Proxmark3 community

Jimmid

Contributor

From: Adelaide South Australia

Registered: 2020-05-31

Posts: 16

Texas Crypto ID69 TP31 reading and cloning

Hi, Trying to clone a transponder key for a mate who just brought a Yamaha 650 motorcycle second hand.  It only came with 1 key and he wants a spare before he looses his only key.  Apparently they come with a red key and black key.  The red key is to program the immobiliser to a new key, but he doesn't have it.
A locksmith has said it can get him a new key for $200.  Anyone cloned one of theses chips?   There are lots of blanks on ebay and even blank mc keys with these chips in.

Any help appreciated.

Jimmid

Jimmid

Contributor

From: Adelaide South Australia

Registered: 2020-05-31

Posts: 16

Re: Texas Crypto ID69 TP31 reading and cloning

got this much:

proxmark3> lf read
#db# LF Sampling config:
#db#   [q] divisor:           95
#db#     bps:               8                            ( post wants ?    was found without a matching )
#db#   [d] decimation:        1
#db#   [a] averaging:         1
#db#   [t] trigger threshold: 0
#db# Done, saved 40000 out of 40000 seen samples at 8 bits/sample
#db# buffer samples: 72 73 72 73 72 72 73 73 ...
Reading 39999 bytes from device memory

Data fetched
Samples @ 8 bits/smpl, decimation 1:1

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Texas Crypto ID69 TP31 reading and cloning

You can look at the collected signal and save it.  You need to know what type of tech is used.  Immos usually is hitag related.

data plot
data save

Jimmid

Contributor

From: Adelaide South Australia

Registered: 2020-05-31

Posts: 16

Re: Texas Crypto ID69 TP31 reading and cloning

Thanks.  will try that and let you know what I get.

Jimmid

Contributor

From: Adelaide South Australia

Registered: 2020-05-31

Posts: 16

Re: Texas Crypto ID69 TP31 reading and cloning

Hi Iceman,
When I run lf data plot   I get nothing, just scrolls the help commands.  I  couldn't compile the proxmark3 software, the clean all make all commands wouldn't work, so I  just downloaded the latest pre compiled windows version I could find.  Could that be the problem?

info:
C:\pm3-64\win64>proxmark3 COM7
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2015-11-19 10:08:02
os: /-suspect 2015-11-19 10:08:09
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 169916 bytes (32%). Free: 354372 bytes (68%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Texas Crypto ID69 TP31 reading and cloning

No,  I doubt there is built-in support for  Texas Crypto ID69 TP31.   You would need to find a full datasheet for starters.

Jimmid

Contributor

From: Adelaide South Australia

Registered: 2020-05-31

Posts: 16

Re: Texas Crypto ID69 TP31 reading and cloning

I think this is pretty close to the model in the key.

https://drive.google.com/file/d/1IGoa4H … sp=sharing

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Texas Crypto ID69 TP31 reading and cloning

frequency of 134.2 kHz,   using Frequency Shift Keying (FSK),
dataformat 128bits,
data encoding NRZ
crc 16bit CCITT

That is a good start. It up to you now.

Jimmid

Contributor

From: Adelaide South Australia

Registered: 2020-05-31

Posts: 16

Re: Texas Crypto ID69 TP31 reading and cloning

Iceman, I am very new to this.  Haven't played with Proxmark3 except for a few hours.

I don't mind putting the work into learning, but would you mind giving me a few pointers were to go from here?
I have seen that is supposed to be like a HITAG2 chip?

Thanks in advance

iceman

Administrator

Registered: 2013-04-25

Posts: 9,537

Website

Re: Texas Crypto ID69 TP31 reading and cloning

Start learning by reading datasheet,  reading helptexts on the commands in Proxmark3 client.

lf config H
lf read
data save xxxxx.pm3    -->  share this file here

Jimmid

Contributor

From: Adelaide South Australia

Registered: 2020-05-31

Posts: 16

Re: Texas Crypto ID69 TP31 reading and cloning

I followed the above commands, but the saved file only showed 0's

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

I see in the data sheet the following:
Memory size   80 bits
Memory organization   1 block
Identification data    64 bit
Error detection (Data BCC) CRC - CCITT ,  16 bit

does that help read anything?     can you read hitag2 cards?