raw worker: psk support
* Cli: rfid plain C cli
* protocol AWID: render
* protocol em4100: render
* protocol h10301: render
* protocol indala26: support every indala 26 scramble
* Protocol IO Prox: render
* Protocol FDX-B: advanced read
* lfrfid: remove unused test function
* lfrfid: fix os primitives
* bit lib: crc16 and unit tests
* FDX-B: save data
* lfrfid worker: increase stream size. Alloc raw worker only when needed.
* lfrfid: indala26 emulation
* lfrfid: prepare to write
* lfrfid: fdx-b emulation
* lfrfid: awid, ioprox write
* lfrfid: write t55xx w\o validation
* lfrfid: better t55xx block0 handling
* lfrfid: use new t5577 functions in worker
* lfrfid: improve protocol description
* lfrfid: write and verify
* lfrfid: delete cpp cli
* lfrfid: improve worker usage
* lfrfid-app: step to new worker
* lfrfid: old indala (I40134) load fallback
* lfrfid: indala26, recover wrong synced data
* lfrfid: remove old worker
* lfrfid app: dummy read screen
* lfrfid app: less dummy read screen
* lfrfid: generic 96-bit HID protocol (covers up to HID 37-bit)
* rename
* lfrfid: improve indala26 read
* lfrfid: generic 192-bit HID protocol (covers all HID extended)
* lfrfid: TODO about HID render
* lfrfid: new protocol FDX-A
* lfrfid-app: correct worker stop on exit
* misc fixes
* lfrfid: FDX-A and HID distinguishability has been fixed.
* lfrfid: decode HID size header and render it (#1612)
* lfrfid: rename HID96 and HID192 to HIDProx and HIDExt
* lfrfid: extra actions scene
* lfrfid: decode generic HID Proximity size lazily (#1618)
* lib: stream of data buffers concept
* lfrfid: raw file helper
* lfrfid: changed raw worker api
* lfrfid: packed varint pair
* lfrfid: read stream speedup
* lfrfid app: show read mode
* Documentation
* lfrfid app: raw read gui
* lfrfid app: storage check for raw read
* memleak fix
* review fixes
* lfrfid app: read blink color
* lfrfid app: reset key name after read
* review fixes
* lfrfid app: fix copypasted text
* review fixes
* lfrfid: disable debug gpio
* lfrfid: card detection events
* lfrfid: change validation color from magenta to green
* Update core_defines.
* lfrfid: prefix fdx-b id by zeroes
* lfrfid: parse up to 43-bit HID Proximity keys (#1640)
* Fbt: downgrade toolchain and fix PS1
* lfrfid: fix unit tests
* lfrfid app: remove printf
* lfrfid: indala26, use bit 55 as data
* lfrfid: indala26, better brief format
* lfrfid: indala26, loading fallback
* lfrfid: read timing tuning
Co-authored-by: James Ide <ide@users.noreply.github.com>
Co-authored-by: あく <alleteam@gmail.com>
2022-08-23 18:57:39 +03:00
|
|
|
#define bit(x, n) (((x) >> (n)) & 1)
|
|
|
|
#define g5(x, a, b, c, d, e) \
|
|
|
|
(bit(x, a) + bit(x, b) * 2 + bit(x, c) * 4 + bit(x, d) * 8 + bit(x, e) * 16)
|
|
|
|
|
2021-10-18 01:54:19 +03:00
|
|
|
/** Simple Learning Encrypt
|
|
|
|
* @param data - 0xBSSSCCCC, B(4bit) key, S(10bit) serial&0x3FF, C(16bit) counter
|
|
|
|
* @param key - manufacture (64bit)
|
2022-03-03 12:48:56 +03:00
|
|
|
* @return keeloq encrypt data
|
2021-10-18 01:54:19 +03:00
|
|
|
*/
|
|
|
|
inline uint32_t subghz_protocol_keeloq_common_encrypt(const uint32_t data, const uint64_t key) {
|
|
|
|
uint32_t x = data, r;
|
2021-11-17 16:52:06 +03:00
|
|
|
for(r = 0; r < 528; r++)
|
|
|
|
x = (x >> 1) ^ ((bit(x, 0) ^ bit(x, 16) ^ (uint32_t)bit(key, r & 63) ^
|
|
|
|
bit(KEELOQ_NLF, g5(x, 1, 9, 20, 26, 31)))
|
|
|
|
<< 31);
|
2021-10-18 01:54:19 +03:00
|
|
|
return x;
|
|
|
|
}
|
|
|
|
|
|
|
|
/** Simple Learning Decrypt
|
|
|
|
* @param data - keelog encrypt data
|
|
|
|
* @param key - manufacture (64bit)
|
|
|
|
* @return 0xBSSSCCCC, B(4bit) key, S(10bit) serial&0x3FF, C(16bit) counter
|
|
|
|
*/
|
|
|
|
inline uint32_t subghz_protocol_keeloq_common_decrypt(const uint32_t data, const uint64_t key) {
|
|
|
|
uint32_t x = data, r;
|
2021-11-17 16:52:06 +03:00
|
|
|
for(r = 0; r < 528; r++)
|
|
|
|
x = (x << 1) ^ bit(x, 31) ^ bit(x, 15) ^ (uint32_t)bit(key, (15 - r) & 63) ^
|
|
|
|
bit(KEELOQ_NLF, g5(x, 0, 8, 19, 25, 30));
|
2021-10-18 01:54:19 +03:00
|
|
|
return x;
|
|
|
|
}
|
|
|
|
|
|
|
|
/** Normal Learning
|
|
|
|
* @param data - serial number (28bit)
|
|
|
|
* @param key - manufacture (64bit)
|
|
|
|
* @return manufacture for this serial number (64bit)
|
|
|
|
*/
|
2021-11-17 16:52:06 +03:00
|
|
|
inline uint64_t subghz_protocol_keeloq_common_normal_learning(uint32_t data, const uint64_t key) {
|
|
|
|
uint32_t k1, k2;
|
2021-10-18 01:54:19 +03:00
|
|
|
|
2021-11-17 16:52:06 +03:00
|
|
|
data &= 0x0FFFFFFF;
|
|
|
|
data |= 0x20000000;
|
|
|
|
k1 = subghz_protocol_keeloq_common_decrypt(data, key);
|
2021-10-18 01:54:19 +03:00
|
|
|
|
2021-11-17 16:52:06 +03:00
|
|
|
data &= 0x0FFFFFFF;
|
|
|
|
data |= 0x60000000;
|
|
|
|
k2 = subghz_protocol_keeloq_common_decrypt(data, key);
|
2021-10-18 01:54:19 +03:00
|
|
|
|
2021-11-17 16:52:06 +03:00
|
|
|
return ((uint64_t)k2 << 32) | k1; // key - shifrovanoya
|
2021-10-18 01:54:19 +03:00
|
|
|
}
|
2021-11-17 16:52:06 +03:00
|
|
|
|
|
|
|
/** Secure Learning
|
|
|
|
* @param data - serial number (28bit)
|
2022-01-21 16:55:09 +03:00
|
|
|
* @param seed - seed number (32bit)
|
2021-11-17 16:52:06 +03:00
|
|
|
* @param key - manufacture (64bit)
|
|
|
|
* @return manufacture for this serial number (64bit)
|
|
|
|
*/
|
|
|
|
|
|
|
|
inline uint64_t subghz_protocol_keeloq_common_secure_learning(
|
|
|
|
uint32_t data,
|
|
|
|
uint32_t seed,
|
|
|
|
const uint64_t key) {
|
|
|
|
uint32_t k1, k2;
|
|
|
|
|
|
|
|
data &= 0x0FFFFFFF;
|
|
|
|
k1 = subghz_protocol_keeloq_common_decrypt(data, key);
|
|
|
|
k2 = subghz_protocol_keeloq_common_decrypt(seed, key);
|
|
|
|
|
|
|
|
return ((uint64_t)k1 << 32) | k2;
|
2022-01-21 16:55:09 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
/** Magic_xor_type1 Learning
|
|
|
|
* @param data - serial number (28bit)
|
|
|
|
* @param xor - magic xor (64bit)
|
|
|
|
* @return manufacture for this serial number (64bit)
|
|
|
|
*/
|
|
|
|
|
|
|
|
inline uint64_t
|
|
|
|
subghz_protocol_keeloq_common_magic_xor_type1_learning(uint32_t data, uint64_t xor) {
|
|
|
|
data &= 0x0FFFFFFF;
|
|
|
|
return (((uint64_t)data << 32) | data) ^ xor;
|
2022-04-09 00:29:15 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
/** Faac SLH (Spa) Learning
|
|
|
|
* @param seed - seed number (32bit)
|
|
|
|
* @param key - mfkey (64bit)
|
2022-04-09 05:09:31 +03:00
|
|
|
* @return man_learning for this seed number (64bit)
|
2022-04-09 00:29:15 +03:00
|
|
|
*/
|
|
|
|
|
2022-06-24 13:01:41 +03:00
|
|
|
inline uint64_t
|
2022-04-09 15:15:36 +03:00
|
|
|
subghz_protocol_keeloq_common_faac_learning(const uint32_t seed, const uint64_t key) {
|
2022-04-09 00:29:15 +03:00
|
|
|
uint16_t hs = seed >> 16;
|
2022-04-09 04:06:41 +03:00
|
|
|
const uint16_t ending = 0x544D;
|
|
|
|
uint32_t lsb = (uint32_t)hs << 16 | ending;
|
2022-06-24 13:01:41 +03:00
|
|
|
uint64_t man = (uint64_t)subghz_protocol_keeloq_common_encrypt(seed, key) << 32 |
|
|
|
|
subghz_protocol_keeloq_common_encrypt(lsb, key);
|
2022-04-09 04:33:32 +03:00
|
|
|
return man;
|
2022-09-22 18:01:54 +03:00
|
|
|
}
|
|
|
|
/** Magic_serial_type1 Learning
|
|
|
|
* @param data - serial number (28bit)
|
|
|
|
* @param man - magic man (64bit)
|
|
|
|
* @return manufacture for this serial number (64bit)
|
|
|
|
*/
|
|
|
|
|
|
|
|
inline uint64_t
|
|
|
|
subghz_protocol_keeloq_common_magic_serial_type1_learning(uint32_t data, uint64_t man) {
|
2022-10-28 17:31:41 +03:00
|
|
|
return (man & 0xFFFFFFFF) | ((uint64_t)data << 40) |
|
2022-09-22 18:01:54 +03:00
|
|
|
((uint64_t)(((data & 0xff) + ((data >> 8) & 0xFF)) & 0xFF) << 32);
|
|
|
|
}
|
2022-10-28 17:31:41 +03:00
|
|
|
|
|
|
|
/** Magic_serial_type2 Learning
|
|
|
|
* @param data - btn+serial number (32bit)
|
|
|
|
* @param man - magic man (64bit)
|
|
|
|
* @return manufacture for this serial number (64bit)
|
|
|
|
*/
|
|
|
|
|
|
|
|
inline uint64_t
|
|
|
|
subghz_protocol_keeloq_common_magic_serial_type2_learning(uint32_t data, uint64_t man) {
|
|
|
|
uint8_t* p = (uint8_t*)&data;
|
|
|
|
uint8_t* m = (uint8_t*)&man;
|
|
|
|
m[7] = p[0];
|
|
|
|
m[6] = p[1];
|
|
|
|
m[5] = p[2];
|
|
|
|
m[4] = p[3];
|
|
|
|
return man;
|
|
|
|
}
|
|
|
|
|
|
|
|
/** Magic_serial_type3 Learning
|
|
|
|
* @param data - serial number (24bit)
|
|
|
|
* @param man - magic man (64bit)
|
|
|
|
* @return manufacture for this serial number (64bit)
|
|
|
|
*/
|
|
|
|
|
|
|
|
inline uint64_t
|
|
|
|
subghz_protocol_keeloq_common_magic_serial_type3_learning(uint32_t data, uint64_t man) {
|
|
|
|
return (man & 0xFFFFFFFFFF000000) | (data & 0xFFFFFF);
|
|
|
|
}
|