New function: ST Micro SRIX4K tag reading

jonor · 2009-11-22 20:27:13

I developed a simple patch for add the support to SRIX4K memory tags. Thank you edo512 for your work on SRI512.

This is my patch. I hope someone can add it in repository.

Index: include/usb_cmd.h
===================================================================
--- include/usb_cmd.h   (revision 258)
+++ include/usb_cmd.h   (working copy)
@@ -60,6 +60,7 @@
 #define CMD_ACQUIRE_RAW_ADC_SAMPLES_ISO_14443                                  0x0301
 #define CMD_ACQUIRE_RAW_ADC_SAMPLES_ISO_14443_SIM                      0x0302
 #define CMD_READ_SRI512_TAG                                                                                                            0x0303
+#define CMD_READ_SRIX4K_TAG                                                                                                            0x0304
 #define CMD_READER_ISO_15693                                                                                                   0x0310
 #define CMD_SIMTAG_ISO_15693                                                                                                   0x0311
 #define CMD_SIMULATE_TAG_HF_LISTEN                                                                             0x0380
Index: winsrc/command.cpp
===================================================================
--- winsrc/command.cpp  (revision 258)
+++ winsrc/command.cpp  (working copy)
@@ -108,6 +108,18 @@
        SendCommand(&c, FALSE);
 }

+/* New command to read the contents of a SRIX4K tag
+ * SRIX4K tags are ISO14443-B modulated memory tags,
+ * this command just dumps the contents of the memory/
+ */
+static void CmdSrix4kread(char *str)
+{
+        UsbCommand c;
+        c.cmd = CMD_READ_SRIX4K_TAG;
+        c.ext1 = atoi(str);
+        SendCommand(&c, FALSE);
+}
+
 // ## New command
 static void CmdHi14areader(char *str)
 {
@@ -2935,6 +2947,7 @@
        {"setlfdivisor",        CmdSetDivisor,                  0, "<19 - 255> -- Drive LF antenna at 12Mhz/(divisor+1)"},
        {"setmux",              CmdSetMux,                      0, "<loraw|hiraw|lopkd|hipkd> -- Set the ADC mux to a specific value"},
        {"sri512read",          CmdSri512read,                  0, "<int> -- Read contents of a SRI512 tag"},
+       {"srix4kread",          CmdSrix4kread,                  0, "<int> -- Read contents of a SRIX4K tag"},
        {"tidemod",                             CmdTIDemod,                                     1, "Demodulate raw bits for TI-type LF tag"},
        {"tiread",                              CmdTIRead,                                      0, "Read and decode a TI 134 kHz tag"},
        {"tiwrite",                             CmdTIWrite,                                     0, "Write new data to a r/w TI 134 kHz tag"},
Index: armsrc/apps.h
===================================================================
--- armsrc/apps.h       (revision 258)
+++ armsrc/apps.h       (working copy)
@@ -81,6 +81,8 @@
 void SimulateIso14443Tag(void);
 void AcquireRawAdcSamplesIso14443(DWORD parameter);
 void ReadSRI512Iso14443(DWORD parameter);
+void ReadSRIX4KIso14443(DWORD parameter);
+void ReadSTMemoryIso14443(DWORD parameter,DWORD dwLast);
 void SnoopIso14443(void);

 /// iso14443a.h
Index: armsrc/appmain.c
===================================================================
--- armsrc/appmain.c    (revision 258)
+++ armsrc/appmain.c    (working copy)
@@ -582,6 +582,9 @@
                case CMD_READ_SRI512_TAG:
                        ReadSRI512Iso14443(c->ext1);
                        break;
+               case CMD_READ_SRIX4K_TAG:
+                       ReadSRIX4KIso14443(c->ext1);
+                       break;
 #endif

 #ifdef WITH_ISO14443a
Index: armsrc/iso14443.c
===================================================================
--- armsrc/iso14443.c   (revision 258)
+++ armsrc/iso14443.c   (working copy)
@@ -873,6 +873,15 @@
 //-----------------------------------------------------------------------------
 void ReadSRI512Iso14443(DWORD parameter)
 {
+     ReadSTMemoryIso14443(parameter,0x0F);
+}
+void ReadSRIX4KIso14443(DWORD parameter)
+{
+     ReadSTMemoryIso14443(parameter,0x7F);
+}
+
+void ReadSTMemoryIso14443(DWORD parameter,DWORD dwLast)
+{
     BYTE i = 0x00;

     // Make sure that we start from off, since the tags are stateful;
@@ -961,8 +970,9 @@
     DbpString("Tag memory dump, block 0 to 15");
     cmd1[0] = 0x08;
     i = 0x00;
+    dwLast++;
     for (;;) {
-           if (i == 0x10) {
+           if (i == dwLast) {
                    DbpString("System area block (0xff):");
                    i = 0xff;
            }
@@ -995,6 +1005,7 @@
 }


+
 //=============================================================================
 // Finally, the `sniffer' combines elements from both the reader and
 // simulated tag, to show both sides of the conversation.

edo512 · 2009-11-23 10:36:04

Done, just added to the code repository, many thanks to you! If you have spare SIRX4K tags, I would be interested by the way!

Please let us know if the commit works for you,

Ed

jonor · 2009-11-23 19:40:57

edo512 wrote:

I would be interested by the way!

Sorry, but my english is not very good, I don't understand very well this phrase

edo512 wrote:

Please let us know if the commit works for you,

For me works without problems.

edo512 · 2009-11-23 21:46:43

jonor wrote:

edo512 wrote:
I would be interested by the way!
Sorry, but my english is not very good, I don't understand very well this phrase

I am not a native speaker either. I just meant that if you can get hold of enough samples, I would be interested if you could send me one or two!

Ed

jonor · 2009-11-23 22:26:50

edo512 wrote:

I am not a native speaker either.

No problems, the important is understand!!!

edo512 wrote:

I just meant that if you can get hold of enough samples, I would be interested if you could send me one or two!

I have only one SRIX4K, I bought it some months ago from Digikey for testing

MindBender · 2010-05-03 18:47:18

edo512 wrote:

If you have spare SIRX4K tags, I would be interested by the way!

I think I can dig one up for you, if it's still an issue; A used one, with the non-incrementable down counters depleted to 0, that is.

Can these tags already be simulated?

gaucho · 2010-06-15 10:40:07

hi jonor,
i'm new on this forum.
i'm interested in SRIX4K argument.
if i well understood these RF-ID has password protection to read/write data. is it correct?
Could i read/write these tags with your code?

What about the "anticlone function" and "anti-tearing protection" and "write protect feature" mentioned on the datasheet?
You bypassed all these protections?

MindBender · 2010-06-15 11:59:54

gaucho wrote:

hi jonor,
i'm new on this forum.
i'm interested in SRIX4K argument.
if i well understood these RF-ID has password protection to read/write data. is it correct?
Could i read/write these tags with your code?
What about the "anticlone function" and "anti-tearing protection" and "write protect feature" mentioned on the datasheet?
You bypassed all these protections?

I'm afraid this topic is dead. Development on the whole project dropped to second-to-none, quite typical for Open Source development; As soon as the project fixes the original problem the founder(s) tried to solve, further development drops, sacrificing usability for others, defeating the purpose of Open Source. It's a pitty, but understandable. Though I do think it's a bit of bad taste to continue selling over-stock boards without mentioning the project has been abandonned.

Anyway, to answer your questions:
Anti-clone function is not implemented. It uses proprietary commands only described in a separate manual which is supplied under a very strict NDA. If someone here has this manual, he's not allowed to discus the contents, let alone implement simulation, without violating the NDA he has signed.
I don't know about anti-tearing but is is probably not implemented.
Write protection, OPT bits and counters aren't implemented for sure. What this implementation basically does is provide 4096byte of R/W RF-ID memory. None of the special functions of any addresses are implemented.

gaucho wrote:

Immagination is more important than knowledge.

So you prefer astrology above astronomy?

gaucho · 2010-06-15 13:58:09

u say "the project is abandonded" but i see theese posts are not old.
u say "bad taste to continue selling over-stock boards" but the board works and there is documentation to study it.
i still did't bought the board but i don0t understand your sentence.
Are you planning to close the forum?
Do you know any other board with these functionalities? can you suggets it to me?
Thank you.
My sign is copied by Einstain, and i believe that without imagination Jonathan Westhues could'nt develop its board.

MindBender · 2010-06-16 12:41:22

gaucho wrote:

u say "the project is abandoned" but I see these posts are not old.

They are. There are only four active topic on this forum and that's including this one.

u say "bad taste to continue selling over-stock boards" but the board works and there is documentation to study it.

The board 'works', but barely. More than half of the times I have tried it, it doesn't work at all; The graphic window isn't opened, nothing is displayed, or the programs just hangs without apparent reason. And I can live with all of these short comings, but the most recent changes in the repository date from end February, beginning of March.

i still did't bought the board but i don0t understand your sentence.
Are you planning to close the forum?

That's not up to me, and closing would suit no purpose at all. I'm just making an observation: It's awfully quiet here.

Do you know any other board with these functionalities? can you suggets it to me?

There are some alternatives, but I cannot cough them up by heart. But none of them are a good and versatile as this one. It's jus a pity that development has stalled.
Again; I understand perfectly. I'm running a hobby software project myself. After some time, especially if things start working and solve the original problem, motivation to improve it drops. I fully understand. But when you're selling rather expensive boards, buyers will have expectations and those are not met currently.

XEROEFFECT · 2010-06-16 12:49:33

Come on everybody... let's dance. There's plenty of room in here.

minhtran · 2013-02-26 05:12:08

Dear all,
I using the NXP CLRC 632 interface with PIC24 to build the HF reader. Now, I'm working with the SRI512 and SRI4k, but I can't configure CLRC 632 to access to this card. Type A and 15693 is work fine.
Anyone help me?
Thanks and best regards, MT

gaucho · 2013-03-24 12:29:29

Hi guys, sorry I abandoned this discussion cause i bought the stronglink SL500F-USB and with it i can read and write and backup the srix4k. Hope it is usefull. Best Regards.

asper · 2013-03-24 12:50:09

I made this small software to read/write SRIX (auto-identify which kind of SRIX, 4K or 512) using SL500F (.dlls included):

as you can see it is also able to decode and write the FF block (security block).

This one was hard to make because source code is really bad-explained in the "official" examples...

Last edited by asper (2013-03-24 12:55:05)

gaucho · 2013-03-24 20:15:35

Hi Aper, I made it better! my app can scan for tags, then save a backup of the tag (you can do it several times with many tags), then, clicking the button "Start Survey", if you put the tag near the reader, it identifys your tag id and write on the tag the saved backup relative to that tag.
I save the complete backup, but i only restore 4 bytes that i found contains my needed data.
Sorry comunity, this is offtopic since we are talking about SL500F-USB.

This is the source code in vb.net http://www.sendspace.com/file/zzqjbv
the settings file allows you to change the port number and some other settings.

asper · 2013-03-24 23:54:07

I think your software is used for recharge something (like pre-paid tags) so I don't think I will need it (it also restore 4 blocks, not bytes), anyway thanks for the sources, they are always appreciated

Last edited by asper (2013-03-25 00:01:32)

gaucho · 2013-03-25 20:05:52

yes aper, blocks not bytes.. i wrote it about september 2010..

Proxmark3 community

Announcement

#1 2009-11-22 20:27:13

New function: ST Micro SRIX4K tag reading

#2 2009-11-23 10:36:04

Re: New function: ST Micro SRIX4K tag reading

#3 2009-11-23 19:40:57

Re: New function: ST Micro SRIX4K tag reading

#4 2009-11-23 21:46:43

Re: New function: ST Micro SRIX4K tag reading

#5 2009-11-23 22:26:50

Re: New function: ST Micro SRIX4K tag reading

#6 2010-05-03 18:47:18

Re: New function: ST Micro SRIX4K tag reading

#7 2010-06-15 10:40:07

Re: New function: ST Micro SRIX4K tag reading

#8 2010-06-15 11:59:54

Re: New function: ST Micro SRIX4K tag reading

#9 2010-06-15 13:58:09

Re: New function: ST Micro SRIX4K tag reading

#10 2010-06-16 12:41:22

Re: New function: ST Micro SRIX4K tag reading

#11 2010-06-16 12:49:33

Re: New function: ST Micro SRIX4K tag reading

#12 2013-02-26 05:12:08

Re: New function: ST Micro SRIX4K tag reading

#13 2013-03-24 12:29:29

Re: New function: ST Micro SRIX4K tag reading

#14 2013-03-24 12:50:09

Re: New function: ST Micro SRIX4K tag reading

#15 2013-03-24 20:15:35

Re: New function: ST Micro SRIX4K tag reading

#16 2013-03-24 23:54:07

Re: New function: ST Micro SRIX4K tag reading

#17 2013-03-25 20:05:52

Re: New function: ST Micro SRIX4K tag reading

Board footer