Confirmed that em410xsim works fine here, when read by a Phidget RFID reader.  Tag values match exactly!  Read range is slightly better than a real card, using the ZikZak antenna.

em410xwatch, however, just crashes the Linux and Windows prox client.  Doing the same steps manually works just fine.

I just changed the firmware to your r29 release - yesterday I was using r28.  Since changing the behaviour of the redlight is changed - now it's constantly on (along with the orange light) but much dinner than the normal.

I presume it shouldn't matter what my reader is.  I will try my em410x cloner and see if that picks up the demotag.

em410watch also doesn't appear to work for me either.  The redlight flashes and the client appears to lock up.  Again slightly different behaviour to the r28 release (which didn't work either for me for em410watch).

On the other hand, Samy's much more efficient algo assumes the initial bit value is "0" and hence sometimes gets it right, sometimes not. Typically, with the same EM tag, successive loread attempts lead to varying results.

My guess is that we need a way to detect when Samy's routine is unsynchronized and invert the bitstream, it should be possible! Anyone's got an idea?

Ed

Can you tell me what you're simulating specifically? I'll test out your tag ID just to confirm. What reader are you using?

Anyone have any ideas why the sim wouldn't work for Duran? Maybe bit flipping needs to happen? If so, maybe I'll send the tag ID twice, then flip the tag ID and send that twice, and loop.

Anyone know why this would happen (from Duran): "With the simulation, the orange LED comes on as intended, but the red flickers, then on full, then off."

Yeah, the bit swapping seemed to differ card to card. My cards worked with the way the bits were, but Ed's needed bit swapping. Obviously it's probably not the cards, just how I'm reading it somehow, but honestly I don't know how to correctly detect which way it is in the waveform. However, the em410xread function tries bit swapping if it doesn't detect a card the first time.

Also, re-indentation, my X-Code likes to reindent the code I touch and probably has different tab lengths than already in the code...I'll see if I can turn it off (I indent my code!

proxmark3> load ../traces/EM4102-1.pm3
> load ../traces/EM4102-1.pm3
loaded 16000 samples
proxmark3> mandemod
> mandemod
Auto-detected clock rate: 64
Manchester decoded bitstream
1 0 0 0 0 0 0 1 1 1 0 0 0 1 1 0
0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1
0 0 1 1 1 1 1 0 1 1 1 0 1 0 0 0
0 1 1 0 1 0 0 0 0 1 0 1 0 0 0 0
1 0 0 0 0 0 0 1 1 1 0 0 0 1 1 0
0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1
0 0 1 1 1 1 1 0 1 1 1 0 1 0 0 0
0 1 1 0 1 0 0 0 0 1 0 1 0 0 0 0
1 0 0 0 0 0 0 1 1 1 0 0 0 1 1 0
0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1
0 0 1 1 1 1 1 0 1 1 1 0 1 0 0 0
0 1 1 0 1 0 0 0 0 1 0 1 0 0 0 0
1 0 0 0 0 0 0 1 1 1 0 0 0 1 1 0
0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1

The header being '0 0 0 0 0 0 0 0 0' when it should be '1 1 1 1 1 1 1 1 1'...

To check it (and because it might be useful anyway), I added the ability to invert the output on mandemod:

  mandemod      -- [ i ] [clock rate] -- Manchester demodulate binary stream (option 'i' to invert output)

proxmark3> mandemod i
> mandemod i
Inverting output
Auto-detected clock rate: 64
Manchester decoded bitstream
0 1 1 1 1 1 1 0 0 0 1 1 1 0 0 1
1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0
1 1 0 0 0 0 0 1 0 0 0 1 0 1 1 1
1 0 0 1 0 1 1 1 1 0 1 0 1 1 1 1
0 1 1 1 1 1 1 0 0 0 1 1 1 0 0 1
1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0
1 1 0 0 0 0 0 1 0 0 0 1 0 1 1 1
1 0 0 1 0 1 1 1 1 0 1 0 1 1 1 1
0 1 1 1 1 1 1 0 0 0 1 1 1 0 0 1
1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0
1 1 0 0 0 0 0 1 0 0 0 1 0 1 1 1
1 0 0 1 0 1 1 1 1 0 1 0 1 1 1 1
0 1 1 1 1 1 1 0 0 0 1 1 1 0 0 1
1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0

Which looks to me like correct output.

I've left the logic of mandemod as it was, but it may want swapping around.

Oh, and I also fixed an indentation problem which made it almost impossible to understand WTF was going on in that routine!

adam@algroup.co.uk wrote:

Card ID: U2048B09E27
Tag type: EM 4x02 (Unique)
  Unique ID: 04120d79e4

Out of curiosity: what is the Card ID as compared to the Unique ID ?

Ed

The ACG reader doesn't interpret the data bits coming from the card so I have to do that in software (in this case it's just a reversal of all the bits). It also prepends the 'U' to signify a 'Unique' tag.

BTW, I've just committed traces from em4x05 and em4x50.

Documentation needs updating... If you follow the steps on the web page, bad stuff happens!

proxmark3> load EMMARIN-1.bin
> load EMMARIN-1.bin
loaded 24000 samples
proxmark3> askdemod 64 1
> askdemod 64 1
proxmark3> mandemod 64
> mandemod 64

  Oh yeah, I removed the need for the clock as input argument, good point! I just updated the manual.

Ed

proxmark3> load EMMARIN-1.bin
> load EMMARIN-1.bin
loaded 24000 samples
proxmark3> askdemod 64 1
> askdemod 64 1
proxmark3> mandemod 64
> mandemod 64
Manchester decoded bitstream
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0

The new method works fine though:

proxmark3> load EMMARIN-1.bin
> load EMMARIN-1.bin
loaded 24000 samples
proxmark3> mandemod
> mandemod
Auto-detected clock rate: 64
Manchester decoded bitstream
0 1 1 0 0 0 0 0 0 1 1 1 1 0 0 1
1 0 1 0 1 0 0 1 1 1 1 0 0 1 0 0
1 0 0 1 0 1 0 0 1 1 0 0 1 0 1 0
1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0
0 1 1 0 0 0 0 0 0 1 1 1 1 0 0 1
1 0 1 0 1 0 0 1 1 1 1 0 0 1 0 0
1 0 0 1 0 1 0 0 1 1 0 0 1 0 1 0
1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0
0 1 1 0 0 0 0 0 0 1 1 1 1 0 0 1
1 0 1 0 1 0 0 1 1 1 1 0 0 1 0 0
1 0 0 1 0 1 0 0 1 1 0 0 1 0 1 0
1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0
0 1 1 0 0 0 0 0 0 1 1 1 1 0 0 1
1 0 1 0 1 0 0 1 1 1 1 0 0 1 0 0
1 0 0 1 0 1 0 0 1 1 0 0 1 0 1 0
1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0
0 1 1 0 0 0 0 0 0 1 1 1 1 0 0 1
1 0 1 0 1 0 0 1 1 1 1 0 0 1 0 0
1 0 0 1 0 1 0 0 1 1 0 0 1 0 1 0
1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0
0 1 1 0 0 0 0 0 0 1 1 1 1 0 0 1
1 0 1 0 1 0 0 1 1 1 1 0 0 1 0 0
1 0 0 1 0 1 0 0 1 1 0 0 1 0 1 0