proxmark3/client/loclass/hash1_brute.c

#include <stdio.h>
#include "cipherutils.h"
#include <stdint.h>
#include <stdbool.h>
#include <string.h>
#include <unistd.h>
#include <ctype.h>
#include "elite_crack.h"

void calc_score(uint8_t *csn, uint8_t *k) {
    uint8_t score = 0 ;
    uint8_t i;
    uint8_t goodvals[16] = {0};
    uint8_t uniq_vals[8] = {0};
    memset(goodvals, 0x00, 16);
    memset(uniq_vals, 0x00, 8);
    uint8_t badval = 0;
    int badscore = 0;
    for (i = 0; i < 8 ; i++) {
        if (k[i] == 0x01) continue;
        if (k[i] == 0x00) continue;
        if (k[i] == 0x45) continue;
        if (k[i] < 16) {
            goodvals[k[i]] = 1;
        }
//        if(k[i] ==9 || k[i]==2){
//            goodvals[k[i]] = 1;
//        }

        else if (k[i] >= 16) {
            badscore++;
            badval = k[i];
        }
    }
    for (i = 0; i < 16; i++) {
        if (goodvals[i]) {
            uniq_vals[score] = i;
            score += 1;
        }
    }

    if (score >= 2 && badscore < 2) {
        printf("CSN\t%02x%02x%02x%02x%02x%02x%02x%02x\t%02x %02x %02x %02x %02x %02x %02x %02x\t"
               , csn[0], csn[1], csn[2], csn[3], csn[4], csn[5], csn[6], csn[7]
               , k[0], k[1], k[2], k[3], k[4], k[5], k[6], k[7]
              );

        for (i = 0 ; i < score; i++) {
            printf("%d,", uniq_vals[i]);
        }
        printf("\tbadscore: %d (%02x)", badscore, badval);
        printf("\r\n");
    }
}

void brute_hash1(void) {
    uint16_t a, b, c, d;
    uint8_t csn[8] = {0, 0, 0, 0, 0xf7, 0xff, 0x12, 0xe0};
    uint8_t k[8] = {0, 0, 0, 0, 0, 0, 0, 0};
    uint8_t testcsn[8] = {0x00, 0x0d, 0x0f, 0xfd, 0xf7, 0xff, 0x12, 0xe0} ;
    uint8_t testkey[8] = {0x05, 0x01, 0x00, 0x10, 0x45, 0x08, 0x45, 0x56} ;
    calc_score(testcsn, testkey);
    printf("Brute forcing hashones\n");
    //exit(1);

    for (a = 0; a < 256; a++) {
        //if(a > 0)printf("%d/256 done...\n", a);
        for (b = 0; b < 256; b++)
            for (c = 0; c < 256; c++)
                for (d = 0; d < 256; d++) {
                    csn[0] = a;
                    csn[1] = b;
                    csn[2] = c;
                    csn[3] = d;
                    csn[4] = 0xf7;
                    csn[5] = 0xff;
                    csn[6] = 0x12;
                    csn[7] = 0xe0;
                    hash1(csn, k);
                    calc_score(csn, k);
                }
    }
}