Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2010-07-26 09:11:03

sikinmettugi
Member
Registered: 2010-07-08
Posts: 10

Question about hi14alist symbol '!'

Hi, I'm undergraduate student living in Korea.
Few days ago, I used hi14asnoop to Daejeon traffic card <-> Daejeon bus' reader and obtained some result.
Here is some part of it:

+      0:    :     26    
 +   2984:    :     26    
 +   3480:    :     26    
 + 143700:    :     26    
 +     64:   0: TAG 04  00    
 +   1704:    :     93  20    
 +     64:   0: TAG 3b  4c  ca  d6  6b    
 +   2336:    :     93  70  3b  4c  ca  d6  6b  fc  64    
 +     64:   0: TAG 08  b6  dd    
 +   1320:    :     50  00  57  cd    
 +   5991:    :     26    
 +   3431:    :     26    
 +   3464:    :     26    
 +  27716:    :     52    
 +     64:   0: TAG 04  00    
 +   1200:    :     93  20    
 +     64:   0: TAG 3b  4c  ca  d6  6b    
 +   3022:    :     93  70  3b  4c  ca  d6  6b  fc  64    
 +     64:   0: TAG 08  b6  dd    
 +   2272:    :     30  02  10  8b    
 +     72:   0: TAG 04    
 +   1376:    :     52    
 +     64:   0: TAG 04  00    
 +   1736:    :     93  70  3b  4c  ca  d6  6b  fc  64    
 +     64:   0: TAG 08  b6  dd    
 +   5440:    :     60  00  f5  7b    
 +    112:   0: TAG 10  18  d6  ed    
 +   1448:    :     da  ff  c0  a2  74  24  8f  45      !crc
 +     63:   0: TAG 0f! f3! 81! 13    
 +   1408:    :     01  ab  d2  58      !crc
 +     72:   0: TAG a0! d2! 34  df  15! a7! 06! 4e! 15  3f! c7! d7  79! 91! 5d! 2b! 96  c4!     !crc
 +   3768:    :     2e  d7  61  b6      !crc
 +     72:   0: TAG 0a! e5! 5a  79! 00! 73! f1  5d  d5  02! df  e4! 63! 17  fa! 59! 06  cd!     !crc
 +  17597:    :     52    

The question is, what does 0f! f3! 81! or !crc mean?
What condition triggers this ! appear?

Offline

#2 2010-07-27 23:27:41

hat
Contributor
Registered: 2009-04-12
Posts: 160

Re: Question about hi14alist symbol '!'

! behind a byte value indicates parity bit failure
(in programming ! means "not")

every 8 bit are sent with a parity bit, if this parity bit is correct nothing is shown. if it isn't an exclamation mark is shown.

this is a lot more compact and easier to read than if there were more 0s and 1s printed.

-q: why are there so many failures?
-a: the parity bit is encrypted too, so when looking at it before decryption the parity bits appear to have failed.

-q: why print it at all.
-a mifare classic leaks information in the parity bit, read the docs on how

-q: anything else it can be used for?
-a: yes it quickly shows which part of a trace are encrypted


the !crc is similar, it indicates the 2byte crc isn't correct all commands except some exchanges during the authentication also send a crc  checksum(last two bytes). !crc indicates this checksum was not correct).

Offline

#3 2010-07-28 04:43:37

sikinmettugi
Member
Registered: 2010-07-08
Posts: 10

Re: Question about hi14alist symbol '!'

Thx hat! You gave me a big hand.

Offline

Board footer

Powered by FluxBB