c++ - 如何使用带有 ISO14443 层的 T=CL(ISO7816) 协议(protocol)发送 APDU 命令

Question

我想通过 T=CL 协议(protocol)与 ISO14443A 层的卡连接。并且，例如，向它发送 APDU 命令 { 0xFF, 0xCA, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } - 它必须返回卡 ID。

为此，我使用了 librfid 库和阅读器 NXP CLRC 632 设备。

我正在重写文件 rfid_reader_spidev.c 中 librfid 中的所有函数比如:

int spidev_read(unsigned char reg, unsigned char len, const unsigned char *buf);
int spidev_write(unsigned char reg, unsigned char len, const unsigned char *buf);
int spidev_reg_read(struct rfid_asic_transport_handle *rath, unsigned char reg, unsigned char *value);
int spidev_reg_write(struct rfid_asic_transport_handle *rath, unsigned char reg, unsigned char value);

在我的设备上工作。

然后我从librfid-tool.c重写了main函数:

int main(int argc, char *argv[])  
{ 

      int rc;
    unsigned char buf[0x100];
    unsigned int len;
    unsigned int protocol = RFID_PROTOCOL_TCL,
                 layer2 = RFID_LAYER2_ISO14443A;

    printf("initializing librfid\n");
    //--------------------------------
    if (reader_init() < 0){
        printf("Err reader_init\n");
        return;
    }
    if (l2_init(layer2) < 0) {
            rfid_reader_close(rh);
            printf("Err l2_init\n");
            return;
    }
    if (l3_init(protocol) < 0) {
            rfid_reader_close(rh);
            printf("Err l3_init\n");
            return;
    }
    //--------------------------------
    printf("Protocol T=CL\n");
    // we've established T=CL at this point
    printf("selecting Master File\n");
    rc = select_mf();
    if (rc < 0) {
            printf("error selecting MF\n");
            return;
    }

    printf("Send APDU command\n");
    rc = send_apdu();
    if (rc < 0) {
            printf("error sending APDU command\n");
            return;
    }

    printf("Getting random challenge, length 255\n");
    rc = iso7816_get_challenge(0xff);
    if (rc < 0) {
            printf("error getting random challenge\n");
            return;
    }
    printf("selecting Passport application\n");
    rc = iso7816_select_application();
    if (rc < 0) {
            printf("error selecting passport application\n");
            return;
    }
    printf("selecting EF 0x1e\n");
    rc = iso7816_select_ef(0x011e);
    if (rc < 0) {
            printf("error selecting EF 0x1e\n");
            return;
    }
    printf("selecting EF 0x01\n");
    rc = iso7816_select_ef(0x0101);
    if (rc < 0) {
            printf("error selecting EF 0x01\n");
            return;
    }
    while (1) {
            printf("reading EF1\n");
            len = sizeof(buf);
            printf("reading ef\n");
            rc = iso7816_read_binary(buf, &len);
            if (rc < 0) {
                    printf("error reading EF\n");
                    return;
            }
    }
}

我添加了函数 send_apdu，但我不知道它的规则:

static int send_apdu(void)
{
  unsigned char apdu[] = { 0xFF, 0xCA, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
  unsigned char msg[128];
  unsigned char ret[256];
  unsigned int rlen = sizeof(ret), msglen;
  int rv;

  msg[0] = 0x6f;//PC_to_RDR_XfrBlock;
  msg[5] = 0;    /* slot */
  msg[6] = 1;    //seqno = handle->seqno++;
  msg[7] = 4; /* bBWI */
  msg[8] = 0; /* RFU */
  msg[9] = 0; /* RFU */
  memcpy (msg+10, apdu, 8);
  set_msg_len (msg, 8);
  msglen = 10 + 8;

  rv = rfid_protocol_transceive(ph, msg, msglen/*sizeof(apdu)*/, ret, &rlen, 0, 0);
  if (rv < 0)
    return rv;

  printf("%d: [%s]\n", rlen, hexdump(ret, rlen));
  return 0;
}

如您在日志中所见，我在程序中的“选择主文件”步骤出现错误:

initializing librfid
opening reader handle OpenPCD, CM5x21
spidev_open
entering
 reg = 0x09, val = 0x00
 reg = 0x09, val = 0x10
entering
 reg = 0x09, val = 0x10
 reg = 0x09, val = 0x00
 reg = 0x00, val = 0x00
 reg = 0x11, val = 0x5b
entering
 reg = 0x11, val = 0x5b
 reg = 0x11, val = 0x58
entering
 reg = 0x11, val = 0x58
 reg = 0x11, val = 0x5b
opening layer2 handle
 reg = 0x09, val = 0x01
 reg = 0x11, val = 0x5b
 reg = 0x12, val = 0x3f
 reg = 0x13, val = 0x3f
 reg = 0x14, val = 0x19
 reg = 0x15, val = 0x13
 reg = 0x16, val = 0x3f
 reg = 0x17, val = 0x00
 reg = 0x19, val = 0x73
 reg = 0x1a, val = 0x08
 reg = 0x1b, val = 0xa9
 reg = 0x1c, val = 0xff
 reg = 0x1d, val = 0x00
 reg = 0x1e, val = 0x01
 reg = 0x21, val = 0x06
 reg = 0x22, val = 0x03
 reg = 0x23, val = 0x63
 reg = 0x24, val = 0x63
running layer2 anticol(_open)
 reg = 0x0f, val = 0x07
 reg = 0x09, val = 0x00
 reg = 0x22, val = 0x03
timeout=92, rx_len=0, tx_len=2
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x7f
 reg = 0x03, val = 0x05
status_flag: 0x05, ERR, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
timeout 920 usec, prescaler = 0, divisor = 6
 reg = 0x2a, val = 0x06
 reg = 0x2b, val = 0x06
 reg = 0x07, val = 0x20
 reg = 0x06, val = 0xa0
 reg = 0x2c, val = 0xc3
 len=, data= 26
 reg = 0x01, val = 0x1e
 reg = 0x06, val = 0x20
irq_en: 0x20, TIMER
 reg = 0x06, val = 0xac
 reg = 0x03, val = 0x0d
status_flag: 0x0d, ERR, IRQ, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
 reg = 0x07, val = 0x1d
irq_rq: 0x1d, LoA, IDLE, RX, TX
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x08
rc632_wait_idle >> ret=0
 reg = 0x04, val = 0x02
rx_len == 2
 len=, data= 04 00
 reg = 0x0f, val = 0x00
 reg = 0x0a, val = 0x40
ATQA: 0x04 0x00
 reg = 0x09, val = 0x00
 reg = 0x22, val = 0x03
 reg = 0x0f, val = 0x00
timeout=50, rx_len=0, tx_len=64
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x7f
 reg = 0x03, val = 0x05
status_flag: 0x05, ERR, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
timeout 500 usec, prescaler = 0, divisor = 5
 reg = 0x2a, val = 0x05
 reg = 0x2b, val = 0x06
 reg = 0x07, val = 0x20
 reg = 0x06, val = 0xa0
 reg = 0x2c, val = 0xd4
 len=, data= 93 20
 reg = 0x01, val = 0x1e
 reg = 0x06, val = 0x2c
irq_en: 0x2c, IDLE, RX, TIMER
 reg = 0x06, val = 0xac
 reg = 0x03, val = 0x0d
status_flag: 0x0d, ERR, IRQ, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
 reg = 0x07, val = 0x1d
irq_rq: 0x1d, LoA, IDLE, RX, TX
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x08
rc632_wait_idle >> ret=0
 reg = 0x04, val = 0x05
rx_len == 5
 len=, data= 4d 1f 1f 89 c4
 reg = 0x0a, val = 0x40
tran_acf->0 boc: -1
 reg = 0x22, val = 0x0f
tx_len=7
timeout=1236, rx_len=0, tx_len=3
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x7f
 reg = 0x03, val = 0x05
status_flag: 0x05, ERR, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
timeout 12360 usec, prescaler = 0, divisor = 10
 reg = 0x2a, val = 0x0a
 reg = 0x2b, val = 0x06
 reg = 0x07, val = 0x20
 reg = 0x06, val = 0xa0
 reg = 0x2c, val = 0xa4
 len=, data= 93 70 4d 1f 1f 89 c4
 reg = 0x01, val = 0x1e
 reg = 0x06, val = 0x2c
irq_en: 0x2c, IDLE, RX, TIMER
 reg = 0x06, val = 0xac
 reg = 0x03, val = 0x0d
status_flag: 0x0d, ERR, IRQ, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
 reg = 0x07, val = 0x1d
irq_rq: 0x1d, LoA, IDLE, RX, TX
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x08
rc632_wait_idle >> ret=0
 reg = 0x04, val = 0x01
rx_len == 1
 len=, data= 28
UID  4d 1f 1f 89
we have a T=CL compliant PICC
running layer3 (ats)
 reg = 0x22, val = 0x0f
tx_len=2
timeout=4833, rx_len=0, tx_len=64
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x7f
 reg = 0x03, val = 0x05
status_flag: 0x05, ERR, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
timeout 48330 usec, prescaler = 0, divisor = 12
 reg = 0x2a, val = 0x0c
 reg = 0x2b, val = 0x06
 reg = 0x07, val = 0x20
 reg = 0x06, val = 0xa0
 reg = 0x2c, val = 0xa0
 len=, data= e0 50
 reg = 0x01, val = 0x1e
 reg = 0x06, val = 0x2c
irq_en: 0x2c, IDLE, RX, TIMER
 reg = 0x06, val = 0xac
 reg = 0x03, val = 0x0c
status_flag: 0x0c, ERR, IRQ, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
 reg = 0x07, val = 0x1d
irq_rq: 0x1d, LoA, IDLE, RX, TX
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x08
rc632_wait_idle >> ret=0
 reg = 0x04, val = 0x0d
rx_len == 13
 len=, data= 0d 78 77 b1 02 4a 43 4f 50 76 32 34 31
This PICC supports CID
ATS parsed:  0d 78 77 b1 02 4a 43 4f 50 76 32 34 31
Dr = 0x7, Ds = 0x7
DrI = 0x2, DsI = 0x2
 reg = 0x22, val = 0x0f
tx_len=3
timeout=618496, rx_len=0, tx_len=1
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x7f
 reg = 0x03, val = 0x05
status_flag: 0x05, ERR, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
timeout 6184960 usec, prescaler = 0, divisor = 0
 reg = 0x2a, val = 0x00
 reg = 0x2b, val = 0x06
 reg = 0x07, val = 0x20
 reg = 0x06, val = 0xa0
 reg = 0x2c, val = 0xc2
 len=, data= d0 11 0a
 reg = 0x01, val = 0x1e
 reg = 0x06, val = 0x2c
irq_en: 0x2c, IDLE, RX, TIMER
 reg = 0x06, val = 0xac
 reg = 0x03, val = 0x0d
status_flag: 0x0d, ERR, IRQ, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
 reg = 0x07, val = 0x3d
irq_rq: 0x3d, LoA, IDLE, RX, TX, TIMER
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x08
rc632_wait_idle >> ret=0
 reg = 0x04, val = 0x01
rx_len == 1
 len=, data= d0
setting rate: 424K
 reg = 0x19, val = 0x73
 reg = 0x19, val = 0x33
 reg = 0x1a, val = 0x08
 reg = 0x1a, val = 0x09
 reg = 0x1c, val = 0x50
 reg = 0x1d, val = 0x0c
setting rate: 424K
 reg = 0x14, val = 0x19
 reg = 0x14, val = 0x01
 reg = 0x15, val = 0x00
we now have layer3 up and running
Protocol T=CL
sending APDU command
selecting Master File
 reg = 0x22, val = 0x0f
tx_len=7
timeout=618496, rx_len=0, tx_len=255
 reg = 0x01, val = 0x00
 reg = 0x07, val = 0x7f
 reg = 0x03, val = 0x05
status_flag: 0x05, ERR, Lo, mIdle
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
timeout 6184960 usec, prescaler = 0, divisor = 0
 reg = 0x2a, val = 0x00
 reg = 0x2b, val = 0x06
 reg = 0x07, val = 0x20
 reg = 0x06, val = 0xa0
 reg = 0x2c, val = 0xc2
 len=, data= 02 00 a4 00 00 02 3f
 reg = 0x01, val = 0x1e
 reg = 0x06, val = 0x2c
irq_en: 0x2c, IDLE, RX, TIMER
 reg = 0x06, val = 0xac
 reg = 0x03, val = 0x6d
status_flag: 0x6d, ERR, IRQ, Lo, mAwaitingRX
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
 reg = 0x07, val = 0x31
irq_rq: 0x31, LoA, TX, TIMER
 reg = 0x01, val = 0x1e
 reg = 0x07, val = 0x08
rc632_wait_idle >> ret=0
 reg = 0x04, val = 0x00
rx_len == 0
 reg = 0x03, val = 0x6d
status_flag: 0x6d, ERR, IRQ, Lo, mAwaitingRX
 reg = 0x0a, val = 0x40
error_flag: 0x40, KEY
 reg = 0x22, val = 0x0f
l2 transceive finished
error selecting MF

如果您能帮助我或指出我的错误，我将不胜感激。

Answer 1

select_mf 函数(您未提供)中似乎有错误。从日志文件中，它正在发送:

02 00 a4 00 00 02 3f

这应该是:

00 a4 00 00 02 3f 00