plantain_4k_parser.c 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141
  1. #include "nfc_supported_card.h"
  2. #include <gui/modules/widget.h>
  3. #include <nfc_worker_i.h>
  4. #include "furi_hal.h"
  5. static const MfClassicAuthContext plantain_keys_4k[] = {
  6. {.sector = 0, .key_a = 0xFFFFFFFFFFFF, .key_b = 0xFFFFFFFFFFFF},
  7. {.sector = 1, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  8. {.sector = 2, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  9. {.sector = 3, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  10. {.sector = 4, .key_a = 0xe56ac127dd45, .key_b = 0x19fc84a3784b},
  11. {.sector = 5, .key_a = 0x77dabc9825e1, .key_b = 0x9764fec3154a},
  12. {.sector = 6, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  13. {.sector = 7, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  14. {.sector = 8, .key_a = 0x26973ea74321, .key_b = 0xd27058c6e2c7},
  15. {.sector = 9, .key_a = 0xeb0a8ff88ade, .key_b = 0x578a9ada41e3},
  16. {.sector = 10, .key_a = 0xea0fd73cb149, .key_b = 0x29c35fa068fb},
  17. {.sector = 11, .key_a = 0xc76bf71a2509, .key_b = 0x9ba241db3f56},
  18. {.sector = 12, .key_a = 0xacffffffffff, .key_b = 0x71f3a315ad26},
  19. {.sector = 13, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  20. {.sector = 14, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  21. {.sector = 15, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  22. {.sector = 16, .key_a = 0x72f96bdd3714, .key_b = 0x462225cd34cf},
  23. {.sector = 17, .key_a = 0x044ce1872bc3, .key_b = 0x8c90c70cff4a},
  24. {.sector = 18, .key_a = 0xbc2d1791dec1, .key_b = 0xca96a487de0b},
  25. {.sector = 19, .key_a = 0x8791b2ccb5c4, .key_b = 0xc956c3b80da3},
  26. {.sector = 20, .key_a = 0x8e26e45e7d65, .key_b = 0x8e65b3af7d22},
  27. {.sector = 21, .key_a = 0x0f318130ed18, .key_b = 0x0c420a20e056},
  28. {.sector = 22, .key_a = 0x045ceca15535, .key_b = 0x31bec3d9e510},
  29. {.sector = 23, .key_a = 0x9d993c5d4ef4, .key_b = 0x86120e488abf},
  30. {.sector = 24, .key_a = 0xc65d4eaa645b, .key_b = 0xb69d40d1a439},
  31. {.sector = 25, .key_a = 0x3a8a139c20b4, .key_b = 0x8818a9c5d406},
  32. {.sector = 26, .key_a = 0xbaff3053b496, .key_b = 0x4b7cb25354d3},
  33. {.sector = 27, .key_a = 0x7413b599c4ea, .key_b = 0xb0a2AAF3A1BA},
  34. {.sector = 28, .key_a = 0x0ce7cd2cc72b, .key_b = 0xfa1fbb3f0f1f},
  35. {.sector = 29, .key_a = 0x0be5fac8b06a, .key_b = 0x6f95887a4fd3},
  36. {.sector = 30, .key_a = 0x0eb23cc8110b, .key_b = 0x04dc35277635},
  37. {.sector = 31, .key_a = 0xbc4580b7f20b, .key_b = 0xd0a4131fb290},
  38. {.sector = 32, .key_a = 0x7a396f0d633d, .key_b = 0xad2bdc097023},
  39. {.sector = 33, .key_a = 0xa3faa6daff67, .key_b = 0x7600e889adf9},
  40. {.sector = 34, .key_a = 0xfd8705e721b0, .key_b = 0x296fc317a513},
  41. {.sector = 35, .key_a = 0x22052b480d11, .key_b = 0xe19504c39461},
  42. {.sector = 36, .key_a = 0xa7141147d430, .key_b = 0xff16014fefc7},
  43. {.sector = 37, .key_a = 0x8a8d88151a00, .key_b = 0x038b5f9b5a2a},
  44. {.sector = 38, .key_a = 0xb27addfb64b0, .key_b = 0x152fd0c420a7},
  45. {.sector = 39, .key_a = 0x7259fa0197c6, .key_b = 0x5583698df085},
  46. };
  47. bool plantain_4k_parser_verify(NfcWorker* nfc_worker, FuriHalNfcTxRxContext* tx_rx) {
  48. furi_assert(nfc_worker);
  49. UNUSED(nfc_worker);
  50. if(nfc_worker->dev_data->mf_classic_data.type != MfClassicType4k) {
  51. return false;
  52. }
  53. uint8_t sector = 8;
  54. uint8_t block = mf_classic_get_sector_trailer_block_num_by_sector(sector);
  55. FURI_LOG_D("Plant4K", "Verifying sector %d", sector);
  56. if(mf_classic_authenticate(tx_rx, block, 0x26973ea74321, MfClassicKeyA)) {
  57. FURI_LOG_D("Plant4K", "Sector %d verified", sector);
  58. return true;
  59. }
  60. return false;
  61. }
  62. bool plantain_4k_parser_read(NfcWorker* nfc_worker, FuriHalNfcTxRxContext* tx_rx) {
  63. furi_assert(nfc_worker);
  64. MfClassicReader reader = {};
  65. FuriHalNfcDevData* nfc_data = &nfc_worker->dev_data->nfc_data;
  66. reader.type = mf_classic_get_classic_type(nfc_data->atqa[0], nfc_data->atqa[1], nfc_data->sak);
  67. for(size_t i = 0; i < COUNT_OF(plantain_keys_4k); i++) {
  68. mf_classic_reader_add_sector(
  69. &reader,
  70. plantain_keys_4k[i].sector,
  71. plantain_keys_4k[i].key_a,
  72. plantain_keys_4k[i].key_b);
  73. FURI_LOG_T("plant4k", "Added sector %d", plantain_keys_4k[i].sector);
  74. }
  75. for(int i = 0; i < 5; i++) {
  76. if(mf_classic_read_card(tx_rx, &reader, &nfc_worker->dev_data->mf_classic_data) == 40) {
  77. return true;
  78. }
  79. }
  80. return false;
  81. }
  82. bool plantain_4k_parser_parse(NfcDeviceData* dev_data) {
  83. MfClassicData* data = &dev_data->mf_classic_data;
  84. // Verify key
  85. MfClassicSectorTrailer* sec_tr = mf_classic_get_sector_trailer_by_sector(data, 8);
  86. uint64_t key = nfc_util_bytes2num(sec_tr->key_a, 6);
  87. if(key != plantain_keys_4k[8].key_a) return false;
  88. // Point to block 0 of sector 4, value 0
  89. uint8_t* temp_ptr = &data->block[4 * 4].value[0];
  90. // Read first 4 bytes of block 0 of sector 4 from last to first and convert them to uint32_t
  91. // 38 18 00 00 becomes 00 00 18 38, and equals to 6200 decimal
  92. uint32_t balance =
  93. ((temp_ptr[3] << 24) | (temp_ptr[2] << 16) | (temp_ptr[1] << 8) | temp_ptr[0]) / 100;
  94. // Read card number
  95. // Point to block 0 of sector 0, value 0
  96. temp_ptr = &data->block[0 * 4].value[0];
  97. // Read first 7 bytes of block 0 of sector 0 from last to first and convert them to uint64_t
  98. // 80 5C 23 8A 16 31 04 becomes 04 31 16 8A 23 5C 80, and equals to 36130104729284868 decimal
  99. uint8_t card_number_arr[7];
  100. for(size_t i = 0; i < 7; i++) {
  101. card_number_arr[i] = temp_ptr[6 - i];
  102. }
  103. // Copy card number to uint64_t
  104. uint64_t card_number = 0;
  105. for(size_t i = 0; i < 7; i++) {
  106. card_number = (card_number << 8) | card_number_arr[i];
  107. }
  108. // Convert card number to string
  109. FuriString* card_number_str;
  110. card_number_str = furi_string_alloc();
  111. // Should look like "361301047292848684"
  112. furi_string_printf(card_number_str, "%llu", card_number);
  113. // Add suffix with luhn checksum (1 digit) to the card number string
  114. FuriString* card_number_suffix;
  115. card_number_suffix = furi_string_alloc();
  116. furi_string_cat_printf(card_number_suffix, "-");
  117. furi_string_cat_printf(card_number_str, furi_string_get_cstr(card_number_suffix));
  118. // Free all not needed strings
  119. furi_string_free(card_number_suffix);
  120. furi_string_printf(
  121. dev_data->parsed_data,
  122. "\e#Plantain\nN:%s\nBalance:%ld\n",
  123. furi_string_get_cstr(card_number_str),
  124. balance);
  125. furi_string_free(card_number_str);
  126. return true;
  127. }