HydraNFC Shield v2

Description

HydraNFC Shield v2 is shield for HydraBus v1 and it is based on STMicroelectronics ST25R3916 NFC chipset which is today the most powerful and versatile NFC chipset available on the market.
HydraNFC Shield v2 is for anyone interested in Learning/Developping/Debugging/Hacking/Penetration Testing for basic or advanced NFC communications.
Summary of HydraNFC Shield v2 hardware features:
* NFC Reader/writer, NFC Card emulation, NFC Active and passive peer to peer
* Support NFC-A / ISO14443A up to 848 kbit/s, NFC-B / ISO14443B up to 848 kbit/s, NFC-F / FeliCa up to 424 kbit/s, NFC-V / ISO15693 up to 53 kb/s, NFC-A / ISO14443A and NFC-F / FeliCa card emulation
* 1.6W output power at 5V with Differential Antenna and Variable capacitors for NFC Automatic antenna tuning (AAT)
* Low level mode to implement MIFARE Classic compliant or other custom protocols, Automatic gain control and squelch feature to maximize SNR

Details

HydraNFC Shield v2 is based on STMicroelectronics ST25R3916 NFC chipset which is today the most powerful and versatile NFC chipset available on the market. HydraNFC Shield v2 is for anyone interested in Learning/Developping/Debugging/Hacking/Penetration Testing for basic or advanced NFC communications. The firmware is open source and available on GitHub: https://github.com/hydrabus/hydrafw_hydranfc_shield_v2

Key Features of HydraNFC Shield V2 hardware (with HydraNFC v2 Antenna):

Operating modes:
- Reader/writer
- Card emulation (Type A and Type F Tags are supported natively, other tags can be supported with Special stream and Transparent modes)
- Active and passive peer to peer
RF communication:
- EMVCo™ 3.0 analog and digital compliant
- NFC-A / ISO14443A up to 848 kbit/s
- NFC-B / ISO14443B up to 848 kbit/s
- NFC-F / FeliCa™ up to 424 kbit/s
- NFC-V / ISO15693 up to 53 kb/s
- NFC-A / ISO14443A and NFC-F / FeliCa™ card emulation
- Active and passive peer to peer initiator and target modes, up to 424 kbit/s
- Low level mode to implement MIFARE Classic® compliant or other custom protocols
Key features:
- 1.6W output power at 5V with Differential Antenna and Variable capacitors for NFC Automatic antenna tuning (AAT)
  - Reader/writer mode range is more than 12cm for NFC-A (ISO14443A) Tags (8.5cm x 5.4cm)
  - Reader/writer mode range is more than 16cm for NFC-V (ISO15693) Tags(ST25 Tag 5cm x 5cm)
- Dynamic power output (DPO) controls the field strength to stay within given limits
- Active wave shaping (AWS) reduces over-and under-shoots
- Noise suppression receiver (NSR) allows reception in noisy environment
- Integrated EMVCo 3.0 compliant EMD handling
- Automatic gain control and squelch feature to maximize SNR
- Low power capacitive and inductive card detection
- Low power NFC active and passive target modes
- Adjustable ASK modulation depth, from 5 to 40>#/li###
- Integrated regulators to boost system PSRR
- AM/PM and I/Q demodulator with baseband channel summation or automatic channel selection
- Possibility to drive two independent single ended antennas (default use differential antenna)
- Measurement of antenna voltage amplitude and phase, RSSI, on-chip supply and regulated voltages
- External communication interfaces
- 512-byte FIFO
- Serial peripheral interface (SPI) up to 10 Mbit/s (Tested with success on HydraBus v1 at 10.5Mbit/s)
Electrical characteristics:
- Wide supply voltage and ambient temperature range (2.6 to 5.5 V from -40 °C to +105 °C, 2.4 to 5.5 V from -20 °C to +105 °C)
- Wide peripheral communication supply range, from 1.65 to 5.5 V
- Quartz oscillator operating with 27.12 MHz crystal with fast start-up
  - Frequency Tolerance +/-30ppm max. (25+/-3℃)
  - Operating Temperature Range -30℃ to +85℃

Key Features of HydraFW (for HydraBus v1/HydraNFC Shield v2 hardware) firmware using STMicroelectronics RFAL for ST25R3916:

This firmware is fully open source and based on HydraFW and is specific to HydraBus v1 with HydraNFC Shield v2 it use STMicroelectronics RFAL for ST25R3916

The STMicroelectronics RFAL simplifies the development of applications by encapsulating device and protocol details.

Complete middleware to build NFC enabled applications based on the ST25R3916 device
Supported modes:
- Reader/Writer
- P2P initiator (PCM and ACM)
- P2P target (PCM and ACM)
- Card emulation
Support of major NFC and proprietary technologies:
- NFC-A (ISO14443A)
- NFC-B (ISO14443B)
- NFC-F (FeliCa™)
- NFC-V (ISO15693)
- P2P (ISO18092)
- ST25TB, Kovio, B’, iClass, Calypso®
Supported protocols:
ISO-DEP (ISO data exchange protocol, ISO14443-4)
NFC-DEP (NFC data exchange protocol, ISO18092)
Easy portability across different platforms (MCUs/RTOSs/OSs)
Compliant with main RF/NFC standards:
- NFC Forum
- EMVCo™
- ISO14443
- ISO15693
- ISO18092
- MISRA C:2012 compliant
- Free, user-friendly license terms

The firmware will support low level mode to implement other custom protocols in reader/writer mode (potentially also P2P), card emulation mode and even unique real-time sniffer mode. For more details on open source firmware see https://github.com/hydrabus/hydrafw_hydranfc_shield_v2...

HydraFW v0.2 Beta released for HydraBus v1 + HydraNFC Shield v2
Benjamin Vernoux • 09/13/2020 at 16:33 • 0 comments
12.09.2020 - HydraFW v0.2 Beta for HydraBus v1 + HydraNFC Shield v2

Generic:
- Update ChibiOS 18.2.0 (git version)
- Plug & Play USB Serial Driver using standard driver for windows 8.1 & 10 (Thanks to Guigz2000)
- HydraNFC v2 HAL fix platformProtectST25RComm() / platformUnprotectST25RComm() to mask/unmask the PA1 IRQ connected to ST25R3916 IRQ
MCU Debug
- Debug SWO/ITM Trace and added console UART (Thanks AAsyunkin-se for the pull request/contributions)
NFC BBIO mode
- BBIO Reader supporting different technology NFC-A/B/V (Thanks gvinet for the pull request/contributions)
- BBIO Card Emulator iso14443 a (Thanks gvinet for the pull request/contributions)
- See examples python3 scripts using the BBIO Reader / Card Emulator
NFC Shield v2 nfc mode
- Commands set-nfc-obsv and get-nfc-obsv added
  - It is for debug mode see ST25R3916 datasheet "Analog test and observation register 1" for more details
- Add options to select technology NFC-A/B/ST25TB/V/F or ALL (NFC-A/B/V/F)
  - nfc-all Select technology NFC-A/B/V/F
  - nfc-a Select technology NFC-A(ISO14443A)
  - nfc-b Select technology NFC-B(ISO14443B)
  - nfc-st25tb Select technology NFC-B(ISO14443B ST25TB)
  - nfc-v Select technology NFC-V Vicinity(ISO15693)
  - nfc-f Select technology NFC-F FeliCa
- Command scan add options scan once(by default) or continuous with period of scan (in ms)
- Command scan add more details
  - NFC-A/B/V/F add tag tx/rx bitrate in kbit/s
  - NFC-A add Tag Type
  - NFC-A add ATQA, SAK and ATS(on tag supporting it) details
  - See HydraFW-HydraNFC-v2-guide#read-uid-of-any-nfc-tag-iso14443a-iso14443b-iso15693vicinity-felicanfc-abvf for more details
- Command ce added (Thanks AAsyunkin-se for the pull request/contributions)
  - Set Tag properties for Card Emulation (UID, SAK...) those parameters are common to emul-3a and emul-t4t commands
  - sub-parameter `uid' Set UID to be used for Card Emulation; 4 or 7 bytes. Hex string with no spaces or prefixes, e.g. f1e2d3c4
    - This parameter is required by emul-3a and/or emul-t4t commands
  - sub-parameter `sak' Set (final) SAK to be used for Card Emulation. 1 byte hex with no spaces or prefixes, e.g. 20
    - This parameter is required by emul-3a and/or emul-t4t commands
  - sub-parameter `uri' Set URI to be used for T4T Card Emulation
    - This parameter is required by emul-t4t command
  - See HydraFW-HydraNFC-v2-guide#nfc-emulation-iso-14443a for more details/examples
- Command emul-3a added (Thanks AAsyunkin-se for the pull request/contributions)
  - Emul Tag ISO14443A using ce => uid and sakparameters
  - See HydraFW-HydraNFC-v2-guide#nfc-emulation-iso-14443a for more details/examples
- Command emul-t4t added (Thanks AAsyunkin-se for the pull request/contributions)
  - Emul Tag ISO14443A T4T using ce => uid, sak and uri parameters
  - See HydraFW-HydraNFC-v2-guide#emulation-iso-14443a-tag-uid-4-or-7-bytes-sakconfigurable-ndef-with-data-uri for more details/examples
- Commands connect and send added (Thanks gvinet for the pull request/contributions)
  - Add command connect Connect to a smartcard (ISO 14443 A & B) or ISO 15693/Vicinity card
  - Add command send Send APDU data to a card initialized with the connect command (ISO 14443 A & B tags), or data with automatic CRC computation for ISO 15693/Vicinity cards.
  - See HydraFW-HydraNFC-v2-guide#connect-send-apdu-data for more details/examples
- Command connect-opt added (Thanks gvinet for the pull request/contributions)
  - sub-parameter verbosity Set verbosity. 0: print only APDU. 8: print all exchanges
  - sub-parameter fsd Frame size between 1 and 250 (only for ISO 14443 cards)
NFC Shield v2 dnfc mode (Debug/Developer mode)
- See https://github.com/hydrabus/hydrafw_hydranfc_shield_v2/wiki/HydraFW-HydraNFC-v2-guide-dnfc-mode
- Add dnfc mode with Init of HydraNFC Shield v2 when entering in this mode
- Protocol configuration/information frequency (to change SPI frequency), show, show pins, show registers
  - See HydraFW-HydraNFC-v2-guide-dnfc-mode for more details/examples
- Get/Set NFC Mode (NFCA/B/V/F/Custom)
  - Add command set-nfc-mode Set the NFC mode using following sub-parameter
    - sub-parameter nfc-mode...
Read more »

View project log

Discussions

HydraNFC Shield v2

Description

Details

Project Logs

Collapse

HydraFW v0.2 Beta released for HydraBus v1 + HydraNFC Shield v2

Generic:

MCU Debug

NFC BBIO mode

NFC Shield v2 `nfc` mode

NFC Shield v2 `dnfc` mode (Debug/Developer mode)

Discussions

Similar Projects

Speak&SID CPC

HydraBus v1 Rev1.5

Hacking DJI Naza M

Ameba Arduino: Ameba AP Mode

HydraNFC Shield v2

Become a Hackaday.io member

Just one more thing

Description

Details

Project Logs Collapse

HydraFW v0.2 Beta released for HydraBus v1 + HydraNFC Shield v2

Generic:

MCU Debug

NFC BBIO mode

NFC Shield v2 nfc mode

NFC Shield v2 dnfc mode (Debug/Developer mode)

Enjoy this project?

Discussions

Become a Hackaday.io Member

Similar Projects

Speak&SID CPC

HydraBus v1 Rev1.5

Hacking DJI Naza M

Ameba Arduino: Ameba AP Mode

Does this project spark your interest?

Report project as inappropriate

Send message

Remove Member

Project Logs

Collapse

NFC Shield v2 `nfc` mode

NFC Shield v2 `dnfc` mode (Debug/Developer mode)