github/RRG-Proxmark3
1
0
Fork 0
mirror of https://github.com/RfidResearchGroup/proxmark3.git synced 2025-08-19 21:03:48 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

fix: hf mfu pwdgen - xyz

Browse source
This commit is contained in:
iceman1001 2020-03-13 12:09:11 +01:00
commit 08f40ef310
1 changed files with 39 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

60
common/generator.c
View file

@ -34,7 +34,7 @@
// XYZ 3D printing // XYZ 3D printing
// Vinglock // Vinglock
//------------------------------------ //------------------------------------
static void transform_D(uint8_t *ru) { void transform_D(uint8_t* ru) {
const uint32_t c_D[] = { const uint32_t c_D[] = {
0x6D835AFC, 0x7D15CD97, 0x0942B409, 0x32F9C923, 0xA811FB02, 0x64F121E8, 0x6D835AFC, 0x7D15CD97, 0x0942B409, 0x32F9C923, 0xA811FB02, 0x64F121E8,
@ -44,32 +44,28 @@ static void transform_D(uint8_t *ru) {
0x5728B869, 0x30726D5A 0x5728B869, 0x30726D5A
}; };
//Transform //Transform
uint8_t i; uint8_t i;
uint8_t p = 0; uint8_t p = 0;
uint32_t v1 = ((ru[3] << 24) | (ru[2] << 16) | (ru[1] << 8) | ru[0]) + c_D[p++]; uint32_t v1 = ((ru[3] << 24) | (ru[2] << 16) | (ru[1] << 8) | ru[0]) + c_D[p++];
uint32_t v2 = ((ru[7] << 24) | (ru[6] << 16) | (ru[5] << 8) | ru[4]) + c_D[p++]; uint32_t v2 = ((ru[7] << 24) | (ru[6] << 16) | (ru[5] << 8) | ru[4]) + c_D[p++];
for (i = 0; i < 12; i += 2)
{
uint32_t t1 = PM3_ROTL(v1 ^ v2, v2 & 0x1F) + c_D[p++];
uint32_t t2 = PM3_ROTL(v2 ^ t1, t1 & 0x1F) + c_D[p++];
v1 = PM3_ROTL(t1 ^ t2, t2 & 0x1F) + c_D[p++];
v2 = PM3_ROTL(t2 ^ v1, v1 & 0x1F) + c_D[p++];
}
for (i = 0; i < 12; i += 2) { //Re-use ru
uint32_t xor1 = v1 ^ v2; ru[0] = v1 & 0xFF;
uint32_t t1 = ROTL(xor1, v2 & 0x1F) + c_D[p++]; ru[1] = (v1 >> 8) & 0xFF;
uint32_t xor2 = v2 ^ t1; ru[2] = (v1 >> 16) & 0xFF;
uint32_t t2 = ROTL(xor2, t1 & 0x1F) + c_D[p++]; ru[3] = (v1 >> 24) & 0xFF;
uint32_t xor3 = t1 ^ t2; ru[4] = v2 & 0xFF;
uint32_t xor4 = t2 ^ v1; ru[5] = (v2 >> 8) & 0xFF;
v1 = ROTL(xor3, t2 & 0x1F) + c_D[p++]; ru[6] = (v2 >> 16) & 0xFF;
v2 = ROTL(xor4, v1 & 0x1F) + c_D[p++]; ru[7] = (v2 >> 24) & 0xFF;
}
//Re-use ru
ru[0] = v1 & 0xFF;
ru[1] = (v1 >> 8) & 0xFF;
ru[2] = (v1 >> 16) & 0xFF;
ru[3] = (v1 >> 24) & 0xFF;
ru[4] = v2 & 0xFF;
ru[5] = (v2 >> 8) & 0xFF;
ru[6] = (v2 >> 16) & 0xFF;
ru[7] = (v2 >> 24) & 0xFF;
} }
// Transport system (IT) pwd generation algo nickname A. // Transport system (IT) pwd generation algo nickname A.
@ -130,17 +126,23 @@ uint32_t ul_ev1_pwdgenC(uint8_t *uid) {
// XYZ 3d printing pwd generation algo nickname D. // XYZ 3d printing pwd generation algo nickname D.
uint32_t ul_ev1_pwdgenD(uint8_t *uid) { uint32_t ul_ev1_pwdgenD(uint8_t *uid) {
uint8_t i; uint8_t i;
uint8_t r = (uid[1] + uid[3] + uid[5]) & 7; // rotation offset // rotation offset
uint8_t ru[8] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }; // rotated UID uint8_t r = (uid[1] + uid[3] + uid[5]) & 7;
// rotated UID
uint8_t ru[8] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
for (i = 0; i < 7; i++) for (i = 0; i < 7; i++)
ru[(i + r) & 7] = uid[i]; ru[(i + r) & 7] = uid[i];
transform_D(ru); transform_D(ru);
// offset
r = (ru[0] + ru[2] + ru[4] + ru[6]) & 3;
// calc key // calc key
uint32_t pwd = 0; uint32_t pwd = 0;
r = (ru[0] + ru[2] + ru[4] + ru[6]) & 3; // offset
for (i = 0; i < 4; i++) for (i = 0; i < 4; i++)
pwd = ru[i + r] + (pwd << 8); pwd = ru[i + r] + (pwd << 8);