mirror of
https://github.com/RfidResearchGroup/proxmark3.git
synced 2026-10-15 11:09:59 +00:00
iceman1001andClaude Opus 5 (1M context)
255576fa43
Every answer was modulated after the reader's frame arrived, landing ~1812 carrier periods late against the 1172 the FDT allows, so readers timed out before any of it mattered. All answers are now precomputed the way hf 14a sim does it, and a phone answers at 1172 exactly. Cascade mode sent a cascade tag at every level, which a conforming reader rejects in the last level its ATQA announced - it dropped the card before ever sending a SELECT. The cascade tag now appears only below that level; it is the SAK that lies about the UID being incomplete, and that is what walks a reader up to cascade level 7. A bit oriented ANTICOLLISION was answered with the whole UID instead of the bits the reader still lacked, handing it a frame of the wrong length. One encoder now builds any tail, with or without collisions in it. --coll leaves the first UID byte clean and collides every bit after it, so a reader resolves 24 bits one round trip at a time, is then given a BCC that checks out, and is cascaded into the same again - 183 answers per poll against the 3 a real card needs. Colliding byte 0 as well only produced a UID of all ones, which readers drop before asking for the BCC. Reader frames that go unanswered are traced instead of silently dropped, LED B marks an attempt in progress and LED C flips on each step deeper, and the closing line reports rounds run and how far a reader got. trace list -t 14a decodes SEL 0x99..0x9F, shows how many UID bits a bit oriented ANTICOLL claims, and no longer flags those CRC-less frames as bad CRC. Co-Authored-By: Claude Opus 5 (1M context)
