307 lines
8.1 KiB
C
307 lines
8.1 KiB
C
/*-
|
|
* Public platform independent Near Field Communication (NFC) library
|
|
*
|
|
* Copyright (C) 2009, Roel Verdult
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify it
|
|
* under the terms of the GNU Lesser General Public License as published by the
|
|
* Free Software Foundation, either version 3 of the License, or (at your
|
|
* option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|
|
* more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
|
*/
|
|
|
|
/**
|
|
* @file nfc-anticol.c
|
|
* @brief Generates one ISO14443-A anti-collision process "by-hand"
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
# include "config.h"
|
|
#endif // HAVE_CONFIG_H
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <stddef.h>
|
|
#include <stdint.h>
|
|
#include <stdbool.h>
|
|
#include <string.h>
|
|
|
|
#include <nfc/nfc.h>
|
|
|
|
#include <nfc/nfc-messages.h>
|
|
#include "nfc-utils.h"
|
|
|
|
#define SAK_FLAG_ATS_SUPPORTED 0x20
|
|
|
|
#define MAX_FRAME_LEN 264
|
|
|
|
static byte_t abtRx[MAX_FRAME_LEN];
|
|
static size_t szRxBits;
|
|
static size_t szRx;
|
|
static byte_t abtRawUid[12];
|
|
static byte_t abtAtqa[2];
|
|
static byte_t abtSak;
|
|
static size_t szCL = 1;//Always start with Cascade Level 1 (CL1)
|
|
static nfc_device_t *pnd;
|
|
|
|
bool quiet_output = false;
|
|
|
|
// ISO14443A Anti-Collision Commands
|
|
byte_t abtReqa[1] = { 0x26 };
|
|
byte_t abtSelectAll[2] = { 0x93, 0x20 };
|
|
byte_t abtSelectTag[9] = { 0x93, 0x70, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
|
|
byte_t abtRats[4] = { 0xe0, 0x50, 0x00, 0x00 };
|
|
byte_t abtHalt[4] = { 0x50, 0x00, 0x00, 0x00 };
|
|
#define CASCADE_BIT 0x04
|
|
|
|
static bool
|
|
transmit_bits (const byte_t * pbtTx, const size_t szTxBits)
|
|
{
|
|
// Show transmitted command
|
|
if (!quiet_output) {
|
|
printf ("Sent bits: ");
|
|
print_hex_bits (pbtTx, szTxBits);
|
|
}
|
|
// Transmit the bit frame command, we don't use the arbitrary parity feature
|
|
if (!nfc_initiator_transceive_bits (pnd, pbtTx, szTxBits, NULL, abtRx, &szRxBits, NULL))
|
|
return false;
|
|
|
|
// Show received answer
|
|
if (!quiet_output) {
|
|
printf ("Received bits: ");
|
|
print_hex_bits (abtRx, szRxBits);
|
|
}
|
|
// Succesful transfer
|
|
return true;
|
|
}
|
|
|
|
|
|
static bool
|
|
transmit_bytes (const byte_t * pbtTx, const size_t szTx)
|
|
{
|
|
// Show transmitted command
|
|
if (!quiet_output) {
|
|
printf ("Sent bits: ");
|
|
print_hex (pbtTx, szTx);
|
|
}
|
|
// Transmit the command bytes
|
|
if (!nfc_initiator_transceive_bytes (pnd, pbtTx, szTx, abtRx, &szRx))
|
|
return false;
|
|
|
|
// Show received answer
|
|
if (!quiet_output) {
|
|
printf ("Received bits: ");
|
|
print_hex (abtRx, szRx);
|
|
}
|
|
// Succesful transfer
|
|
return true;
|
|
}
|
|
|
|
static void
|
|
print_usage (char *argv[])
|
|
{
|
|
printf ("Usage: %s [OPTIONS]\n", argv[0]);
|
|
printf ("Options:\n");
|
|
printf ("\t-h\tHelp. Print this message.\n");
|
|
printf ("\t-q\tQuiet mode. Suppress output of READER and EMULATOR data (improves timing).\n");
|
|
}
|
|
|
|
int
|
|
main (int argc, char *argv[])
|
|
{
|
|
int arg;
|
|
|
|
// Get commandline options
|
|
for (arg = 1; arg < argc; arg++) {
|
|
if (0 == strcmp (argv[arg], "-h")) {
|
|
print_usage (argv);
|
|
exit(EXIT_SUCCESS);
|
|
} else if (0 == strcmp (argv[arg], "-q")) {
|
|
quiet_output = true;
|
|
} else {
|
|
ERR ("%s is not supported option.", argv[arg]);
|
|
print_usage (argv);
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
}
|
|
|
|
// Try to open the NFC reader
|
|
pnd = nfc_connect (NULL);
|
|
|
|
if (!pnd) {
|
|
printf ("Error connecting NFC reader\n");
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
// Initialise NFC device as "initiator"
|
|
nfc_initiator_init (pnd);
|
|
|
|
// Drop the field for a while
|
|
if (!nfc_configure (pnd, NDO_ACTIVATE_FIELD, false)) {
|
|
nfc_perror (pnd, "nfc_configure");
|
|
exit (EXIT_FAILURE);
|
|
}
|
|
|
|
// Configure the CRC
|
|
if (!nfc_configure (pnd, NDO_HANDLE_CRC, false)) {
|
|
nfc_perror (pnd, "nfc_configure");
|
|
exit (EXIT_FAILURE);
|
|
}
|
|
// Configure parity settings
|
|
if (!nfc_configure (pnd, NDO_HANDLE_PARITY, true)) {
|
|
nfc_perror (pnd, "nfc_configure");
|
|
exit (EXIT_FAILURE);
|
|
}
|
|
// Use raw send/receive methods
|
|
if (!nfc_configure (pnd, NDO_EASY_FRAMING, false)) {
|
|
nfc_perror (pnd, "nfc_configure");
|
|
exit (EXIT_FAILURE);
|
|
}
|
|
// Disable 14443-4 autoswitching
|
|
if (!nfc_configure (pnd, NDO_AUTO_ISO14443_4, false)) {
|
|
nfc_perror (pnd, "nfc_configure");
|
|
exit (EXIT_FAILURE);
|
|
}
|
|
// Force 14443-A mode
|
|
if (!nfc_configure (pnd, NDO_FORCE_ISO14443_A, true)) {
|
|
nfc_perror (pnd, "nfc_configure");
|
|
exit (EXIT_FAILURE);
|
|
}
|
|
|
|
// Enable field so more power consuming cards can power themselves up
|
|
if (!nfc_configure (pnd, NDO_ACTIVATE_FIELD, true)) {
|
|
nfc_perror (pnd, "nfc_configure");
|
|
exit (EXIT_FAILURE);
|
|
}
|
|
|
|
printf ("Connected to NFC reader: %s\n\n", pnd->acName);
|
|
|
|
// Send the 7 bits request command specified in ISO 14443A (0x26)
|
|
if (!transmit_bits (abtReqa, 7)) {
|
|
printf ("Error: No tag available\n");
|
|
nfc_disconnect (pnd);
|
|
return 1;
|
|
}
|
|
memcpy (abtAtqa, abtRx, 2);
|
|
|
|
// Anti-collision
|
|
transmit_bytes (abtSelectAll, 2);
|
|
|
|
// Check answer
|
|
if ((abtRx[0] ^ abtRx[1] ^ abtRx[2] ^ abtRx[3] ^ abtRx[4]) != 0) {
|
|
printf("WARNING: BCC check failed!\n");
|
|
}
|
|
|
|
// Save the UID CL1
|
|
memcpy (abtRawUid, abtRx, 4);
|
|
|
|
//Prepare and send CL1 Select-Command
|
|
memcpy (abtSelectTag + 2, abtRx, 5);
|
|
iso14443a_crc_append (abtSelectTag, 7);
|
|
transmit_bytes (abtSelectTag, 9);
|
|
abtSak = abtRx[0];
|
|
|
|
// Test if we are dealing with a CL2
|
|
if (abtSak & CASCADE_BIT) {
|
|
szCL = 2;//or more
|
|
// Check answer
|
|
if (abtRawUid[0] != 0x88) {
|
|
printf("WARNING: Cascade bit set but CT != 0x88!\n");
|
|
}
|
|
}
|
|
|
|
if(szCL == 2) {
|
|
// We have to do the anti-collision for cascade level 2
|
|
|
|
// Prepare CL2 commands
|
|
abtSelectAll[0] = 0x95;
|
|
|
|
// Anti-collision
|
|
transmit_bytes (abtSelectAll, 2);
|
|
|
|
// Check answer
|
|
if ((abtRx[0] ^ abtRx[1] ^ abtRx[2] ^ abtRx[3] ^ abtRx[4]) != 0) {
|
|
printf("WARNING: BCC check failed!\n");
|
|
}
|
|
|
|
// Save UID CL2
|
|
memcpy (abtRawUid + 4, abtRx, 4);
|
|
|
|
// Selection
|
|
abtSelectTag[0] = 0x95;
|
|
memcpy (abtSelectTag + 2, abtRx, 5);
|
|
iso14443a_crc_append (abtSelectTag, 7);
|
|
transmit_bytes (abtSelectTag, 9);
|
|
abtSak = abtRx[0];
|
|
|
|
// Test if we are dealing with a CL3
|
|
if (abtSak & CASCADE_BIT) {
|
|
szCL = 3;
|
|
// Check answer
|
|
if (abtRawUid[0] != 0x88) {
|
|
printf("WARNING: Cascade bit set but CT != 0x88!\n");
|
|
}
|
|
}
|
|
|
|
if ( szCL == 3) {
|
|
// We have to do the anti-collision for cascade level 3
|
|
|
|
// Prepare and send CL3 AC-Command
|
|
abtSelectAll[0] = 0x97;
|
|
transmit_bytes (abtSelectAll, 2);
|
|
|
|
// Check answer
|
|
if ((abtRx[0] ^ abtRx[1] ^ abtRx[2] ^ abtRx[3] ^ abtRx[4]) != 0) {
|
|
printf("WARNING: BCC check failed!\n");
|
|
}
|
|
|
|
// Save UID CL3
|
|
memcpy (abtRawUid + 8, abtRx, 4);
|
|
|
|
// Prepare and send final Select-Command
|
|
abtSelectTag[0] = 0x97;
|
|
memcpy (abtSelectTag + 2, abtRx, 5);
|
|
iso14443a_crc_append (abtSelectTag, 7);
|
|
transmit_bytes (abtSelectTag, 9);
|
|
abtSak = abtRx[0];
|
|
}
|
|
}
|
|
|
|
// Request ATS, this only applies to tags that support ISO 14443A-4
|
|
if (abtRx[0] & SAK_FLAG_ATS_SUPPORTED) {
|
|
iso14443a_crc_append(abtRats, 2);
|
|
transmit_bytes (abtRats, 4);
|
|
}
|
|
|
|
// Done, halt the tag now
|
|
iso14443a_crc_append(abtHalt, 2);
|
|
transmit_bytes (abtHalt, 4);
|
|
|
|
printf ("\nFound tag with\n UID: ");
|
|
switch (szCL) {
|
|
case 1:
|
|
printf ("%02x%02x%02x%02x", abtRawUid[0], abtRawUid[1], abtRawUid[2], abtRawUid[3]);
|
|
break;
|
|
case 2:
|
|
printf ("%02x%02x%02x", abtRawUid[1], abtRawUid[2], abtRawUid[3]);
|
|
printf ("%02x%02x%02x%02x", abtRawUid[4], abtRawUid[5], abtRawUid[6], abtRawUid[7]);
|
|
break;
|
|
case 3:
|
|
printf ("%02x%02x%02x", abtRawUid[1], abtRawUid[2], abtRawUid[3]);
|
|
printf ("%02x%02x%02x", abtRawUid[5], abtRawUid[6], abtRawUid[7]);
|
|
printf ("%02x%02x%02x%02x", abtRawUid[8], abtRawUid[9], abtRawUid[10], abtRawUid[11]);
|
|
break;
|
|
}
|
|
printf("\n");
|
|
printf("ATQA: %02x%02x\n SAK: %02x\n", abtAtqa[1], abtAtqa[0], abtSak);
|
|
|
|
nfc_disconnect (pnd);
|
|
return 0;
|
|
}
|