subghz_protocol_came_atomo.c 9.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264
  1. #include "subghz_protocol_came_atomo.h"
  2. #include "subghz_protocol_common.h"
  3. #include <lib/toolbox/manchester-decoder.h>
  4. #include "../subghz_keystore.h"
  5. #define SUBGHZ_NO_CAME_ATOMO_RAINBOW_TABLE 0xFFFFFFFFFFFFFFFF
  6. struct SubGhzProtocolCameAtomo {
  7. SubGhzProtocolCommon common;
  8. ManchesterState manchester_saved_state;
  9. const char* rainbow_table_file_name;
  10. };
  11. typedef enum {
  12. CameAtomoDecoderStepReset = 0,
  13. CameAtomoDecoderStepDecoderData,
  14. } CameAtomoDecoderStep;
  15. SubGhzProtocolCameAtomo* subghz_protocol_came_atomo_alloc() {
  16. SubGhzProtocolCameAtomo* instance = furi_alloc(sizeof(SubGhzProtocolCameAtomo));
  17. instance->common.name = "CAME Atomo";
  18. instance->common.code_min_count_bit_for_found = 62;
  19. instance->common.te_short = 600;
  20. instance->common.te_long = 1200;
  21. instance->common.te_delta = 250;
  22. instance->common.type_protocol = SubGhzProtocolCommonTypeStatic;
  23. instance->common.to_string = (SubGhzProtocolCommonToStr)subghz_protocol_came_atomo_to_str;
  24. instance->common.to_load_protocol =
  25. (SubGhzProtocolCommonLoadFromRAW)subghz_decoder_came_atomo_to_load_protocol;
  26. return instance;
  27. }
  28. void subghz_protocol_came_atomo_free(SubGhzProtocolCameAtomo* instance) {
  29. furi_assert(instance);
  30. free(instance);
  31. }
  32. void subghz_protocol_came_atomo_name_file(SubGhzProtocolCameAtomo* instance, const char* name) {
  33. instance->rainbow_table_file_name = name;
  34. printf("Loading CAME Atomo rainbow table %s\r\n", name);
  35. }
  36. /** Read bytes from rainbow table
  37. *
  38. * @param instance - SubGhzProtocolCameAtomo* instance
  39. * @param number_atomo_magic_xor
  40. * @return atomo_magic_xor
  41. */
  42. uint64_t subghz_came_atomo_get_atomo_magic_xor_in_file(
  43. SubGhzProtocolCameAtomo* instance,
  44. uint8_t number_atomo_magic_xor) {
  45. if(!strcmp(instance->rainbow_table_file_name, "")) return SUBGHZ_NO_CAME_ATOMO_RAINBOW_TABLE;
  46. uint8_t buffer[sizeof(uint64_t)] = {0};
  47. uint32_t address = number_atomo_magic_xor * sizeof(uint64_t);
  48. uint64_t atomo_magic_xor = 0;
  49. if(subghz_keystore_raw_get_data(
  50. instance->rainbow_table_file_name, address, buffer, sizeof(uint64_t))) {
  51. for(size_t i = 0; i < sizeof(uint64_t); i++) {
  52. atomo_magic_xor = (atomo_magic_xor << 8) | buffer[i];
  53. }
  54. } else {
  55. atomo_magic_xor = SUBGHZ_NO_CAME_ATOMO_RAINBOW_TABLE;
  56. }
  57. return atomo_magic_xor;
  58. }
  59. /** Analysis of received data
  60. *
  61. * @param instance SubGhzProtocolCameAtomo instance
  62. */
  63. void subghz_protocol_came_atomo_remote_controller(SubGhzProtocolCameAtomo* instance) {
  64. /*
  65. * 0x1fafef3ed0f7d9ef
  66. * 0x185fcc1531ee86e7
  67. * 0x184fa96912c567ff
  68. * 0x187f8a42f3dc38f7
  69. * 0x186f63915492a5cd
  70. * 0x181f40bab58bfac5
  71. * 0x180f25c696a01bdd
  72. * 0x183f06ed77b944d5
  73. * 0x182ef661d83d21a9
  74. * 0x18ded54a39247ea1
  75. * 0x18ceb0361a0f9fb9
  76. * 0x18fe931dfb16c0b1
  77. * 0x18ee7ace5c585d8b
  78. * ........
  79. * transmission consists of 99 parcels with increasing counter while holding down the button
  80. * with each new press, the counter in the encrypted part increases
  81. *
  82. * 0x1FAFF13ED0F7D9EF
  83. * 0x1FAFF11ED0F7D9EF
  84. * 0x1FAFF10ED0F7D9EF
  85. * 0x1FAFF0FED0F7D9EF
  86. * 0x1FAFF0EED0F7D9EF
  87. * 0x1FAFF0DED0F7D9EF
  88. * 0x1FAFF0CED0F7D9EF
  89. * 0x1FAFF0BED0F7D9EF
  90. * 0x1FAFF0AED0F7D9EF
  91. *
  92. * where 0x1FAF - parcel counter, 0хF0A - button press counter,
  93. * 0xED0F7D9E - serial number, 0хF - key
  94. * 0x1FAF parcel counter - 1 in the parcel queue ^ 0x185F = 0x07F0
  95. * 0x185f ^ 0x185F = 0x0000
  96. * 0x184f ^ 0x185F = 0x0010
  97. * 0x187f ^ 0x185F = 0x0020
  98. * .....
  99. * 0x182e ^ 0x185F = 0x0071
  100. * 0x18de ^ 0x185F = 0x0081
  101. * .....
  102. * 0x1e43 ^ 0x185F = 0x061C
  103. * where the last nibble is incremented every 8 samples
  104. *
  105. * Decode
  106. *
  107. * 0x1cf6931dfb16c0b1 => 0x1cf6
  108. * 0x1cf6 ^ 0x185F = 0x04A9
  109. * 0x04A9 => 0x04A = 74 (dec)
  110. * 74+1 % 32(atomo_magic_xor) = 11
  111. * GET atomo_magic_xor[11] = 0xXXXXXXXXXXXXXXXX
  112. * 0x931dfb16c0b1 ^ 0xXXXXXXXXXXXXXXXX = 0xEF3ED0F7D9EF
  113. * 0xEF3 ED0F7D9E F => 0xEF3 - CNT, 0xED0F7D9E - SN, 0xF - key
  114. *
  115. * */
  116. uint16_t parcel_counter = instance->common.code_last_found >> 48;
  117. parcel_counter = parcel_counter ^ 0x185F;
  118. parcel_counter >>= 4;
  119. uint8_t ind = (parcel_counter + 1) % 32;
  120. uint64_t temp_data = instance->common.code_last_found & 0x0000FFFFFFFFFFFF;
  121. uint64_t atomo_magic_xor = subghz_came_atomo_get_atomo_magic_xor_in_file(instance, ind);
  122. if(atomo_magic_xor != SUBGHZ_NO_CAME_ATOMO_RAINBOW_TABLE) {
  123. temp_data = temp_data ^ atomo_magic_xor;
  124. instance->common.cnt = temp_data >> 36;
  125. instance->common.serial = (temp_data >> 4) & 0x000FFFFFFFF;
  126. instance->common.btn = temp_data & 0xF;
  127. } else {
  128. instance->common.cnt = 0;
  129. instance->common.serial = 0;
  130. instance->common.btn = 0;
  131. }
  132. }
  133. void subghz_protocol_came_atomo_reset(SubGhzProtocolCameAtomo* instance) {
  134. instance->common.parser_step = CameAtomoDecoderStepReset;
  135. manchester_advance(
  136. instance->manchester_saved_state,
  137. ManchesterEventReset,
  138. &instance->manchester_saved_state,
  139. NULL);
  140. }
  141. void subghz_protocol_came_atomo_parse(
  142. SubGhzProtocolCameAtomo* instance,
  143. bool level,
  144. uint32_t duration) {
  145. ManchesterEvent event = ManchesterEventReset;
  146. switch(instance->common.parser_step) {
  147. case CameAtomoDecoderStepReset:
  148. if((!level) && (DURATION_DIFF(duration, instance->common.te_long * 65) <
  149. instance->common.te_delta * 20)) {
  150. //Found header CAME
  151. instance->common.parser_step = CameAtomoDecoderStepDecoderData;
  152. instance->common.code_found = 0;
  153. instance->common.code_count_bit = 1;
  154. manchester_advance(
  155. instance->manchester_saved_state,
  156. ManchesterEventReset,
  157. &instance->manchester_saved_state,
  158. NULL);
  159. manchester_advance(
  160. instance->manchester_saved_state,
  161. ManchesterEventShortLow,
  162. &instance->manchester_saved_state,
  163. NULL);
  164. } else {
  165. instance->common.parser_step = CameAtomoDecoderStepReset;
  166. }
  167. break;
  168. case CameAtomoDecoderStepDecoderData:
  169. if(!level) {
  170. if(DURATION_DIFF(duration, instance->common.te_short) < instance->common.te_delta) {
  171. event = ManchesterEventShortLow;
  172. } else if(DURATION_DIFF(duration, instance->common.te_long) < instance->common.te_delta) {
  173. event = ManchesterEventLongLow;
  174. } else if(duration >= (instance->common.te_long * 2 + instance->common.te_delta)) {
  175. if(instance->common.code_count_bit ==
  176. instance->common.code_min_count_bit_for_found) {
  177. instance->common.code_last_found = instance->common.code_found;
  178. instance->common.code_last_count_bit = instance->common.code_count_bit;
  179. if(instance->common.callback)
  180. instance->common.callback(
  181. (SubGhzProtocolCommon*)instance, instance->common.context);
  182. }
  183. instance->common.code_found = 0;
  184. instance->common.code_count_bit = 1;
  185. manchester_advance(
  186. instance->manchester_saved_state,
  187. ManchesterEventReset,
  188. &instance->manchester_saved_state,
  189. NULL);
  190. manchester_advance(
  191. instance->manchester_saved_state,
  192. ManchesterEventShortLow,
  193. &instance->manchester_saved_state,
  194. NULL);
  195. } else {
  196. instance->common.parser_step = CameAtomoDecoderStepReset;
  197. }
  198. } else {
  199. if(DURATION_DIFF(duration, instance->common.te_short) < instance->common.te_delta) {
  200. event = ManchesterEventShortHigh;
  201. } else if(DURATION_DIFF(duration, instance->common.te_long) < instance->common.te_delta) {
  202. event = ManchesterEventLongHigh;
  203. } else {
  204. instance->common.parser_step = CameAtomoDecoderStepReset;
  205. }
  206. }
  207. if(event != ManchesterEventReset) {
  208. bool data;
  209. bool data_ok = manchester_advance(
  210. instance->manchester_saved_state, event, &instance->manchester_saved_state, &data);
  211. if(data_ok) {
  212. instance->common.code_found = (instance->common.code_found << 1) | !data;
  213. instance->common.code_count_bit++;
  214. }
  215. }
  216. break;
  217. }
  218. }
  219. void subghz_protocol_came_atomo_to_str(SubGhzProtocolCameAtomo* instance, string_t output) {
  220. subghz_protocol_came_atomo_remote_controller(instance);
  221. uint32_t code_found_hi = instance->common.code_last_found >> 32;
  222. uint32_t code_found_lo = instance->common.code_last_found & 0x00000000ffffffff;
  223. string_cat_printf(
  224. output,
  225. "%s %db\r\n"
  226. "Key:0x%lX%08lX\r\n"
  227. "Sn:0x%08lX Btn:0x%01X\r\n"
  228. "Cnt:0x%03X\r\n",
  229. instance->common.name,
  230. instance->common.code_last_count_bit,
  231. code_found_hi,
  232. code_found_lo,
  233. instance->common.serial,
  234. instance->common.btn,
  235. instance->common.cnt);
  236. }
  237. void subghz_decoder_came_atomo_to_load_protocol(SubGhzProtocolCameAtomo* instance, void* context) {
  238. furi_assert(context);
  239. furi_assert(instance);
  240. SubGhzProtocolCommonLoad* data = context;
  241. instance->common.code_last_found = data->code_found;
  242. instance->common.code_last_count_bit = data->code_count_bit;
  243. subghz_protocol_came_atomo_remote_controller(instance);
  244. }