RfidResearchGroup / proxmark3

Iceman Fork - Proxmark3
http://www.icedev.se
GNU General Public License v3.0
3.63k stars 981 forks source link

Xerox tags can't be found via hf search, info command not working #2275

Closed JeroenSteen closed 5 months ago

JeroenSteen commented 5 months ago

Describe the bug In latest the original and compatible Xerox HFD1 tags can't be found via commands: hf search and hf xerox info. Also hf xerox reader -v gives [!] no tag found.

I'm sorry but I can't find what's different in v4.17511 (where scanning Xerox tags works smoother).

Desktop: OS: Windows 11

hw version:

[ Proxmark3 RFID instrument ]

 [ Client ]
  Iceman/master/v4.17768-272-gf13d5c1b3-dirty-suspect 2024-01-25 15:51:13 822fd738b
  compiled with............. MinGW-w64 13.2.0
  platform.................. Windows (64b) / x86_64
  Readline support.......... present
  QT GUI support............ present
  native BT support......... absent
  Python script support..... present
  Lua SWIG support.......... present
  Python SWIG support....... present

 [ Proxmark3 ]
  device.................... RDV4
  firmware.................. RDV4
  external flash............ present
  smartcard reader.......... present
  FPC USART for BT add-on... absent

 [ ARM ]
  bootrom: Iceman/master/v4.17511-suspect 2023-11-13 10:19:09 db54c4c2c
       os: Iceman/master/v4.17768-272-gf13d5c1b3-dirty-suspect 2024-01-25 15:53:13 822fd738b
  compiled with GCC 12.2.0

 [ FPGA ]
  fpga_pm3_lf.ncd image 2s30vq100 2024-01-24 17:04:26
  fpga_pm3_hf.ncd image 2s30vq100 2024-01-24 17:04:37
  fpga_pm3_felica.ncd image 2s30vq100 2024-01-24 17:04:58
  fpga_pm3_hf_15.ncd image 2s30vq100 2024-01-24 17:04:48

 [ Hardware ]
  --= uC: AT91SAM7S512 Rev A
  --= Embedded Processor: ARM7TDMI
  --= Internal SRAM size: 64K bytes
  --= Architecture identifier: AT91SAM7Sxx Series
  --= Embedded flash memory 512K bytes ( 69% used )

hw status:

[#] Memory
[#]   BigBuf_size............. 39796
[#]   Available memory........ 39796
[#] Tracing
[#]   tracing ................ 0
[#]   traceLen ............... 56
[#] Current FPGA image
[#]   mode.................... fpga_pm3_hf.ncd image 2s30vq100 2024-01-24 17:04:37
[#] Flash memory
[#]   Baudrate................ 24 MHz
[#]   Init.................... ok
[#]   Memory size............. 2 mbits / 256 kb
[#]   Unique ID (be).......... 0x39196F53175462D5
[#] Smart card module (ISO 7816)
[#]   version................. v3.10 ( Outdated )
[#] LF Sampling config
[#]   [q] divisor............. 95 ( 125.00 kHz )
[#]   [b] bits per sample..... 8
[#]   [d] decimation.......... 1
[#]   [a] averaging........... yes
[#]   [t] trigger threshold... 0
[#]   [s] samples to skip..... 0
[#]
[#] LF T55XX config
[#]            [r]               [a]   [b]   [c]   [d]   [e]   [f]   [g]
[#]            mode            |start|write|write|write| read|write|write
[#]                            | gap | gap |  0  |  1  | gap |  2  |  3
[#] ---------------------------+-----+-----+-----+-----+-----+-----+------
[#] fixed bit length (default) |  29 |  17 |  15 |  47 |  15 | N/A | N/A |
[#]     long leading reference |N/A | N/A | N/A | N/A | N/A | N/A | N/A |
[#]               leading zero |N/A | N/A | N/A | N/A | N/A | N/A | N/A |
[#]    1 of 4 coding reference |N/A | N/A | N/A | N/A | N/A | N/A | N/A |
[#]
[#] HF 14a config
[#]   [a] Anticol override.... std    ( follow standard )
[#]   [b] BCC override........ std    ( follow standard )
[#]   [2] CL2 override........ std    ( follow standard )
[#]   [3] CL3 override........ std    ( follow standard )
[#]   [r] RATS override....... std    ( follow standard )
[#] Transfer Speed
[#]   Sending packets to client...
[#]   Time elapsed................... 500ms
[#]   Bytes transferred.............. 264704
[#]   Transfer Speed PM3 -> Client... 529408 bytes/s
[#] Various
[#]   Max stack usage......... 5208 / 8480 bytes
[#]   Debug log level......... 1 ( error )
[#]   ToSendMax............... 8
[#]   ToSend BUFFERSIZE....... 2308
[#]   Slow clock.............. 31200 Hz
[#] Installed StandAlone Mode
[#]   LF HID26 standalone - aka SamyRun (Samy Kamkar)
[#] Flash memory dictionary loaded
[#]

data tune:

[=] ---------- Reminder ------------------------
[=] `hw tune` doesn't actively tune your antennas,
[=] it's only informative.
[=] Measuring antenna characteristics, please wait...
[-]  9
[=] ---------- LF Antenna ----------
[+] At 125.00 kHz .......... 75.01 V
[+] At 134.83 kHz .......... 34.30 V
[+] At 125.00 kHz optimal... 75.01 V
[+]
[+] Approx. Q factor measurement (*)
[+] Frequency bandwidth..... 12.6
[+] Peak voltage............ 13.1
[+] LF antenna ( ok )

[=] ---------- HF Antenna ----------
[+] 13.56 MHz............... 48.56 V
[+]
[+] Approx. Q factor measurement (*)
[+] peak voltage............ 8.5
[+] HF antenna ( ok )

(*) Q factor must be measured without tag on the antenna

[=] -------- LF tuning graph ---------
[+] Blue line  Divisor 88 / 134.83 kHz
[+] Red line   Divisor 95 / 125.00 kHz

Additional context Xerox differs maybe from the 14B protocol, in the comments I can read:

iceman1001 commented 5 months ago

Run the following

-- OLD working firmware
hf xerox info
hf 14b list
trace save -f xerox_working

-- swap to LATEST firmware
hf xerox info
hf 14b list
trace save -f xerox_fail

post the output and share those two trace files.

JeroenSteen commented 5 months ago

Here is the output of working and failing (with original used toner chip), with a zipped folder for the trace files. Traces of working and failing in one zipped file (since trace files are not allowed on Github): xerox_traces.zip

Output of Xerox working (v4.17511):

[=] downloading tracelog data from device
[+] Recorded activity (trace len = 1378 bytes)
[=] start = start of start frame end = end of frame. src = source of transfer
[=] ISO14443B - all times are in carrier periods (1/13.56MHz)

      Start |        End | Src | Data (! denotes parity error)                                           | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
          0 |       2048 | Rdr |0d  37  21  92  f2                                                       |  ok | ?
      32544 |      34592 | Rdr |5d  37  21  71  71                                                       |  ok | ?
      35824 |      36080 | Rdr |b1                                                                       |     | ?
      37216 |      37472 | Rdr |b1                                                                       |     | ?
      38608 |      38864 | Rdr |b1                                                                       |     | ?
      39888 |      40144 | Rdr |a1                                                                       |     | ?
      41168 |      41424 | Rdr |a3                                                                       |     | ?
      42560 |      42816 | Rdr |b5                                                                       |     | ?
      43840 |      44096 | Rdr |a1                                                                       |     | ?
      45120 |      45376 | Rdr |a3                                                                       |     | ?
      46400 |      46656 | Rdr |a5                                                                       |     | ?
      47808 |      48064 | Rdr |b7                                                                       |     | ?
      49200 |      49456 | Rdr |b1                                                                       |     | ?
      50608 |      50864 | Rdr |b1                                                                       |     | ?
      52000 |      52256 | Rdr |b1                                                                       |     | ?
      53280 |      53536 | Rdr |a1                                                                       |     | ?
      54560 |      54816 | Rdr |a3                                                                       |     | ?
      55840 |      56096 | Rdr |a5                                                                       |     | ?
      57248 |      57504 | Rdr |b7                                                                       |     | ?
      58528 |      58784 | Rdr |a1                                                                       |     | ?
      59808 |      60064 | Rdr |a3                                                                       |     | ?
      61200 |      61456 | Rdr |b5                                                                       |     | ?
      62608 |      62864 | Rdr |b1                                                                       |     | ?
      64016 |      64272 | Rdr |b1                                                                       |     | ?
      65232 |      65488 | Rdr |a1                                                                       |     | ?
      66512 |      66768 | Rdr |b3                                                                       |     | ?
      67792 |      68048 | Rdr |b1                                                                       |     | ?
      69072 |      69328 | Rdr |b1                                                                       |     | ?
      70352 |      70608 | Rdr |b1                                                                       |     | ?
      71632 |      71888 | Rdr |b1                                                                       |     | ?
      72912 |      73168 | Rdr |b1                                                                       |     | ?
      74192 |      74448 | Rdr |b1                                                                       |     | ?
      75472 |      75728 | Rdr |b1                                                                       |     | ?
      76752 |      77008 | Rdr |b1                                                                       |     | ?
      78032 |      78288 | Rdr |b1                                                                       |     | ?
      79312 |      79568 | Rdr |b1                                                                       |     | ?
      80592 |      80848 | Rdr |b1                                                                       |     | ?
      81872 |      82128 | Rdr |b1                                                                       |     | ?
      83152 |      83408 | Rdr |b1                                                                       |     | ?
      84432 |      84688 | Rdr |b1                                                                       |     | ?
      85712 |      85968 | Rdr |b1                                                                       |     | ?
      86992 |      87248 | Rdr |b1                                                                       |     | ?
      88272 |      88528 | Rdr |b1                                                                       |     | ?
      89552 |      89808 | Rdr |b1                                                                       |     | ?
      90832 |      91088 | Rdr |b1                                                                       |     | ?
          0 |       2048 | Rdr |0d  37  21  92  f2                                                       |  ok | ?
      32544 |      34592 | Rdr |5d  37  21  71  71                                                       |  ok | ?
      35824 |      36080 | Rdr |b1                                                                       |     | ?
      37216 |      37472 | Rdr |b1                                                                       |     | ?
      38608 |      38864 | Rdr |b1                                                                       |     | ?
      39888 |      40144 | Rdr |a1                                                                       |     | ?
      41168 |      41424 | Rdr |a3                                                                       |     | ?
      42576 |      42832 | Rdr |b5                                                                       |     | ?
      43856 |      44112 | Rdr |a1                                                                       |     | ?
      45136 |      45392 | Rdr |a3                                                                       |     | ?
      46416 |      46672 | Rdr |a5                                                                       |     | ?
      47824 |      48080 | Rdr |b7                                                                       |     | ?
      49216 |      49472 | Rdr |b1                                                                       |     | ?
      50608 |      50864 | Rdr |b1                                                                       |     | ?
      52000 |      52256 | Rdr |b1                                                                       |     | ?
      53280 |      53536 | Rdr |a1                                                                       |     | ?
      54560 |      54816 | Rdr |a3                                                                       |     | ?
      55840 |      56096 | Rdr |a5                                                                       |     | ?
      57232 |      57488 | Rdr |b7                                                                       |     | ?
      58512 |      58768 | Rdr |a1                                                                       |     | ?
      59792 |      60048 | Rdr |a3                                                                       |     | ?
      61200 |      61456 | Rdr |b5                                                                       |     | ?
      62608 |      62864 | Rdr |b1                                                                       |     | ?
      64000 |      64256 | Rdr |b1                                                                       |     | ?
      65280 |      65536 | Rdr |a1                                                                       |     | ?
      66672 |      66928 | Rdr |b3                                                                       |     | ?
      67952 |      68208 | Rdr |a1                                                                       |     | ?
      69232 |      69488 | Rdr |a3                                                                       |     | ?
      70640 |      70896 | Rdr |b5                                                                       |     | ?
      72048 |      72304 | Rdr |b1                                                                       |     | ?
      73440 |      73696 | Rdr |b1                                                                       |     | ?
      74720 |      74976 | Rdr |a1                                                                       |     | ?
      76000 |      76256 | Rdr |a3                                                                       |     | ?
      77280 |      77536 | Rdr |a5                                                                       |     | ?
      78672 |      78928 | Rdr |b7                                                                       |     | ?
      79952 |      80208 | Rdr |a1                                                                       |     | ?
      81344 |      81600 | Rdr |b3                                                                       |     | ?
      82624 |      82880 | Rdr |a1                                                                       |     | ?
      83904 |      84160 | Rdr |a3                                                                       |     | ?
      85296 |      85552 | Rdr |b5                                                                       |     | ?
      86704 |      86960 | Rdr |b1                                                                       |     | ?
      87984 |      88240 | Rdr |a1                                                                       |     | ?
      89264 |      89520 | Rdr |a3                                                                       |     | ?
      90544 |      90800 | Rdr |a5                                                                       |     | ?
      91936 |      92192 | Rdr |b7                                                                       |     | ?
      93328 |      93584 | Rdr |b1                                                                       |     | ?
      94720 |      94976 | Rdr |b1                                                                       |     | ?
      96112 |      96368 | Rdr |b1                                                                       |     | ?
      97520 |      97776 | Rdr |b1                                                                       |     | ?
      98928 |      99184 | Rdr |b1                                                                       |     | ?
     100320 |     100576 | Rdr |b1                                                                       |     | ?
     101728 |     101984 | Rdr |b1                                                                       |     | ?
     103120 |     103376 | Rdr |b1                                                                       |     | ?
     104512 |     104768 | Rdr |b1                                                                       |     | ?
     105792 |     106048 | Rdr |a1                                                                       |     | ?
     107072 |     107328 | Rdr |a3                                                                       |     | ?
     108464 |     108720 | Rdr |b5                                                                       |     | ?
     109744 |     110000 | Rdr |a1                                                                       |     | ?
     111024 |     111280 | Rdr |a3                                                                       |     | ?
     112304 |     112560 | Rdr |a5                                                                       |     | ?
     113712 |     113968 | Rdr |b7                                                                       |     | ?
       1681 |       8145 | Tag |50  80  03  0b  09  27  03  00  e0  37  00  00  00  00  10  fc  88  1f   |  ok |
     149920 |     155296 | Rdr |1d  80  03  0b  09  27  03  00  e0  00  0f  01  0f  d0  d6               |  ok | ATTRIB
        495 |       2159 | Tag |00  78  f0                                                               |  ok |
     159616 |     165504 | Rdr |02  38  80  03  0b  09  27  03  00  e0  03  4e  4b  53  4f  14  a9       |  ok | ?
        577 |       2561 | Tag |02  00  f7  3c                                                           |  ok |
     340816 |     345424 | Rdr |02  20  80  03  0b  09  27  03  00  e0  15  80  ce                       |  ok | ?
        820 |       3764 | Tag |02  00  65  20  15  10  81                                               |  ok |
     446992 |     451600 | Rdr |02  20  80  03  0b  09  27  03  00  e0  16  1b  fc                       |  ok | ?
        820 |       3764 | Tag |02  24  01  0e  0e  f2  0d                                               |  ok |
     552624 |     557232 | Rdr |02  20  80  03  0b  09  27  03  00  e0  17  92  ed                       |  ok | ?
        820 |       3764 | Tag |02  12  07  16  00  6c  6e                                               |  ok |
     660832 |     665440 | Rdr |02  20  80  03  0b  09  27  03  00  e0  18  65  15                       |  ok | ?
        819 |       3763 | Tag |02  ed  71  a2  ff  c9  af                                               |  ok |
     764432 |     769040 | Rdr |02  20  80  03  0b  09  27  03  00  e0  22  bc  8b                       |  ok | ?
        820 |       3764 | Tag |02  41  00  03  00  9b  f9                                               |  ok |

Output of Xerox fail (master):

[+] Recorded activity ( 84 bytes )
[=] start = start of start frame. end = end of frame. src = source of transfer.
[=] ISO14443B - all times are in carrier periods (1/13.56MHz)

      Start |        End | Src | Data (! denotes parity error)                                           | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
          0 |       2048 | Rdr |0d  37  21  92  f2                                                       |  ok | ?
      32544 |      34592 | Rdr |5d  37  21  71  71                                                       |  ok | ?
          0 |       2048 | Rdr |0d  37  21  92  f2                                                       |  ok | ?
      32544 |      34592 | Rdr |5d  37  21  71  71                                                       |  ok | ?
          0 |       2048 | Rdr |0d  37  21  92  f2                                                       |  ok | ?
      32544 |      34592 | Rdr |5d  37  21  71  71                                                       |  ok | ?
iceman1001 commented 5 months ago

fixed