two_cities.c 6.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160
  1. #include "nfc_supported_card.h"
  2. #include "plantain_parser.h" // For plantain-specific stuff
  3. #include <gui/modules/widget.h>
  4. #include <nfc_worker_i.h>
  5. #include "furi_hal.h"
  6. static const MfClassicAuthContext two_cities_keys_4k[] = {
  7. {.sector = 0, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  8. {.sector = 1, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  9. {.sector = 2, .key_a = 0x2aa05ed1856f, .key_b = 0xeaac88e5dc99},
  10. {.sector = 3, .key_a = 0x2aa05ed1856f, .key_b = 0xeaac88e5dc99},
  11. {.sector = 4, .key_a = 0xe56ac127dd45, .key_b = 0x19fc84a3784b},
  12. {.sector = 5, .key_a = 0x77dabc9825e1, .key_b = 0x9764fec3154a},
  13. {.sector = 6, .key_a = 0x2aa05ed1856f, .key_b = 0xeaac88e5dc99},
  14. {.sector = 7, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  15. {.sector = 8, .key_a = 0xa73f5dc1d333, .key_b = 0xe35173494a81},
  16. {.sector = 9, .key_a = 0x69a32f1c2f19, .key_b = 0x6b8bd9860763},
  17. {.sector = 10, .key_a = 0xea0fd73cb149, .key_b = 0x29c35fa068fb},
  18. {.sector = 11, .key_a = 0xc76bf71a2509, .key_b = 0x9ba241db3f56},
  19. {.sector = 12, .key_a = 0xacffffffffff, .key_b = 0x71f3a315ad26},
  20. {.sector = 13, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  21. {.sector = 14, .key_a = 0xffffffffffff, .key_b = 0xffffffffffff},
  22. {.sector = 15, .key_a = 0x2aa05ed1856f, .key_b = 0xeaac88e5dc99},
  23. {.sector = 16, .key_a = 0x72f96bdd3714, .key_b = 0x462225cd34cf},
  24. {.sector = 17, .key_a = 0x044ce1872bc3, .key_b = 0x8c90c70cff4a},
  25. {.sector = 18, .key_a = 0xbc2d1791dec1, .key_b = 0xca96a487de0b},
  26. {.sector = 19, .key_a = 0x8791b2ccb5c4, .key_b = 0xc956c3b80da3},
  27. {.sector = 20, .key_a = 0x8e26e45e7d65, .key_b = 0x8e65b3af7d22},
  28. {.sector = 21, .key_a = 0x0f318130ed18, .key_b = 0x0c420a20e056},
  29. {.sector = 22, .key_a = 0x045ceca15535, .key_b = 0x31bec3d9e510},
  30. {.sector = 23, .key_a = 0x9d993c5d4ef4, .key_b = 0x86120e488abf},
  31. {.sector = 24, .key_a = 0xc65d4eaa645b, .key_b = 0xb69d40d1a439},
  32. {.sector = 25, .key_a = 0x3a8a139c20b4, .key_b = 0x8818a9c5d406},
  33. {.sector = 26, .key_a = 0xbaff3053b496, .key_b = 0x4b7cb25354d3},
  34. {.sector = 27, .key_a = 0x7413b599c4ea, .key_b = 0xb0a2AAF3A1BA},
  35. {.sector = 28, .key_a = 0x0ce7cd2cc72b, .key_b = 0xfa1fbb3f0f1f},
  36. {.sector = 29, .key_a = 0x0be5fac8b06a, .key_b = 0x6f95887a4fd3},
  37. {.sector = 30, .key_a = 0x26973ea74321, .key_b = 0xd27058c6e2c7},
  38. {.sector = 31, .key_a = 0xeb0a8ff88ade, .key_b = 0x578a9ada41e3},
  39. {.sector = 32, .key_a = 0x7a396f0d633d, .key_b = 0xad2bdc097023},
  40. {.sector = 33, .key_a = 0xa3faa6daff67, .key_b = 0x7600e889adf9},
  41. {.sector = 34, .key_a = 0x2aa05ed1856f, .key_b = 0xeaac88e5dc99},
  42. {.sector = 35, .key_a = 0x2aa05ed1856f, .key_b = 0xeaac88e5dc99},
  43. {.sector = 36, .key_a = 0xa7141147d430, .key_b = 0xff16014fefc7},
  44. {.sector = 37, .key_a = 0x8a8d88151a00, .key_b = 0x038b5f9b5a2a},
  45. {.sector = 38, .key_a = 0xb27addfb64b0, .key_b = 0x152fd0c420a7},
  46. {.sector = 39, .key_a = 0x7259fa0197c6, .key_b = 0x5583698df085},
  47. };
  48. bool two_cities_parser_verify(NfcWorker* nfc_worker, FuriHalNfcTxRxContext* tx_rx) {
  49. furi_assert(nfc_worker);
  50. UNUSED(nfc_worker);
  51. if(nfc_worker->dev_data->mf_classic_data.type != MfClassicType4k) {
  52. return false;
  53. }
  54. uint8_t sector = 4;
  55. uint8_t block = mf_classic_get_sector_trailer_block_num_by_sector(sector);
  56. FURI_LOG_D("2cities", "Verifying sector %d", sector);
  57. if(mf_classic_authenticate(tx_rx, block, 0xe56ac127dd45, MfClassicKeyA)) {
  58. FURI_LOG_D("2cities", "Sector %d verified", sector);
  59. return true;
  60. }
  61. return false;
  62. }
  63. bool two_cities_parser_read(NfcWorker* nfc_worker, FuriHalNfcTxRxContext* tx_rx) {
  64. furi_assert(nfc_worker);
  65. MfClassicReader reader = {};
  66. FuriHalNfcDevData* nfc_data = &nfc_worker->dev_data->nfc_data;
  67. reader.type = mf_classic_get_classic_type(nfc_data->atqa[0], nfc_data->atqa[1], nfc_data->sak);
  68. for(size_t i = 0; i < COUNT_OF(two_cities_keys_4k); i++) {
  69. mf_classic_reader_add_sector(
  70. &reader,
  71. two_cities_keys_4k[i].sector,
  72. two_cities_keys_4k[i].key_a,
  73. two_cities_keys_4k[i].key_b);
  74. FURI_LOG_T("2cities", "Added sector %d", two_cities_keys_4k[i].sector);
  75. }
  76. return mf_classic_read_card(tx_rx, &reader, &nfc_worker->dev_data->mf_classic_data) == 40;
  77. }
  78. bool two_cities_parser_parse(NfcDeviceData* dev_data) {
  79. MfClassicData* data = &dev_data->mf_classic_data;
  80. // Verify key
  81. MfClassicSectorTrailer* sec_tr = mf_classic_get_sector_trailer_by_sector(data, 4);
  82. uint64_t key = nfc_util_bytes2num(sec_tr->key_a, 6);
  83. if(key != two_cities_keys_4k[4].key_a) return false;
  84. // =====
  85. // PLANTAIN
  86. // =====
  87. // Point to block 0 of sector 4, value 0
  88. uint8_t* temp_ptr = &data->block[4 * 4].value[0];
  89. // Read first 4 bytes of block 0 of sector 4 from last to first and convert them to uint32_t
  90. // 38 18 00 00 becomes 00 00 18 38, and equals to 6200 decimal
  91. uint32_t balance =
  92. ((temp_ptr[3] << 24) | (temp_ptr[2] << 16) | (temp_ptr[1] << 8) | temp_ptr[0]) / 100;
  93. // Read card number
  94. // Point to block 0 of sector 0, value 0
  95. temp_ptr = &data->block[0 * 4].value[0];
  96. // Read first 7 bytes of block 0 of sector 0 from last to first and convert them to uint64_t
  97. // 80 5C 23 8A 16 31 04 becomes 04 31 16 8A 23 5C 80, and equals to 36130104729284868 decimal
  98. uint8_t card_number_arr[7];
  99. for(size_t i = 0; i < 7; i++) {
  100. card_number_arr[i] = temp_ptr[6 - i];
  101. }
  102. // Copy card number to uint64_t
  103. uint64_t card_number = 0;
  104. for(size_t i = 0; i < 7; i++) {
  105. card_number = (card_number << 8) | card_number_arr[i];
  106. }
  107. // Convert card number to string
  108. FuriString* card_number_str;
  109. card_number_str = furi_string_alloc();
  110. // Should look like "361301047292848684"
  111. furi_string_printf(card_number_str, "%llu", card_number);
  112. // Add suffix with luhn checksum (1 digit) to the card number string
  113. FuriString* card_number_suffix;
  114. card_number_suffix = furi_string_alloc();
  115. furi_string_cat_printf(card_number_suffix, "-");
  116. furi_string_cat_printf(card_number_str, furi_string_get_cstr(card_number_suffix));
  117. // Free all not needed strings
  118. furi_string_free(card_number_suffix);
  119. // =====
  120. // --PLANTAIN--
  121. // =====
  122. // TROIKA
  123. // =====
  124. uint8_t* troika_temp_ptr = &data->block[8 * 4 + 1].value[5];
  125. uint16_t troika_balance = ((troika_temp_ptr[0] << 8) | troika_temp_ptr[1]) / 25;
  126. troika_temp_ptr = &data->block[8 * 4].value[3];
  127. uint32_t troika_number = 0;
  128. for(size_t i = 0; i < 4; i++) {
  129. troika_number <<= 8;
  130. troika_number |= troika_temp_ptr[i];
  131. }
  132. troika_number >>= 4;
  133. furi_string_printf(
  134. dev_data->parsed_data,
  135. "\e#Troika+Plantain\nPN: %s\nPB: %ld rur.\nTN: %ld\nTB: %d rur.\n",
  136. furi_string_get_cstr(card_number_str),
  137. balance,
  138. troika_number,
  139. troika_balance);
  140. furi_string_free(card_number_str);
  141. return true;
  142. }