Added SIM card emulator/sniffer for C-Netz

2020-05-01 19:01:39 +02:00
parent cc49a3c674
commit 8fea1ef7bf
22 changed files with 10411 additions and 2 deletions
--- a/src/sim/sim.h
+++ b/src/sim/sim.h
@@ -0,0 +1,148 @@
+
+#define FUTLN_DEFAULT		"2222001"
+#define SICHERUNG_DEFAULT	"3103"
+#define KARTEN_DEFAULT		"3"
+#define SONDER_DEFAULT		"0"
+#define WARTUNG_DEFAULT		"65535"
+#define PIN_DEFAULT		"0000"
+#define AUTH_DEFAULT		"0xffffffffffffffff"
+
+enum l1_state {
+	L1_STATE_RESET = 0,	/* reset is held */
+	L1_STATE_ATR,		/* answer to reset is sent */
+	L1_STATE_IDLE,		/* waiting for message or reset */
+	L1_STATE_SEND,		/* sending reply */
+	L1_STATE_RECEIVE,	/* receiving message */
+};
+
+enum block_state {
+	BLOCK_STATE_ADDRESS = 0,
+	BLOCK_STATE_CONTROL,
+	BLOCK_STATE_LENGTH,
+	BLOCK_STATE_DATA,
+};
+
+#define MAX_PIN_TRY	3
+#define MAX_CARDS	8	/* must also be defined at eeprom.h */
+
+typedef struct sim_sim {
+	int			card;
+	enum l1_state		l1_state;
+
+	/* ATR states */
+	int			atr_count;
+
+	/* layer 2 states */
+	enum block_state	block_state;
+	uint8_t			block_address;
+	uint8_t			block_control;
+	uint8_t			block_checksum;
+	uint8_t			block_count;
+	uint8_t			block_rx_data[64];
+	uint8_t			block_rx_length;
+	uint8_t			block_tx_data[64];
+	uint8_t			block_tx_length;
+	uint8_t			vs, vr;
+	int			reject_count;
+	int			resync_sent;
+
+	/* ICL layer states */
+	int			icl_online;
+	int			icl_master;
+	int			icl_chaining;
+	int			icl_error;
+
+	/* layer 7 states */
+	int			addr_src;
+	int			addr_dst;
+	int			sh_appl_count;		/* counts applications for SH_APPL */
+
+	/* CNETZ states */
+	int			pin_required;		/* pin required an not yet validated */
+	int			program_mode;		/* program mode active (special PIN entered) */
+	int			pin_len;		/* length of pin (4 .. 8) */
+	int			pin_try;		/* number of tries left (0 == card locked) */
+	int			app;			/* currently selected APP number */
+	int			app_locked;		/* application locked */
+	int			gebz_locked;		/* metering counter and phonebook locked */
+	int			gebz_full;		/* metering counter full (does this really happen?) */
+} sim_sim_t;
+
+/* layer 2 */
+enum l2_cmd {
+	L2_I,
+	L2_REJ,
+	L2_RES,
+};
+
+/* ICL */
+#define ICB1_ONLINE	0x01
+#define ICB1_CONFIRM	0x02
+#define ICB1_MASTER	0x04
+#define ICB1_WT_EXT	0x08
+#define ICB1_ABORT	0x10
+#define ICB1_ERROR	0x20
+#define ICB1_CHAINING	0x40
+#define ICB2_BUFFER	0x0f
+#define ICB2_DYNAMIC	0x10
+#define ICB2_ISO_L2	0x20
+#define ICB2_PRIVATE	0x40
+#define ICB_EXT		0x80
+
+/* command */
+#define CLA_CNTR	0x02
+#define SL_APPL		0xf1
+#define CL_APPL		0xf2
+#define SH_APPL		0xf3
+
+#define CLA_STAT	0x03
+#define CHK_KON		0xf1
+
+#define CLA_WRTE	0x04
+#define WT_RUFN		0x01
+
+#define CLA_READ	0x05
+#define RD_EBDT		0x01
+#define RD_RUFN		0x02
+#define RD_GEBZ		0x03
+
+#define CLA_EXEC	0x06
+#define CHK_PIN		0xf1
+#define SET_PIN		0xf2
+#define EH_GEBZ		0x01
+#define CL_GEBZ		0x02
+#define SP_GZRV		0x01
+#define FR_GZRV		0x02
+
+#define CLA_AUTO	0x07
+#define AUT_1		0x01
+
+/* response */
+#define CCRC_PIN_NOK	0x01
+#define CCRC_AFBZ_NULL	0x02
+#define CCRC_APRC_VALID	0x04
+#define CCRC_ERROR	0x40
+#define CCRC_IDENT	0x80
+
+#define APRC_PIN_REQ	0x02
+#define APRC_APP_LOCKED	0x04
+#define APRC_GEBZ_LOCK	0x10
+#define APRC_GEBZ_FULL	0x20
+
+/* apps */
+#define APP_NETZ_C	3
+#define APP_RUFN_GEBZ	4
+
+int encode_ebdt(uint8_t *data, const char *futln, const char *sicherung, const char *karten, const char *sonder, const char *wartung);
+void decode_ebdt(uint8_t *data, char *futln, char *sicherung, char *karten, char *sonder, char *wartung);
+int directory_size(void);
+int save_directory(int location, uint8_t *data);
+void load_directory(int location, uint8_t *data);
+int encode_directory(uint8_t *data, const char *number, const char *name);
+void decode_directory(uint8_t *data, char *number, char *name);
+
+int sim_init_eeprom(void);
+void sim_reset(sim_sim_t *sim, int reset);
+int sim_rx(sim_sim_t *sim, uint8_t c);
+int sim_tx(sim_sim_t *sim);
+void sim_timeout(sim_sim_t *sim);