Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2009-03-26 17:32:36

edo512
Contributor
Registered: 2008-10-07
Posts: 103

Unknown 125kHz card

Would anyone have an idea of the modulation used by this type of card (125kHz): would this be some sort of ASK ?

symbol-1.png

The tag sends the same thing all the time: it has a 4096 samples period at 125kHz.

The obvious would be to decode 'long' pulses as Ones and 'short' as zeroes by timing the zero crossings, but it does not give me any interesting bitstream value when matching it to the serial number printed on the card. Would someone have hints on another possible approach ?

Offline

#2 2009-03-27 04:27:51

d18c7db
Contributor
Registered: 2008-08-19
Posts: 292

Re: Unknown 125kHz card

I have an EM4102 that looks pretty much the same.

Offline

#3 2009-03-27 09:40:08

edo512
Contributor
Registered: 2008-10-07
Posts: 103

Re: Unknown 125kHz card

Indeed! I did some more work yesterday evening, and this is an EM chip, no doubt about it, everything matches the specs.

I'm currently writing a few extra routines for the host client to make analysis of this type of signals easier. I'm finishing up the manchester decoder at the moment (if anyone's got efficient algorithms, let me know). Next step will be to print our the EM mapping properly including the parity checking bits, and then moving it into the ARM code.

My view is that the host client should contain the signal analysis routines for unknown signals: autocorrelation, extraction, generic manchester & other decoding, whereas it makes more sense to include more mature tag decoding routines into the ARM itself.

Ed

Offline

Board footer

Powered by FluxBB