Proxmark3 community

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

playing with a new prototype

I'm playing with a new prototype of pm3. 

Tests with latest source for Official PM3 from Github.  its the commit number (809) after v.2.2.0 that tells that information.

Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2018-01-29 04:34:19
os: master/v2.2.0-809-g2ef3a5e-dirty-suspect 2018-02-09 13:34:11
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2017/10/27 at 08:30:59

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 199412 bytes (38%). Free: 324876 bytes (62%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

Antenna 1 (LF/HF)

Measuring antenna characteristics, please wait.........
# LF antenna: 58.71 V @   125.00 kHz
# LF antenna: 56.51 V @   134.00 kHz
# LF optimal: 74.66 V @   129.03 kHz
# HF antenna: 36.26 V @    13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

antenna 2 (HF)

Measuring antenna characteristics, please wait.........
# LF antenna:  0.14 V @   125.00 kHz
# LF antenna:  0.14 V @   134.00 kHz
# LF optimal:  0.00 V @ 12000.00 kHz
# HF antenna: 36.26 V @    13.56 MHz
# Your LF antenna is unusable.

with this antenna an old 14b SRi tag that I couldn't read with rdv2.0 came to life.

proxmark3> hf 14b info

14443-3b ST tag found:
   UID: d0 02 19 54 20 c4 8e a3
   MFG: 02, ST Microelectronics SA France
  Chip: 06, SRI512
Chip Write Protection Bits:
   raw: 1111110001100001
    00: not locked
    01: locked
    02: locked
    03: locked
    04: locked
    05: not locked
    06: not locked
    07: locked
    08: locked
    09: locked
    10: not locked
    11: not locked
    12: not locked
    13: not locked
    14: not locked
    15: not locked


Also a CALYPSO tag came alive !!
proxmark3> hf search

14443-3b tag found:
           UID: 26 18 ad c4
      App Data: 00 00 00 00
      Protocol: 00 71 81
      Bit Rate: 106 kbit/s only PICC <-> PCD
Max Frame Size: 128
 Protocol Type: Protocol is compliant with ISO/IEC 14443-4
Frame Wait Int: 8
 App Data Code: Application is Proprietary
 Frame Options: NAD is not supported
 Frame Options: CID is supported
Max Buf Length: 0 (MBLI) not supported

Valid ISO14443B Tag Found - Quiting Search


ISO15693 tags shows up:
proxmark3> hf 15 cmd sysinfo u
0F E8 81 C0 0A 66 24 16 E0 02 00 33 03 02
UID = E01624660AC081E8
EM-Marin SA (Skidata); EM4233 [IC id = 09] 23,5pF CustomerID-102
DSFID supported, set to 02
AFI supported, set to 000
Tag provides info on memory layout (vendor dependent)
 4 (or 3) bytes/page x 52 pages
IC reference given: 02

proxmark3>

However the HF voltages are wrong to start with.  Together with the 3% error built in the readings algo, makes all voltages show too low here.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: playing with a new prototype

Running on latest iceman fork from github,

Proxmark3 RFID instrument

 [ ARM ]
 bootrom: /-suspect 2018-01-29 04:34:19
      os: iceman/master/ice_v3.1.0-536-gff598db8-dirty-unclean 2018-02-09 11:58:01
 [ FPGA ]
 LF image built for 2s30vq100 on 2017/10/25 at 19:50:50
 HF image built for 2s30vq100 on 2017/11/10 at 19:24:16

 [ Hardware ]
  --= uC: AT91SAM7S512 Rev B
  --= Embedded Processor: ARM7TDMI
  --= Nonvolatile Program Memory Size: 512K bytes, Used: 237094 bytes (45%) Free: 287194 bytes (55%)
  --= Second Nonvolatile Program Memory Size: None
  --= Internal SRAM Size: 64K bytes
  --= Architecture Identifier: AT91SAM7Sxx Series
  --= Nonvolatile Program Memory Type: Embedded Flash Memory

The corrections to measuring has been applied.

Antenna 1 (LF/HF)

[+] measuring antenna characteristics, please wait......
[+] LF antenna: 60.47 V - 125.00 kHz
[+] LF antenna: 58.21 V - 134.00 kHz
[+] LF optimal: 77.04 V - 129.03 kHz
[+] LF antenna is OK

Antenna 2 (HF)

[+] measuring antenna characteristics, please wait......
[!] LF antenna is UNUSABLE

[+] HF antenna: 36.64 V - 13.56 MHz
[+] HF antenna is OK

[-] Not showing LF tuning graph since all values is zero.

[edit]  wrong,  its ghost values on ADC7 for the prototype I'm testing.  So its 36V on ADC5 showing.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: playing with a new prototype

sadly, iceman fork has issues with LF,  HF14b, HF 15,  in order to be a good testing ground...

blue-bird

Contributor

Registered: 2018-02-07

Posts: 4

Re: playing with a new prototype

bench！ I am looking forward to very much！

Dmanufacturer

Contributor

Registered: 2017-08-15

Posts: 42

Re: playing with a new prototype

+1 looking forward to this, let me know if I can help.

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: playing with a new prototype

you will,  there is a kickstarter comming up.

So far in my testing,  the problem where I got stuck is the programming of a 2mb flash mem via SPI..  I just can't get the memory to answer.

0xFFFF

Administrator

From: Vic - Australia

Registered: 2011-05-31

Posts: 632

Re: playing with a new prototype

LINK!

kevin2008

Contributor

Registered: 2017-10-01

Posts: 12

Re: playing with a new prototype

please add more Contribution de 119 S$ . thank you

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: playing with a new prototype

We are glad that you are interested,  but the early bird is gone. If you missed it,  you missed it.