ATNEL tech-forum

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T13:54:55+01:00

Dzięki za niesamowite źródło wiedzy. Tyle już czytałem a jeszcze nie trafiłem w necie na ten artykuł.

Statystyki: Napisane przez matrix — 16 maja 2014, o 13:54

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T13:31:32+01:00

Żeby niepotrzebnie się nie rozpisywać, polecam poczytać pdf'a który opisuje kod stały i zmienny, w tym dosyć dobrze KEELOQ'a.
Jakiś czas temu na stronie Proximy było o ile pamiętam.

Statystyki: Napisane przez Sonix — 16 maja 2014, o 13:31

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T13:16:18+01:00

Z tego co zrozumiałem z helpa to keeloq tool służy do wygenerowania kodów do pilota jak i do odbiornika, żeby na podstawie kodu manufaktury stworzyć soft do odkodowywania klucza wysyłanego przez pilota podczas transmisji.
Tylko do czego na przykład jest seed ? Jest on też użyty w sofcie który przedstawiłem na początku,

Statystyki: Napisane przez matrix — 16 maja 2014, o 13:16

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T13:03:36+01:00

No tak... nie ma to jak pytać o coś co mam pod nosem

Mój Program Files\Microchip:

Do KeeloqTool nigdy nie zaglądałem

Statystyki: Napisane przez Sonix — 16 maja 2014, o 13:03

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T12:03:08+01:00

Nie pamiętam skąd mam ten programik. Jak ściągnąłem coś ze strony Microchip'a to się ściągnął ten program i kilkanaście pdf'ów z notami aplikacyjnymi i zdaje się kodami źródłowymi.
Całość zapisała się w program files jako C:\Program Files\Microchip\KeeLoq Decryption Software

Statystyki: Napisane przez matrix — 16 maja 2014, o 12:03

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T11:40:48+01:00

Pierwszy raz widzę ten programik, podejrzewam że jakiś emulator HCS'a.
Podrzuć jakiegoś linka to zobaczę przy okazji

Statystyki: Napisane przez Sonix — 16 maja 2014, o 11:40

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T11:35:08+01:00

Tak myślałem tylko jakoś nie potrafię tego ogarnąć. Ale z czasem może coś się uda zdziałać.

Pytanie dodatkowe, co to jest ?

Statystyki: Napisane przez matrix — 16 maja 2014, o 11:35

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T11:32:55+01:00

matrix napisał(a):

....A gdybym chciał samodzielnie wykonać programator na podstawie schematu który pokazany jest wyżej, to czym skompilować i wgrać wsad który przedstawiłem na początku ?

Na przykład MPLAB IDE od Microchipa, ostatnia wersja np. tutaj:

http://ww1.microchip.com/downloads/en/D ... E_8_92.zip

Teraz jest MPLABX IDE ale tego jakoś nie trawię....

Statystyki: Napisane przez Sonix — 16 maja 2014, o 11:32

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T11:03:50+01:00

Sądzę że dowiedziałem się wszystkiego co było mi potrzebne. Dziękuję za wyczerpującą odpowiedź.

A gdybym chciał samodzielnie wykonać programator na podstawie schematu który pokazany jest wyżej, to czym skompilować i wgrać wsad który przedstawiłem na początku ?

Statystyki: Napisane przez matrix — 16 maja 2014, o 11:03

Re: Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T10:50:46+01:00

matrix napisał(a):

Kod manufaktry i klucz producenta to jest to samo.
Do zaprogramowania HCS (200,300, 301) potrzebujesz 'wbić' do niego numer seryjny, klucz producenta i jeszcze kilka parametrów (np. timingi transmisji, tryb pracy SIMPLE lub NORMAL itp), to właśnie parametry z sekcji MODIFYABLE PROGRAMMING DEFINE.

Klucz producenta jest zawsze stały. Jeżeli analizowałeś cały kod programatora HCS'ów na PIC16F84a to pewnie zauważyłeś że serial jest zwiększany po każdym zaprogramowaniu i zapisywany w eeprom PIC'a programatora.

matrix napisał(a):

Wiadomo że kluczy tych nikt (FAAC, Nice czy Beninca) nie udostępni, ale co jeśli chciałbym sam sobie zrobić własnego pilota opartego o keeloq i mój wymyślony kod manufaktury i mój wymyślony klucz producenta?
Jak przygotować plik gotowy do wgrania w układ HCS200 ?
Czym skompilować ?
Skąd wziąć czysty keeloq pod HCS'a ?

Nie przygotowujesz żadnego pliku. Kupujesz HCS200 i programujesz mu parametry opisane powyżej.
w HCS'ach jest zaszyty program, a Ty programujesz tylko jego parametry, które są przechowywane w eeprom.

Najsensowniej jest kupić gotowy pilot na 433MHZ lub 868MHz (zależy jaki odbiornik zastosujesz) z układem HCS na pokładzie i zaprogramować go swoim danymi.
Ten kod asm który podałeś, jest to program do PIC16F84A który służy jako programator HCS'ów w takim układzie:

matrix napisał(a):

Firma bodajże Modernsoft (nie reklamuję jej tylko u nich znalazłem) ma w swojej ofercie programator HCS:

http://www.modernsoft.pl/upload/Programator200.pdf

Czy tym programatorem kompleksowo zaprogramuję pilota opartego o HCS200 ?

Pisząc ten temat wpadła mi do głowy taka myśl że keeloq wpisany jest w dany programator (w PIC'a danego programatora) stąd nie mogę znaleźć czystego keeloq dedykowanego właśnie dla HCS200.

Czy dobrze myślę że to co poniżej jest keeloq'iem właśnie wpisanym w PIC16f84A który to jest użyty jako programator ?
Podanie kodu manufaktury i klucza producenta następuje w sekcji MODIFYABLE PROGRAMMING DEFINE co zresztą napisane jest na początku tego programu.

Jest to programator bazowany na tym kodzie który podałeś, ale rozszerzony o procedury odbiorcze i wyświetlanie informacji na LCD.
Tak czy inaczej zaprogramujesz nim HCS'y.
Jeżeli nie potrzebujesz 'bajerów', zmontuj układ który podałem wyżej

Na resztę pytań powinieneś znaleźć odpowiedź wyżej

Statystyki: Napisane przez Sonix — 16 maja 2014, o 10:50

Keeloq i HCS200 - jak zaprogramować ?

2014-05-16T09:51:27+01:00

Mam takie myślę ciekawe pytanie.
Ostatnio chciałem się dowiedzieć czegoś więcej na temat systemu zabezpieczeń keeloq firmy Microchip, tylko tak bardziej od strony programowania.
Naczytałem się że sam keeloq jako taki dostępny jest za darmo, żeby zaprogramować procesor HCS200 trzeba dysponować kodem manufaktury oraz kluczem producenta. Wiadomo że kluczy tych nikt (FAAC, Nice czy Beninca) nie udostępni, ale co jeśli chciałbym sam sobie zrobić własnego pilota opartego o keeloq i mój wymyślony kod manufaktury i mój wymyślony klucz producenta?
Jak przygotować plik gotowy do wgrania w układ HCS200 ?
Czym skompilować ?
Skąd wziąć czysty keeloq pod HCS'a ?

Firma bodajże Modernsoft (nie reklamuję jej tylko u nich znalazłem) ma w swojej ofercie programator HCS:

http://www.modernsoft.pl/upload/Programator200.pdf

Czy tym programatorem kompleksowo zaprogramuję pilota opartego o HCS200 ?

Pisząc ten temat wpadła mi do głowy taka myśl że keeloq wpisany jest w dany programator (w PIC'a danego programatora) stąd nie mogę znaleźć czystego keeloq dedykowanego właśnie dla HCS200.

Czy dobrze myślę że to co poniżej jest keeloq'iem właśnie wpisanym w PIC16f84A który to jest użyty jako programator ?
Podanie kodu manufaktury i klucza producenta następuje w sekcji MODIFYABLE PROGRAMMING DEFINE co zresztą napisane jest na początku tego programu.

[syntax=asm];===========================================================================
; MICROCHIP KEELOQ HCS200 - HCS300 - HCS301 STANDALONE PROGRAMMER
;===========================================================================

; THIS STANDALONE PROGRAMMER APPLY THE NORMAL LEARN SCHEME TO GENERATE THE
; ENCRYPTION KEY STARTING FROM THE MANUFACTURER CODE AND THE SERIAL NUMBER.
; THE SERIAL NUMBER IS INCREMENTED EVERY TIME A HCS PROGRAMMING HAPPEN
; AND IS STORED IN THE INTERNAL DATA EEPROM OF THE PIC16F84A
;
; THE HCS MANUFACTURER CODE AND THE CONFIGURATION WORD CAN BE CHANGED
; IN THE SECTION BELOW NAMED "MODIFYABLE PROGRAMMING DEFINE"

;===========================================================================
;VERSION1.0,09/03/99
;===========================================================================

PROCESSOR PIC16F84A
RADIX DEC

INCLUDE "P16F84A.INC"

__CONFIG _XT_OSC & _CP_OFF & _WDT_ON & _PWRTE_ON

;========================================================================================
;
; PIC16F84A
; -------_--------
; HCSVDD | 1 RA2 RA1 18| CLK (to HCS slave: S2)
; | 2 RA3TC RA0 17| DATA (to HCS slave: PWM)
; | 3 RA4 OSC1 16| OSCin
; reset | 4 MCLR OSC2 15| OSCtest
; Vss | 5 Vss Vdd 14| Vdd
; | 6 RB0 RB7 13| PROG
; | 7 RB1 RB6 12| LED
; | 8 RB2 RB5 11|
; | 9 RB3 RB4 10|
; ----------------
;
;========================================================================================
; MACROS

#DEFINE BANK0 bcf STATUS,RP0
#DEFINE BANK1 bsf STATUS,RP0

;========================================================================================
; I/O PORT ASSIGNEMENT

; PORTA BIT DEFINITIONS
#DEFINE DATA PORTA,0 ; (IN/OUT) Data (PWM) for Programming HCS
#DEFINE CLK PORTA,1 ; (OUT)Clock (S2) for Programming HCS
#DEFINE HCSVDD PORTA,2 ; (OUT) HCS Vdd line

; PORTB BIT DEFINITIONS
#DEFINE LED PORTB,6 ; (OUT) Program/failure led indicator
#DEFINE PROG PORTB,7 ; (IN)Programming Key
#DEFINE SWRES PORTB,7 ; (IN)Sw reset Key on programming failure
#DEFINE COFNIJ PORTB,5 ; (IN)COFA NUMER SERYJNY O JEDEN

;---------------
; PORT DIRECTION DEFINE REG
#DEFINE K_MASKPA B'11111000'; PORTA: TRI-STATE VALUE
#DEFINE K_MASKPB B'10111111'; PORTB: TRI-STATE VALUE
#DEFINE K_MASKPA_PROG B'11111000'; PORTB: TRI-STATE FOR PROGRAMMING HCS
#DEFINE K_MASKPA_VERI B'11111001'; PORTB: TRI-STATE FOR VERIFY HCS

#DEFINE K_OPTION B'00000111' ; OPTION REGISTER SETTING
; PORTB PULL-UP ON, TMR0 associated to Tcy, Prescaler=1:256

;========================================================================================

; GENERAL PURPOSE RAM REGISTERS

CBLOCK0x0C

; Word clocked into HCS
WRD_HI,WRD_LO
; Words to be programmed into HCS (HCS MEMORY MAPPING)
WORD0:2, WORD1:2, WORD2:2, WORD3:2
WORD4:2, WORD5:2, WORD6:2, WORD7:2
WORD8:2, WORD9:2, WORD10:2, WORD11:2
; Other Variable for programming HCS
TXNUM ; Number of bit clocked
TMP_CNT ; Temporary Counter
MYCONT ; "
COUNT_HI, COUNT_LO ; Counter for Timing

; Generated Encryption KEY
KEY7, KEY6, KEY5, KEY4
KEY3, KEY2, KEY1, KEY0
; Circular Buffer used in decryption routine
CSR4, CSR5, CSR6, CSR7
CSR0, CSR1, CSR2, CSR3
; Counter used in decryption routine
CNT0, CNT1
; Mask register used in decryption routine
MASK
; Temporary Register
TMP0, TMP1, TMP2, TMP3 ; Temp register

ENDC

; End of define general purpose RAM register

;========================================================================================
; ************** DECRYPTION REGISTER RE-MAPPINGS *******************
; NOTE : INDIRECT ADDRESSING USED, DO NOT CHANGE REGISTER ASSIGNMENT
; ******************************************************************
; 32 BIT HOPCODE BUFFER

#DEFINE HOP1 CSR0
#DEFINE HOP2 CSR1
#DEFINE HOP3 CSR2
#DEFINE HOP4 CSR3

; 28 BIT SERIAL NUMBER

SER_3 EQU CSR7 ; LSB
SER_2 EQU CSR6
SER_1 EQU CSR5
SER_0 EQU CSR4 ; MSB

;========================================================================================
; MODIFYABLE PROGRAMMING DEFINE
;========================================================================================

#DEFINE KEY_METHOD 1 ; MUST BE 1 IF NORMAL KEY GENERATION METHOD TO BE USED
; MUST BE 0 IF SIMPLE KEY GENERATION METHOD TO BE USED
; (ENCRYPTION KEY= MANUFACTURER KEY)

#DEFINE HCS30X 0 ; MUST BE 1 IF PROGRAMMING HCS300-301,
; MUST BE 0 IF PROGRAMMING HCS200

#DEFINE MCODE_0 0xCDEF ; MANUFACTURER CODE, LSWORD
#DEFINE MCODE_1 0x89AB
#DEFINE MCODE_2 0x4567
#DEFINE MCODE_3 0x0123 ; MSWORD

#DEFINE SYNC 0X0000 ; SYNCRONOUS COUNTER

#DEFINE SEED_0 0x0000 ; 2 WORD SEED VALUE
#DEFINE SEED_1 0x0000
#DEFINE ENV_KEY 0x0000 ; ENVELOPE KEY ( NOT USED FOR HCS200)

#DEFINE AUTOFF 1 ; AUTO SHUT OFF TIMER ( NOT USED FOR HCS200)

#DEFINE DISC70 0x00 ; DISCRIMINATION BIT7-BIT0
#DEFINE DISC8 0 ; DISCRIMINATION BIT8
#DEFINE DISC9 0 ; DISCRIMINATION BIT9
#DEFINE OVR0 0 ; OVERFLOW BIT0 (DISC10 for HCS200)
#DEFINE OVR1 0 ; OVERFLOW BIT1 (DISC11 for HCS200)
#DEFINE VLOW 1 ; LOW VOLTAGE TRIP POINT SELECT BIT (1=High voltage)
#DEFINE BSL0 0 ; BAUD RATE SELECT BIT0
#DEFINE BSL1 0 ; BAUD RATE SELECT BIT1 (RESERVED for HCS200)
#DEFINE EENC 0 ; ENVELOPE ENCRYPTION SELECT (RESERVED for HCS200)

#DEFINE DISEQSN1 ; IF DISEQSN=1 SET DISCRIMINANT EQUAL TO SERNUM BIT10-0
; IF DISEQSN=0 SET DISCRIMINANT AS DEFINED ABOVE

;========================================================================================
; OTHER EQUATE
;========================================================================================

#DEFINE NUM_WRD .12 ; NUMBER OF WORD TO PROGRAM INTO HCS
#DEFINE RES 0X0000 ; RESERVED WORD

#DEFINE CONF_HI ((EENC<<7)|(BSL1<<6)|(BSL1<<5)|(VLOW<<4)|(OVR1<<3)|(OVR0<<2)|(DISC9<<1)|DISC8)

; ****** HCS TIME PROGRAMMING EQUATE ********
#DEFINE Tps .4 ; PROGRAM MODE SETUP TIME 4mS (3,5mS min, 4,5 max)
#DEFINE Tph1 .4 ; HOLD TIME 1 4mS (3,5mS min)
#DEFINE Tph2 .19 ; HOLD TIME 2 62uS (50uS min)
#DEFINE Tpbw .3 ; BULK WRITE TIME 3mS (2,2mS min)
#DEFINE Tclkh .10 ; CLOCK HIGH TIME 35uS (25uS min)
#DEFINE Tclkl .10 ; CLOCK LOW TIME 35uS (25uS min)
#DEFINE Twc .40 ; PROGRAM CYCLE TIME 40mS (36mS min)

; NOTE: FOR mS TIME DELAY USE WAIT_WMSEC SUBROUTINE ( W * 1mSec )
; FOR uS TIME DELAY USE WAIT_uS SUBROUTINE ( 5 + Txxx*3 uS )

;========================================================================================
;========================================================================================

;========================================================================================
; FUNCTION : RESET ()
; DESCRIPTION : PROGRAM RESET ROUTINE
;======================================================================================================================================= 0000000000

ORG 0x00
RESET_VECTOR
goto START

;========================================================================================
; FUNCTION : ISR_VECTOR ()
; DESCRIPTION : INTERRUPT SERVICE ROUTINE VECTOR
;========================================================================================

ORG 0x04
ISR_VECTOR
retfie

;========================================================================================

;========================================================================================
;========================================================================================
; SUBROUTINES SUBROUTINES SUBROUTINES SUBROUTINES SUBROUTINES
;========================================================================================
;========================================================================================

;========================================================================================
; FUNCTION : INITREG
; DESCRIPTION : REGISTER INIZIALIZATION
;========================================================================================

INITREG clrfSTATUS
clrfINTCON ; INTERRUPT DISABLED
clrfPORTA ; RESET PORTA
clrfPORTB ; RESET PORTB
BANK1
movlwK_OPTION ; INT CLK, PRESCALER TO TMR0, ON PULL-UP
movwfOPTION_REG
movlwK_MASKPA ; SETUP PORTA
movwfTRISA
movlwK_MASKPB ; SETUP PORTB
movwfTRISB
BANK0
clrfTMR0
return

;========================================================================================
; FUNCTION : INITREG
; DESCRIPTION : REGISTER INIZIALIZATION
;========================================================================================

CLEAR_RAM movlw0x0C
movwfFSR
CLEAR_RAM_LOOP clrfINDF
incfFSR,F
movlw0x50
xorwfFSR,W
skpz
gotoCLEAR_RAM_LOOP
return

;========================================================================================
; FUNCTION : WAIT_uS ()
; DESCRIPTION : WAIT 5+W*3 MICROSECOND SUBROUTINE
;========================================================================================

WAIT_uS movwfCOUNT_LO
WAIT_uS_A decfszCOUNT_LO, F
gotoWAIT_uS_A
return

;========================================================================================
; FUNCTION : DEBOUNCE - WAIT_16MSEC - WAIT_WMSEC ()
; DESCRIPTION : WAIT 16mSec or W mSec SUBROUTINE

;======================================================================================================================================22222222

DEBOUNCE
WAIT_16MSEC movlw.16
WAIT_WMSEC movwfCOUNT_HI
WAITSET movlw.250
movwfCOUNT_LO
WAITLOOP clrwdt
decfszCOUNT_LO,F
gotoWAITLOOP
decfszCOUNT_HI,F
gotoWAITSET
return

;========================================================================================
; FUNCTION : BUTTON RELEASE ()
; DESCRIPTION : WAIT FOR BUTTON RELEASE
;========================================================================================

BUTTON_RELEASE clrwdt
btfssPROG
gotoBUTTON_RELEASE
callDEBOUNCE
return

;========================================================================================
; FUNCTION : READ_SN ()
; DESCRIPTION : READ LAST SERIAL NUMBER STORED IN THE PIC16F84A EEPROM DATA,
; AND INCREMENT IT INTO NEW SER_x

;========================================================================================

read_eprom:

READ_SN movlwSER_3
movwfFSR
clrfMYCONT; COUNTER OF BYTE
; READ FROM DATA EEPROM
READ_SN_A clrwdt
movfMYCONT,W
movwfEEADR
BANK1
bsfEECON1, RD; do a read
clrwdt
btfscEECON1, RD; Read done ?
goto$-2
BANK0
movfEEDATA,W
movwfINDF
incfMYCONT, F
movlw.4
xorwfMYCONT, W; TEST IF 4 BYTE READ
bzREAD_SN_INC
decfFSR, F
gotoREAD_SN_A

READ_SN_INC incfszSER_3, F; LOW BYTE: INCREMENT SN
gotoREAD_SN_X
incfszSER_2, F
gotoREAD_SN_X
incfszSER_1, F
gotoREAD_SN_X
incfSER_0, F

READ_SN_X return

save_eprom:

;========================================================================================
; FUNCTION : WRITE_SN ()
; DESCRIPTION : SAVE INTO PIC16F84A EEPROM DATA THE LAST PROGRAMMED SERIAL
; : NUMBER
;========================================================================================

WRITE_SN clrwdt
movlwSER_3
movwfFSR
clrfMYCONT; COUNTER OF BYTE
; WRITTEN TO DATA EEPROM
WRITE_SN_BYTE clrwdt
movfMYCONT, W
movwfEEADR
movfINDF, W
movwfEEDATA
BANK1
bcfEECON1, EEIF
bsfEECON1, WREN; enable Write
movlw0x55
movwfEECON2
movlw0xAA
movwfEECON2
bsfEECON1, WR
WRITE_SN_A clrwdt
btfscEECON1, WR; Write complete ?
gotoWRITE_SN_A
bcfEECON1, WREN; disable Write
VERIFY_WRITE
BANK0
movfEEDATA, W
BANK1
bsfEECON1, RD; do a read
clrwdt
btfscEECON1, RD; Read done ?
goto$-2
BANK0
xorwfEEDATA, W
BNZEE_ERR; EEPROM WRITE ERROR

incfMYCONT, F
movlw.4
xorwfMYCONT, W; TEST IF WRITTEN ALL THE 4 BYTES
BZWRITE_SN_X
decfFSR, F
gotoWRITE_SN_BYTE
WRITE_SN_X return

;========================================================================================
; FUNCTION : MEM_MAP ()
; DESCRIPTION : PREPARE THE WORDS TO BE PROGRAMMED INTO HCS
;========================================================================================

MAP_SET movlwWORD0
movwfFSR
WORD_0 ; ENCRYPTION KEY (4 WORD)
WORD_0_LO movfKEY0,W
movwfINDF
incfFSR, F
WORD_0_HI movfKEY1,W
movwfINDF
incfFSR, F
WORD_1
WORD_1_LO movfKEY2,W
movwfINDF
incfFSR, F
WORD_1_HI movfKEY3,W
movwfINDF
incfFSR, F
WORD_2
WORD_2_LO movfKEY4,W
movwfINDF
incfFSR, F
WORD_2_HI movfKEY5,W
movwfINDF
incfFSR, F
WORD_3
WORD_3_LO movfKEY6,W
movwfINDF
incfFSR, F
WORD_3_HI movfKEY7,W
movwfINDF
incfFSR, F
WORD_4 ; SYNC COUNTER (1 WORD)
WORD_4_LO movlwLOW(SYNC)
movwfINDF
incfFSR, F
WORD_4_HI movlwHIGH(SYNC)
movwfINDF
incfFSR, F
WORD_5 ; RESERVED (1 WORD)
WORD_5_LO movlwLOW(RES)
movwfINDF
incfFSR, F
WORD_5_HI movlwHIGH(RES)
movwfINDF
incfFSR, F
WORD_6 ; SERIAL NUMBER (2 WORD)
WORD_6_LO movfSER_3, W ; LSByte
movwfINDF
incfFSR, F
WORD_6_HI movfSER_2, W
movwfINDF
incfFSR, F
WORD_7
WORD_7_LO movfSER_1, W
movwfINDF
incfFSR, F
WORD_7_HI movfSER_0, W ; MSByte
andlwB'00001111'
iorlw(AUTOFF<<7) ; SET THE AUTO SHUT-OFF TIMER
movwfINDF
incfFSR, F
WORD_8 ; SEED VALUE ( 2 WORD)
WORD_8_LO movlwLOW(SEED_0)
movwfINDF
incfFSR, F
WORD_8_HI movlwHIGH(SEED_0)
movwfINDF
incfFSR, F
WORD_9
WORD_9_LO movlwLOW(SEED_1)
movwfINDF
incfFSR, F
WORD_9_HI movlwHIGH(SEED_1)
movwfINDF
incfFSR, F
WORD_10 ; ENVELOPE KEY (1 WORD)
; (RESERVED FOR HCS200 SET TO 0x0000)
WORD_10_LO movlw(LOW(ENV_KEY) * HCS30X)
movwfINDF
incfFSR, F
WORD_10_HI movlw(HIGH(ENV_KEY) * HCS30X)
movwfINDF
incfFSR, F
WORD_11
WORD_11_LO movfSER_3, W ; CONFIGURATION WORD
movwfINDF ; LOWER BYTE=LOWEST BYTE OF SERIAL NUMBER
incfFSR, F
WORD_11_HI movfSER_2, W
ANDLWB'00000011' ; MASK BIT OF SER. NUM.
IORLWCONF_HI ; MASK OTHER BIT OF CONFIG WORD
movwfINDF
incfFSR, F
return

;========================================================================================
; FUNCTION : PREPARE_WRD ()
; DESCRIPTION : PUT IN WRD_LO & WRD_HI THE WORD TO BE CLOCKED OUT (PWM)
;========================================================================================

PREPARE_WRD movfINDF, W
movwfWRD_LO
incfFSR, F
movfINDF, W
movwfWRD_HI
incfFSR, F
return

;========================================================================================
; FUNCTION : DECRYPT ()
; DESCRIPTION : DECRYPTS 32 BIT [HOP1:HOP4] USING [CSR0:CSR7]
;========================================================================================

DECRYPT
movlw .11 +.1; OUTER LOOP 11+1 TIMES
movwfCNT1; OUTER LOOP 11+1 TIMES
DECRYPT_OUTER
movlw .48; INNER LOOP 48 TIMES
movwf CNT0; INNER LOOP 48 TIMES
DECRYPT_INNER
clrwdt; RESET WATCHDOG TIMER
movfw CNT1; LAST 48 LOOPS RESTORE THE KEY
xorlw .1; LAST 48 LOOPS RESTORE THE KEY
skpnz; LAST 48 LOOPS RESTORE THE KEY
goto ROTATE_KEY; LAST 48 LOOPS RESTORE THE KEY

; THE LOOKUP TABLE IS COMPRESSED INTO IN 4 BYTES TO SAVE SPACE
; USE THE 3 LOW INDEX BITS TO MAKE UP AN 8-BIT BIT MASK
; USE THE 2 HIGH INDEX BITS TO LOOK UP THE VALUE IN THE TABLE
; USE THE BIT MASK TO ISOLATE THE CORRECT BIT IN THE BYTE
; PART OF THE REASON FOR THIS SCHEME IS BECAUSE NORMAL TABLE
; LOOKUP REQUIRES AN ADDITIONAL STACK LEVEL

clrc; CLEAR CARRY (FOR THE LEFT SHIFT)
movlw .1; INITIALISE MASK = 1
btfsc HOP3,3; SHIFT MASK 4X IF BIT 2 SET
movlw b'10000'; SHIFT MASK 4X IF BIT 2 SET
movwf MASK; INITIALISE MASK = 1

btfss HOP2,0; SHIFT MASK ANOTHER 2X IF BIT 1 SET
goto $+3
rlf MASK,F
rlf MASK,F

btfsc HOP1,0; SHIFT MASK ANOTHER 1X IF BIT 0 SET
rlf MASK,F

; MASK HAS NOW BEEN SHIFTED 0-7 TIMES ACCORDING TO BITS 2:1:0

movlw 0; TABLE INDEX = 0
btfsc HOP4,1
iorlw .2; IF BIT 3 SET ADD 2 TO THE TABLE INDEX
btfsc HOP4,6
iorlw .4; IF BIT 4 SET ADD 4 TO THE TABLE INDEX

addwf PCL,F; ADD THE INDEX TO THE PROGRAM COUNTER
; [ MUST BE IN LOWER HALF OF PAGE ]
TABLE
movlw 0x2E; BITS 4:3 WERE 00
goto TABLE_END; END OF LOOKUP

movlw 0x74; BITS 4:3 WERE 01
goto TABLE_END; END OF LOOKUP

movlw 0x5C; BITS 4:3 WERE 10
goto TABLE_END; END OF LOOKUP

movlw 0x3A; BITS 4:3 WERE 11

TABLE_END
andwf MASK,F; ISOLATE THE CORRECT BIT
movlw .0; COPY THE BIT TO BIT 7
skpz; COPY THE BIT TO BIT 7
movlw b'10000000'; COPY THE BIT TO BIT 7

xorwf HOP2,W; ONLY INTERESTED IN BIT HOP2,7
xorwf HOP4,W; ONLY INTERESTED IN BIT HOP4,7
xorwf KEY1,W; ONLY INTERESTED IN BIT KEYREG1,7

movwf MASK; STORE W TEMPORARILY (WE NEED BIT 7)
rlf MASK,F; LEFT ROTATE MASK TO GET BIT 7 INTO CARRY

rlf HOP1,F; SHIFT IN THE NEW BIT
rlf HOP2,F
rlf HOP3,F
rlf HOP4,F

ROTATE_KEY
clrc; CLEAR CARRY
btfsc KEY7,7; SET CARRY IF LEFTMOST BIT SET
setc; SET CARRY IF LEFTMOST BIT SET

rlf KEY0,F; LEFT-ROTATE THE 64-BIT KEY
rlf KEY1,F
rlf KEY2,F
rlf KEY3,F
rlf KEY4,F
rlf KEY5,F
rlf KEY6,F
rlf KEY7,F

decfsz CNT0,F; INNER LOOP 48 TIMES
goto DECRYPT_INNER; INNER LOOP 48 TIMES

decfsz CNT1,F; OUTER LOOP 12 TIMES (11+1 TO RESTORE KEY)
goto DECRYPT_OUTER; OUTER LOOP 12 TIMES (11+1 TO RESTORE KEY)

retlw.0; RETURN

;========================================================================================
; FUNCTION : CALC_KEY ()
; DESCRIPTION : GENERATE 32 BITS ENCRYPTION KEY USING THE MANUFACTURER CODE STORED IN ROM
;========================================================================================

CALC_KEYiorwfSER_0,W; PATCH 28 BIT SERIAL NUMBER
movwfCSR3; ... AND COPY TO DECRYPT BUFFER
movfSER_1,W
movwfCSR2
movfSER_2,W
movwfCSR1
movfSER_3,W
movwfCSR0
CALC_KEY2callDECRYPT ; DECRYPT 32 BIT USING MASTER KEY
return

;========================================================================================
; FUNCTION : NORMAL_KEY_GEN ()
; DESCRIPTION : GENERATE THE 64 BITS ENCRYPTION KEY USING THE MANUFACTURER CODE STORED IN ROM
;========================================================================================

NORMAL_KEY_GEN; COPY THE MANUFACTURER CODE INTO
movlwHIGH(MCODE_3); ENCRYPTION KEY (BYTE)
movwfKEY7
movlwLOW(MCODE_3)
movwfKEY6
movlwHIGH(MCODE_2)
movwfKEY5
movlwLOW(MCODE_2)
movwfKEY4
movlwHIGH(MCODE_1)
movwfKEY3
movlwLOW(MCODE_1)
movwfKEY2
movlwHIGH(MCODE_0)
movwfKEY1
movlwLOW(MCODE_0)
movwfKEY0
;---------------
NORMAL_KEY_GEN_PATCH1; DERIVE LOWER 32 BITS OF DECRYPTION KEY FROM SN
movlw0x20; PATCH REQUIRED FOR HCS NORMAL ENCODER
callCALC_KEY
movfCSR3,W; TEMPORARY STORE LOWER 32 BITS
movwfTMP3
movfwCSR2
movwfTMP2
movfwCSR1
movwfTMP1
movfwCSR0
movwfTMP0
;---------------
NORMAL_KEY_GEN_PATCH2; PATCH REQUIRED FOR HCS NORMAL ENCODER
movlw0x60
callCALC_KEY
movfwCSR3; STORE UPPER 32 BITS OF DERIVED KEY
movwfKEY7; .... IN 64 BIT KEY BUFFER
movfwCSR2
movwfKEY6
movfwCSR1
movwfKEY5
movfwCSR0
movwfKEY4
;---------------
NORMAL_KEY_GEN_REC
movfwTMP3; RECOVER LOWER 32 BITS OF DERIVED KEY
movwfKEY3; ... AND STORE IN 64 BIT KEY BUFFER
movfwTMP2
movwfKEY2
movfwTMP1
movwfKEY1
movfwTMP0
movwfKEY0
return

;========================================================================================

;========================================================================================================================================= 11

START callINITREG
callCLEAR_RAM

bsfLED; LED ON PWUP
movlw.250; WAIT 250Msec with LED ON
callWAIT_WMSEC
bcfLED; LED OFF
gotoM_LOOP

;========================================================================================
; FUNCTION : M_LOOP ()
; DESCRIPTION : MAIN PROGRAM ROUTINE
;========================================================================================================================================= 22

M_LOOP clrwdt; WAIT FOR PROGRAMMING BUTTON PRESS
btfscPROG
gotoM_LOOP
call read_eprom ;dopisałem bo nie działał
call save_eprom ;dopisałem bo nie działał
callDEBOUNCE

;------------------------------------------------------------------------------------------------------------------------------------------- 33
; PROGRAMMING ROUTINES
;----------------------------------------------------------------------------------------
M_KEY_GEN callREAD_SN; odczytaj numer z eeproma ( numer serial)
clrwdt
callNORMAL_KEY_GEN ; wylicz normal key gen
callMAP_SET; PREPARE EEPROM MEMORY MAP

;---------------; ENTER IN PROGRAMMING MODE AND BULK ERASE
M_PROGRAMMING
M_PROG_INIT bcfDATA; DATA=0
bcfCLK; CLK=0
bsfHCSVDD; HCS POWER ON
BANK1
movlwK_MASKPA_PROG
movwfTRISA
BANK0
callWAIT_16MSEC

M_PROG_SETUP bsfCLK; DATA=0, CLK=1
movlwTps; WAIT Program mode Setup Time (Tps)
callWAIT_WMSEC

bsfDATA; DATA=1, CLK=1
movlwTph1; WAIT Program Hold Time 1 (Tph1)
callWAIT_WMSEC

bcfDATA; DATA=0, CLK=1
movlwTph2; WAIT Program Hold Time 2 (Tph2)
callWAIT_uS

M_PROG_BULK_ER bcfCLK; DATA=0, CLK=0
movlwTpbw; WAIT Program Bulk Write Time (Tpbw)
callWAIT_WMSEC

;---------------; CLOCK INTO HCS THE WORDS TO BE PROGRAMMED
clrfTMP_CNT; NUMBER OF WORD TRASMITTED
movlwWORD0; SET INDIRECT PONTER TO INIT EE MAP
movwfFSR

M_NEW_WORD callPREPARE_WRD

;---------------; OUTPUT WORD ROTATE
clrfTXNUM; NUMBER OF BIT TRASMITTED FOR EACH WORD

M_TX_BIT bsfCLK; CLK=1
clrc
rrfWRD_HI, F; ROTATE BIT TO OUTPUT
rrfWRD_LO, F; into CARRY FLAG
skpnc
gotoM_PROG_DHI
nop
M_PROG_DLO bcfDATA; DATA=0
gotoM_PROG_BIT
M_PROG_DHI bsfDATA; DATA=1

M_PROG_BIT movlwTclkh
callWAIT_uS; DELAY
bcfCLK; CLK=0
movlwTclkl
callWAIT_uS; DELAY
;---------------
M_PROG_CHK_WORD incfTXNUM, F; INCREMENT NUMBER OF BIT TRASMITTED
movlw.16; CHECK IF END OF WORD TRASMITTED (16 BITS)
xorwfTXNUM, W
skpz
gotoM_TX_BIT; TRASMIT NEXT BIT

;---------------; END OUTPUT WORD
M_END_WORD bcfDATA; DATA=0
movlwTwc; WAIT FOR WORD Write Cycle Time (Twc)
callWAIT_WMSEC

;---------------
M_CECHK_PRG_END incfTMP_CNT, F; INCREMENT NUMBER OF WORD PROGRAMMED
movlwNUM_WRD; CHECK NUMBER OF WORD TRASMITTED
xorwfTMP_CNT, W
skpz
gotoM_NEW_WORD; PROGRAM NEW WORD

;----------------------------------------------------------------------------------------
; VERIFY ROUTINE
;----------------------------------------------------------------------------------------

weryfikacja:
M_VERIFY
BANK1
movlwK_MASKPA_VERI ; I/O TRISTATE FOR VERIFY
movwfTRISA
BANK0
clrwdt
movlwWORD0; SET INDIRECT POINTER TO INIT EE MAP
movwfFSR

clrfTMP_CNT; NUMBER OF WORDS RECIVED
clrfTXNUM; NUMBER OF BIT RECEIVED FOR EACH WORD
;---------------
M_VER_BITIN clrc; RECIVE DATA BIT FROM HCS FOR VERIFY
btfscDATA; TEST and ROTATE RECEIVED BIT INTO WORD BUFFER
setc
rrfWRD_HI, F
rrfWRD_LO, F
incfTXNUM, F
movlw.16
xorwfTXNUM, W; TEST IF RECEIVED A COMPLETE WORD
skpz
gotoM_VER_CLKHI
;---------------
M_VERIFY_WORD movfWRD_LO, W; 16th BIT RECIVED (WORD) -> VERIFY WORD
xorwfINDF, W
skpz
gotoPROG_ERR; WORD LOW VERIFY ERROR
incfFSR, F
movfWRD_HI, W
xorwfINDF, W
skpz
gotoPROG_ERR; WORD HIGH VERIFY ERROR

incfFSR, F
incfTMP_CNT, F
movlwNUM_WRD
xorwfTMP_CNT, W; TEST IF RECEIVED ALL THE WORDS PROGRAMMED
skpnz
gotoPROG_SUCCESS; ALL 12 WORDS VERIFIED WITH SUCCESS

clrfTXNUM
;---------------
M_VER_CLKHI bsfCLK; CLK=1
movlwTclkh; WAIT TIME CLOCK HIGH
callWAIT_uS

M_VER_CLKLO bcfCLK; CLK=0
movlwTclkl; WAIT TIME CLOCK LOW
callWAIT_uS
gotoM_VER_BITIN

;-----------------------------------------------------------------------------------------------------------------------------------------
PROG_SUCCESS ; callWRITE_SN; WRITE LAST SN PROGRAMMED INTO
; PIC16F84A EEPROM DATA
bsfLED; LED ON FOR 0,4SEC
movlw.200

callWAIT_WMSEC; DELAY

; call save_eprom ;<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< dopisano

gotoPROG_END

;----------------------------------------------------------------------------------------
; HCS PROGRAMMING ERROR
; WAIT FOR BUTTON PRESS

PROG_ERR clrfPORTA
movlw.20; 20 * 0,2SEC = 4SEC LED BLINKING
movwfTMP_CNT
PROG_ERR_LEDON bsfLED; LED ON FOR 0,1SEC
movlw.100
callWAIT_WMSEC; DELAY

PROG_ERR_LEDOFF bcfLED; LED OFF FOR 0,1SEC
movlw.100
callWAIT_WMSEC; DELAY
decfszTMP_CNT,F
gotoPROG_ERR_LEDON

PROG_ERR_X bcfLED
gotoPROG_END

;----------------------------------------------------------------------------------------
PROG_END bcfLED
bcfHCSVDD
callBUTTON_RELEASE
gotoM_LOOP

;----------------------------------------------------------------------------------------
; PIC16F84A DATA EEPROM WRITE ERROR; LED ON FOREVER

EE_ERR clrfPORTA
bsfLED; LED ON
clrwdt
goto$-1

;----------------------------------------------------------------------------------------
; INIZIALIZE THE SER NUM STORED IN THE FIRST 4 BYTES OF THE INTERNAL EE DATA MEMORY
;----------------------------------------------------------------------------------------
ORG 0x2100
DE0x00
DE0x00
DE0x00
DE0x00

;----------------------------------------------------------------------------------------

;========================================================================================
; END OF FILE
;========================================================================================

END[/syntax]

Statystyki: Napisane przez matrix — 16 maja 2014, o 09:51