Proxmark3 developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2020-06-11 13:46:22

Sentinel
Contributor
Registered: 2012-11-26
Posts: 182

Kaba Group Header

hi All!
what bytes are needed for counting BCC, SegC, kghC..?

Legic-Prime Layout with 'Kaba Group Header'
      +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+
  0x00|MCD |MSN0|MSN1|MSN2|MCC | 60 | ea | 9f | ff | 00 | 00 | 00 | 11 |Bck0|Bck1|Bck2|
      +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+   
  0x10|Bck3|Bck4|Bck5|BCC | 00 | 00 |Seg0|Seg1|Seg2|Seg3|SegC|Stp0|Stp1|Stp2|Stp3|UID0|
      +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+
  0x20|UID1|UID2|kghC|
      +----+----+----+
MCD   = Manufacturer ID
MSN   = Manufacturer SerialNumber
60 ea = DCF Low + DCF high
9f    = raw byte which holds the bits for OLE,WRP,WRC,RD
ff    = unknown but important
00    = unimportant
11    = unknown but important
Bck   = header-backup-area
00 00 = Year (00 = 2000) & Week (not important)
Seg   = Segment Header
SegC  = Crc8 over the Segment Header
Stp   = Stamp (could be more as 4 - up to 7)
UID   = dec User-ID for online-Mapping
kghC  = crc8 over MCD + MSN0..MSN2 + UID
---------------------------------------------------------

Card 1, print number=4574
79 3B 0E 2E A6 60 EA 9F FF 00 00 00 11 01 06 80
00 00 F2 2B 00 00 AB 66 AE A6 4E A4 A6 B9 6F A6
E3 D2 5A 00 00 00 00 00 00 00 00 00 00 00 00 00
MCC=A6,BCC=2B,SegC=E8 or 4E?
kghC=FC or 5A?
segm=0DC00800 E8 02001FC9 004574 FC
---------------------------------------------------------

Card 2, print number=4752
79 43 68 2E 47 60 EA 9F FF 00 00 00 11 01 06 80
00 00 25 DD 00 00 4A 87 4F 47 78 45 47 58 8E 47
00 15 41 00 00 00 00 00 00 00 00 00 00 00 00 00
MCC=47,BCC=DD,SegC=3F or 78?
kghC=06 or 41?
segm=0DC00800 3F 02001FC9004752 06
---------------------------------------------------------

Card 3, print number=4897
79 BD 02 2E 3C 60 EA 9F FF 00 00 00 11 01 06 80
00 00 10 C5 00 00 31 FC 34 3C 36 3E 3C 23 F5 3C
74 AB BB 00 00 00 00 00 00 00 00 00 00 00 00 00
MCC=3C,BCC=C5,SegC=0A or 36?
kghC=87 or BB?
segm=0DC00800 0A 02001FC9 004897 87
---------------------------------------------------------

Card 4, print number=4554
79 FD 93 33 16 60 EA 9F FF 00 00 00 11 01 06 80
00 00 7C 28 00 00 1B D6 1E 16 70 14 16 09 DF 16
53 42 AA 00 00 00 00 00 00 00 00 00 00 00 00 00
MCC=16,BCC=28,SegC=66 or 70?
kghC=BC or AA?
segm=0DC00800 66 02001FC9 004554 BC
---------------------------------------------------------

Offline

#2 2020-06-12 10:13:41

Sentinel
Contributor
Registered: 2012-11-26
Posts: 182

Re: Kaba Group Header

Ib3HmuX.jpg

Offline

Board footer

Powered by FluxBB