Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2015-06-03 12:45:49

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Understanding of configuration register of a Q5 tag

ne4rab it seems that only you work most with the Q5 would you pls have a look to see my result is right.

Thanks

Last edited by ntk (2015-06-09 22:42:36)

Offline

#2 2015-06-03 14:09:57

ntk
Contributor
Registered: 2015-05-24
Posts: 701

Re: Understanding of configuration register of a Q5 tag

for practical work, if I take the example we had recently on T55x7

Data bitrate = RF/32
Modulation = Direct
Maxblk = 4

the configuration block on G5 will be
bit1 to bit12 master = '00000000000'
bit13 page select = 0
bit 14 fast write = 0
bit 15 to bit 20 data bit rate RF/(2n+2) with n0 to n5???!!! our case is RF/32 so would be  "001111"
bit 21 AOR, I have no idea so I set = 0,
bit 22 use password, none so = 0
bit23 to 24 PSK carrier freq would be rf/2 = '00'
bit25 inverse data output
bit 26 to 28 modulation type, if for direct modulation so set to '111'
bit 29 to 31 if we have 4 data blocks to send, then I set them to '100'
bi32 Sequence terminator ST, I knew from previous experience this bit has some importance when bit 25 is set to 1, but what logic tell me to set this bit to 0 or 1? I set this to 0

I would say for the example nz/32, 4 blocks datas my configuration block would be
01100000000 0 0 001111 0 0 00 0 111 100 0
and that is in hex

3000F078

or
00000000000 0 0 001111 0 0 00 0 111 100 0
and in hex
0000F078

I am till not sure about the first 4 bits. what is the effect when the test bits =6 are set?

Last edited by ntk (2015-06-09 22:37:11)

Offline

Board footer

Powered by FluxBB