keys.c 8.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265
  1. #include "../metroflip_i.h"
  2. #include "keys.h"
  3. #include <bit_lib.h>
  4. #include <nfc/protocols/mf_classic/mf_classic.h>
  5. #include <nfc/protocols/mf_classic/mf_classic_poller.h>
  6. #include <nfc/nfc.h>
  7. #include <nfc/protocols/mf_classic/mf_classic_poller_sync.h>
  8. #include <string.h>
  9. #define TAG "keys_check"
  10. const MfClassicKeyPair troika_1k_key[] = {
  11. {.a = 0x08b386463229},
  12. };
  13. const MfClassicKeyPair troika_4k_key[] = {
  14. {.a = 0xA73F5DC1D333},
  15. };
  16. const MfClassicKeyPair smartrider_verify_key[] = {
  17. {.a = 0x2031D1E57A3B},
  18. };
  19. const MfClassicKeyPair charliecard_1k_verify_key[] = {
  20. {.a = 0x5EC39B022F2B},
  21. };
  22. const MfClassicKeyPair bip_1k_verify_key[] = {
  23. {.a = 0x3a42f33af429},
  24. };
  25. const MfClassicKeyPair metromoney_1k_verify_key[] = {
  26. {.a = 0x9C616585E26D},
  27. };
  28. static bool charliecard_verify(Nfc* nfc, MfClassicData* mfc_data, bool data_loaded) {
  29. bool verified = false;
  30. FURI_LOG_I(TAG, "verifying charliecard..");
  31. const uint8_t verify_sector = 1;
  32. do {
  33. if(!data_loaded) {
  34. const uint8_t verify_block =
  35. mf_classic_get_first_block_num_of_sector(verify_sector) + 1;
  36. FURI_LOG_I(TAG, "Verifying sector %u", verify_sector);
  37. MfClassicKey key = {0};
  38. bit_lib_num_to_bytes_be(charliecard_1k_verify_key[0].a, COUNT_OF(key.data), key.data);
  39. MfClassicAuthContext auth_context;
  40. MfClassicError error = mf_classic_poller_sync_auth(
  41. nfc, verify_block, &key, MfClassicKeyTypeA, &auth_context);
  42. if(error != MfClassicErrorNone) {
  43. FURI_LOG_I(TAG, "Failed to read block %u: %d", verify_block, error);
  44. break;
  45. }
  46. verified = true;
  47. } else {
  48. MfClassicSectorTrailer* sec_tr =
  49. mf_classic_get_sector_trailer_by_sector(mfc_data, verify_sector);
  50. FURI_LOG_I(TAG, "%2x", sec_tr->key_a.data[1]);
  51. uint64_t key = bit_lib_bytes_to_num_be(sec_tr->key_a.data, 6);
  52. if(key != charliecard_1k_verify_key[0].a) {
  53. FURI_LOG_I(TAG, "not equall");
  54. break;
  55. }
  56. verified = true;
  57. }
  58. } while(false);
  59. return verified;
  60. }
  61. bool bip_verify(Nfc* nfc, MfClassicData* mfc_data, bool data_loaded) {
  62. bool verified = false;
  63. do {
  64. if(!data_loaded) {
  65. const uint8_t verify_sector = 0;
  66. uint8_t block_num = mf_classic_get_first_block_num_of_sector(verify_sector);
  67. FURI_LOG_I(TAG, "Verifying sector %u", verify_sector);
  68. MfClassicKey key = {};
  69. bit_lib_num_to_bytes_be(bip_1k_verify_key[0].a, COUNT_OF(key.data), key.data);
  70. MfClassicAuthContext auth_ctx = {};
  71. MfClassicError error =
  72. mf_classic_poller_sync_auth(nfc, block_num, &key, MfClassicKeyTypeA, &auth_ctx);
  73. if(error != MfClassicErrorNone) {
  74. FURI_LOG_I(TAG, "Failed to read block %u: %d", block_num, error);
  75. break;
  76. }
  77. verified = true;
  78. } else {
  79. MfClassicSectorTrailer* sec_tr = mf_classic_get_sector_trailer_by_sector(mfc_data, 0);
  80. uint64_t key = bit_lib_bytes_to_num_be(sec_tr->key_a.data, 6);
  81. if(key != bip_1k_verify_key[0].a) {
  82. break;
  83. }
  84. verified = true;
  85. }
  86. } while(false);
  87. return verified;
  88. }
  89. static bool metromoney_verify(Nfc* nfc, MfClassicData* mfc_data, bool data_loaded) {
  90. bool verified = false;
  91. const uint8_t ticket_sector_number = 1;
  92. do {
  93. if(!data_loaded) {
  94. const uint8_t ticket_block_number =
  95. mf_classic_get_first_block_num_of_sector(ticket_sector_number) + 1;
  96. FURI_LOG_D(TAG, "Verifying sector %u", ticket_sector_number);
  97. MfClassicKey key = {0};
  98. bit_lib_num_to_bytes_be(metromoney_1k_verify_key[0].a, COUNT_OF(key.data), key.data);
  99. MfClassicAuthContext auth_context;
  100. MfClassicError error = mf_classic_poller_sync_auth(
  101. nfc, ticket_block_number, &key, MfClassicKeyTypeA, &auth_context);
  102. if(error != MfClassicErrorNone) {
  103. FURI_LOG_D(TAG, "Failed to read block %u: %d", ticket_block_number, error);
  104. break;
  105. }
  106. verified = true;
  107. } else {
  108. MfClassicSectorTrailer* sec_tr =
  109. mf_classic_get_sector_trailer_by_sector(mfc_data, ticket_sector_number);
  110. uint64_t key = bit_lib_bytes_to_num_be(sec_tr->key_a.data, 6);
  111. if(key != metromoney_1k_verify_key[0].a) {
  112. break;
  113. }
  114. verified = true;
  115. }
  116. } while(false);
  117. return verified;
  118. }
  119. static bool smartrider_verify(Nfc* nfc, MfClassicData* mfc_data, bool data_loaded) {
  120. bool verified = false;
  121. do {
  122. if(!data_loaded) {
  123. const uint8_t block_number = mf_classic_get_first_block_num_of_sector(0) + 1;
  124. FURI_LOG_D(TAG, "Verifying sector 0");
  125. MfClassicKey key = {0};
  126. bit_lib_num_to_bytes_be(smartrider_verify_key[0].a, COUNT_OF(key.data), key.data);
  127. MfClassicAuthContext auth_context;
  128. MfClassicError error = mf_classic_poller_sync_auth(
  129. nfc, block_number, &key, MfClassicKeyTypeA, &auth_context);
  130. if(error != MfClassicErrorNone) {
  131. FURI_LOG_D(TAG, "Failed to read block %u: %d", block_number, error);
  132. break;
  133. }
  134. verified = true;
  135. } else {
  136. MfClassicSectorTrailer* sec_tr = mf_classic_get_sector_trailer_by_sector(mfc_data, 0);
  137. uint64_t key = bit_lib_bytes_to_num_be(sec_tr->key_a.data, 6);
  138. if(key != smartrider_verify_key[0].a) {
  139. break;
  140. }
  141. verified = true;
  142. }
  143. } while(false);
  144. return verified;
  145. }
  146. static bool troika_get_card_config(TroikaCardConfig* config, MfClassicType type) {
  147. bool success = true;
  148. if(type == MfClassicType1k) {
  149. config->data_sector = 11;
  150. config->keys = troika_1k_key;
  151. } else if(type == MfClassicType4k) {
  152. config->data_sector = 8; // Further testing needed
  153. config->keys = troika_4k_key;
  154. } else {
  155. success = false;
  156. }
  157. return success;
  158. }
  159. static bool
  160. troika_verify_type(Nfc* nfc, MfClassicData* mfc_data, bool data_loaded, MfClassicType type) {
  161. bool verified = false;
  162. do {
  163. if(!data_loaded) {
  164. TroikaCardConfig cfg = {};
  165. if(!troika_get_card_config(&cfg, type)) break;
  166. const uint8_t block_num = mf_classic_get_first_block_num_of_sector(cfg.data_sector);
  167. FURI_LOG_D(TAG, "Verifying sector %lu", cfg.data_sector);
  168. MfClassicKey key = {0};
  169. bit_lib_num_to_bytes_be(cfg.keys[0].a, COUNT_OF(key.data), key.data);
  170. MfClassicAuthContext auth_context;
  171. MfClassicError error = mf_classic_poller_sync_auth(
  172. nfc, block_num, &key, MfClassicKeyTypeA, &auth_context);
  173. if(error != MfClassicErrorNone) {
  174. FURI_LOG_D(TAG, "Failed to read block %u: %d", block_num, error);
  175. break;
  176. }
  177. FURI_LOG_D(TAG, "Verify success!");
  178. verified = true;
  179. } else {
  180. TroikaCardConfig cfg = {};
  181. if(!troika_get_card_config(&cfg, type)) break;
  182. MfClassicSectorTrailer* sec_tr =
  183. mf_classic_get_sector_trailer_by_sector(mfc_data, cfg.data_sector);
  184. uint64_t key = bit_lib_bytes_to_num_be(sec_tr->key_a.data, 6);
  185. if(key != cfg.keys[0].a) {
  186. break;
  187. }
  188. verified = true;
  189. }
  190. } while(false);
  191. return verified;
  192. }
  193. static bool troika_verify(Nfc* nfc, MfClassicData* mfc_data, bool data_loaded) {
  194. return troika_verify_type(nfc, mfc_data, data_loaded, MfClassicType1k) ||
  195. troika_verify_type(nfc, mfc_data, data_loaded, MfClassicType4k);
  196. }
  197. CardType determine_card_type(Nfc* nfc, MfClassicData* mfc_data, bool data_loaded) {
  198. FURI_LOG_I(TAG, "checking keys..");
  199. UNUSED(bip_verify);
  200. if(bip_verify(nfc, mfc_data, data_loaded)) {
  201. return CARD_TYPE_BIP;
  202. } else if(metromoney_verify(nfc, mfc_data, data_loaded)) {
  203. return CARD_TYPE_METROMONEY;
  204. } else if(smartrider_verify(nfc, mfc_data, data_loaded)) {
  205. return CARD_TYPE_SMARTRIDER;
  206. } else if(troika_verify(nfc, mfc_data, data_loaded)) {
  207. return CARD_TYPE_TROIKA;
  208. } else if(charliecard_verify(nfc, mfc_data, data_loaded)) {
  209. return CARD_TYPE_CHARLIECARD;
  210. } else {
  211. FURI_LOG_I(TAG, "its unknown");
  212. return CARD_TYPE_UNKNOWN;
  213. }
  214. }