Commit Graph

23 Commits

Author SHA1 Message Date
KaraZajac 754af4134a v1.3.0: Add 14 keyfob protocols (8 ProtoPirate + 6 Flipper-ARF), fix KeeLoq overflow
Deploy to Pages / build (push) Waiting to run
Deploy to Pages / deploy (push) Blocked by required conditions
Brings KAT to 32 protocol decoders. Ported from the ProtoPirate reference and the
D4C1-Labs/Flipper-ARF firmware:

  ProtoPirate (8): Kia V7, Ford V1, Ford V2, Ford V3, Chrysler V0, Honda Static,
  Honda V1, Land Rover V0.
  Flipper-ARF (6): Toyota, Land Rover RKE, Mazda Siemens, BMW CAS4,
  Porsche Cayenne, PSA2.

Each decoder is gated (CRC / checksum / fixed markers / frame structure) so it
cannot false-match existing protocols; every previously-decoding IMPORTS capture
decodes unchanged. Real-capture decodes added for Ford V3 (LDV T80), Honda Static
(Honda), Toyota (Camry NRZ variant), and PSA2 (Groupe PSA, serial 0x99EB25); the
rest are validated by encode/decode round-trip and synthetic-frame tests.

Also fixes a debug-only underflow panic in keeloq_common::keeloq_decrypt
(15 - r underflowed; now wrapping_sub to match the reference's unsigned wrap;
release behavior unchanged).

Adds per-protocol docs, updates the README protocol table, capture metadata
(encoding / RF / encryption), make-suggestion mapping, and CHANGELOG.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JEfaKqzB3T4qsrybwfEi73
2026-06-23 20:08:54 -04:00
KaraZajac 48ee413c9b v1.2.0: Add 4 new protocols, fix 5 existing, port Kia V6 encoder
New protocols (from ProtoPirate):
- Mazda V0: 433MHz, pair-based decoding, XOR deobfuscation
- Mitsubishi V0: 868MHz, PWM, bit negation + XOR unscrambling
- Porsche Touareg: 433/868MHz, sync preamble, 24-bit rotate cipher
- Fiat V1 (Magneti Marelli BSI): 433MHz, auto-detected timing variants

Protocol fixes aligned with ProtoPirate reference:
- Kia V1: Fix Manchester level mapping (inverted convention), off-by-one
  bit count, CRC4 simplified to 7 bytes + offset 1
- Kia V2: Fix CRC byte layout (was double-counting nibbles), off-by-one
  bit count, preamble short-HIGH handling
- Fiat V0: Fix endbyte transform (remove (<<1)|1), standard Manchester
  encoder (was differential), 7 btn bits (was 6), gap path fallback
- PSA: Fix modified TEA (XTEA-like dynamic key selection), XOR decrypt
  byte mapping, critical key2_low construction bug, encoder polarity and
  preamble, add key1_high nibble validation, dual preamble patterns
- Ford V0: Add calculate_checksum (sums all serial+count bytes) for encoder

Kia V6 encoder ported:
- Forward AES-128 (SubBytes, ShiftRows, MixColumns, encrypt)
- encrypt_payload: build plaintext, AES encrypt, pack into 3 parts
- Two-pass Manchester upload (640 + 38 preamble pairs)
- fx_field extraction stored in DecodedSignal.extra for encode roundtrip

Updated README, protocol docs, and version bump to 1.2.0.
2026-03-22 12:05:01 -04:00
KaraZajac c0de9effc8 updated readme 2026-02-22 21:40:21 -05:00
KaraZajac bd19816e91 updated readme 2026-02-22 21:39:26 -05:00
KaraZajac 5d0bd97954 fob export fixes 2026-02-22 21:37:56 -05:00
KaraZajac b4e6898113 CVE updates 2026-02-21 00:22:12 -05:00
KaraZajac 024b55a2a8 CVE updates 2026-02-21 00:13:14 -05:00
KaraZajac da5950e872 TX and other UI/UX improvements 2026-02-20 23:43:15 -05:00
KaraZajac b1295a9b86 Added security disclaimer 2026-02-15 21:42:22 -05:00
KaraZajac 2a9c12cf04 Updated README 2026-02-15 20:58:19 -05:00
KaraZajac a7bfcf6777 Updated README 2026-02-15 20:55:18 -05:00
KaraZajac 7b46be00c4 Updated README 2026-02-15 20:53:52 -05:00
KaraZajac 5b45b54dcc RTL-SDR Support (Expermential) 2026-02-15 20:13:27 -05:00
KaraZajac e59d976123 docs: README and protocol docs for KeeLoq generic fallback
- README: add KeeLoq generic fallback to features, supported protocols, crypto modules, project structure
- docs/README.md: add keeloq_generic to protocol table and short note
- docs/keeloq_generic.md: new doc describing fallback flow, keeloq_common usage, display, encoding

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-15 19:01:41 -05:00
leviathan 15b44a572e Image update 2026-02-13 22:45:16 -05:00
leviathan 6771d888d3 Updated README 2026-02-13 22:18:36 -05:00
leviathan e06f6c9b48 Updated README 2026-02-13 22:16:08 -05:00
leviathan 655f019469 v1.0.0 2026-02-13 22:00:42 -05:00
leviathan b306ff0574 closer 2026-02-13 21:46:04 -05:00
leviathan 9e2565c1fc Protocol updates 2026-02-11 21:59:30 -05:00
leviathan 0767850a6f Update README and LICENSE
- Fix Ford V0 encoding type from PWM to Manchester
- Add 315 MHz frequency support for Ford V0 and Subaru (US market)
- Add demodulator technical details section
- Fix clone directory name from prometheus to KAT
- Add adaptive demodulation note to features
- Update LICENSE wording

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-09 21:30:37 -05:00
leviathan 4339895b41 Version 1.0.0 2026-02-07 17:35:27 -05:00
leviathan c8bff9afd7 Initial commit 2026-02-07 22:33:46 +00:00