forked from yogeshojha/MiBand3
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathauth.py
459 lines (400 loc) · 18.6 KB
/
auth.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
import struct
import time
import logging
from datetime import datetime
from Crypto.Cipher import AES
from queue import Queue, Empty
from bluepy.btle import Peripheral, DefaultDelegate, ADDR_TYPE_RANDOM, BTLEException
import crc16
import os
import struct
from constants import UUIDS, AUTH_STATES, ALERT_TYPES, QUEUE_TYPES
class AuthenticationDelegate(DefaultDelegate):
"""This Class inherits DefaultDelegate to handle the authentication process."""
def __init__(self, device):
DefaultDelegate.__init__(self)
self.device = device
def handleNotification(self, hnd, data):
if hnd == self.device._char_auth.getHandle():
if data[:3] == b'\x10\x01\x01':
self.device._req_rdn()
elif data[:3] == b'\x10\x01\x04':
self.device.state = AUTH_STATES.KEY_SENDING_FAILED
elif data[:3] == b'\x10\x02\x01':
# 16 bytes
random_nr = data[3:]
self.device._send_enc_rdn(random_nr)
elif data[:3] == b'\x10\x02\x04':
self.device.state = AUTH_STATES.REQUEST_RN_ERROR
elif data[:3] == b'\x10\x03\x01':
self.device.state = AUTH_STATES.AUTH_OK
elif data[:3] == b'\x10\x03\x04':
self.device.status = AUTH_STATES.ENCRIPTION_KEY_FAILED
self.device._send_key()
else:
self.device.state = AUTH_STATES.AUTH_FAILED
elif hnd == self.device._char_heart_measure.getHandle():
self.device.queue.put((QUEUE_TYPES.HEART, data))
elif hnd == 0x38:
# Not sure about this, need test
if len(data) == 20 and struct.unpack('b', data[0:1])[0] == 1:
self.device.queue.put((QUEUE_TYPES.RAW_ACCEL, data))
elif len(data) == 16:
self.device.queue.put((QUEUE_TYPES.RAW_HEART, data))
else:
self.device._log.error("Unhandled Response " + hex(hnd) + ": " +
str(data.encode("hex")) + " len:" + str(len(data)))
class MiBand3(Peripheral):
_KEY = b'\x01\x23\x45\x67\x89\x01\x22\x23\x34\x45\x56\x67\x78\x89\x90\x02'
_send_key_cmd = struct.pack('<18s', b'\x01\x08' + _KEY)
_send_rnd_cmd = struct.pack('<2s', b'\x02\x08')
_send_enc_key = struct.pack('<2s', b'\x03\x08')
def __init__(self, mac_address, timeout=0.5, debug=False):
FORMAT = '%(asctime)-15s %(name)s (%(levelname)s) > %(message)s'
logging.basicConfig(format=FORMAT)
log_level = logging.WARNING if not debug else logging.DEBUG
self._log = logging.getLogger(self.__class__.__name__)
self._log.setLevel(log_level)
self._log.info('Connecting to ' + mac_address)
Peripheral.__init__(self, mac_address, addrType=ADDR_TYPE_RANDOM)
self._log.info('Connected')
self.timeout = timeout
self.mac_address = mac_address
self.state = None
self.queue = Queue()
self.heart_measure_callback = None
self.heart_raw_callback = None
self.accel_raw_callback = None
self.svc_1 = self.getServiceByUUID(UUIDS.SERVICE_MIBAND1)
self.svc_2 = self.getServiceByUUID(UUIDS.SERVICE_MIBAND2)
self.svc_heart = self.getServiceByUUID(UUIDS.SERVICE_HEART_RATE)
self._char_auth = self.svc_2.getCharacteristics(UUIDS.CHARACTERISTIC_AUTH)[0]
self._desc_auth = self._char_auth.getDescriptors(forUUID=UUIDS.NOTIFICATION_DESCRIPTOR)[0]
self._char_heart_ctrl = self.svc_heart.getCharacteristics(UUIDS.CHARACTERISTIC_HEART_RATE_CONTROL)[0]
self._char_heart_measure = self.svc_heart.getCharacteristics(UUIDS.CHARACTERISTIC_HEART_RATE_MEASURE)[0]
# Enable auth service notifications on startup
self._auth_notif(True)
# Let band to settle
self.waitForNotifications(0.1)
# Auth helpers ######################################################################
def _auth_notif(self, enabled):
if enabled:
self._log.info("Enabling Auth Service notifications status...")
self._desc_auth.write(b"\x01\x00", True)
elif not enabled:
self._log.info("Disabling Auth Service notifications status...")
self._desc_auth.write(b"\x00\x00", True)
else:
self._log.error("Something went wrong while changing the Auth Service notifications status...")
def _encrypt(self, message):
aes = AES.new(self._KEY, AES.MODE_ECB)
return aes.encrypt(message)
def _send_key(self):
self._log.info("Sending Key...")
self._char_auth.write(self._send_key_cmd)
self.waitForNotifications(self.timeout)
def _req_rdn(self):
self._log.info("Requesting random number...")
self._char_auth.write(self._send_rnd_cmd)
self.waitForNotifications(self.timeout)
def _send_enc_rdn(self, data):
self._log.info("Sending encrypted random number")
cmd = self._send_enc_key + self._encrypt(data)
send_cmd = struct.pack('<18s', cmd)
self._char_auth.write(send_cmd)
self.waitForNotifications(self.timeout)
# Parse helpers ###################################################################
def _parse_raw_accel(self, bytes):
res = []
for i in range(3):
g = struct.unpack('hhh', bytes[2 + i * 6:8 + i * 6])
res.append({'x': g[0], 'y': g[1], 'wtf': g[2]})
return res
def _parse_raw_heart(self, bytes):
res = struct.unpack('HHHHHHH', bytes[2:])
return res
def _parse_date(self, bytes):
# 0:2 Year
# 2 Month
# 3 Day
# 4 Hours
# 5 Minutes
# 6 Seconds
# 7 Day of week
# 8 fraction256
date = struct.unpack('hbbbbbbb', bytes)
year, month, day, hours, minutes, seconds, day_of_week, fractions256 = date
return {"date": datetime(*(year, month, day, hours, minutes, seconds)), "day_of_week": day_of_week, "fractions256": fractions256}
def _parse_battery_response(self, bytes):
# 1 Battery level
# 2 Status
# 3:10 Datetime last off
# 11:18 Datetime last charge
# 19 Last level
level = struct.unpack('b', bytes[1:2]) if len(bytes) >= 2 else None
last_level = struct.unpack('b', bytes[19:20]) if len(bytes) >= 20 else None
datetime_last_off = self._parse_date(bytes[3:10]+bytearray(2))
datetime_last_charge = self._parse_date(bytes[11:18]+bytearray(2))
status = 'normal' if struct.unpack('b', bytes[2:3]) == 0 else "charging"
res = {
"status": status,
"level": level,
"last_level": last_level,
"last_level": last_level,
"last_charge": datetime_last_charge,
"last_off": datetime_last_off
}
return res
# Queue ###################################################################
def _get_from_queue(self, _type):
try:
res = self.queue.get(False)
except Empty:
return None
if res[0] != _type:
self.queue.put(res)
return None
return res[1]
def _parse_queue(self):
while True:
try:
res = self.queue.get(False)
_type = res[0]
if self.heart_measure_callback and _type == QUEUE_TYPES.HEART:
self.heart_measure_callback(struct.unpack('bb', res[1])[1])
elif self.heart_raw_callback and _type == QUEUE_TYPES.RAW_HEART:
self.heart_raw_callback(self._parse_raw_heart(res[1]))
elif self.accel_raw_callback and _type == QUEUE_TYPES.RAW_ACCEL:
self.accel_raw_callback(self._parse_raw_accel(res[1]))
except Empty:
break
# API ####################################################################
def initialize(self):
self.setDelegate(AuthenticationDelegate(self))
self._send_key()
while True:
self.waitForNotifications(0.1)
if self.state == AUTH_STATES.AUTH_OK:
self._log.info('Initialized')
self._auth_notif(False)
return True
elif self.state is None:
continue
self._log.error(self.state)
return False
def authenticate(self):
self.setDelegate(AuthenticationDelegate(self))
self._req_rdn()
while True:
self.waitForNotifications(0.1)
if self.state == AUTH_STATES.AUTH_OK:
self._log.info('Authenticated')
return True
elif self.state is None:
continue
self._log.error(self.state)
return False
def get_battery_info(self):
char = self.svc_1.getCharacteristics(UUIDS.CHARACTERISTIC_BATTERY)[0]
return self._parse_battery_response(char.read())
def get_current_time(self):
char = self.svc_1.getCharacteristics(UUIDS.CHARACTERISTIC_CURRENT_TIME)[0]
return self._parse_date(char.read()[0:9])
def get_revision(self):
svc = self.getServiceByUUID(UUIDS.SERVICE_DEVICE_INFO)
char = svc.getCharacteristics(UUIDS.CHARACTERISTIC_REVISION)[0]
data = char.read()
return data
def get_hrdw_revision(self):
svc = self.getServiceByUUID(UUIDS.SERVICE_DEVICE_INFO)
char = svc.getCharacteristics(UUIDS.CHARACTERISTIC_HRDW_REVISION)[0]
data = char.read()
return data
def set_encoding(self, encoding="en_US"):
char = self.svc_1.getCharacteristics(UUIDS.CHARACTERISTIC_CONFIGURATION)[0]
packet = struct.pack('5s', encoding)
packet = b'\x06\x17\x00' + packet
return char.write(packet)
def set_heart_monitor_sleep_support(self, enabled=True, measure_minute_interval=1):
char_m = self.svc_heart.getCharacteristics(UUIDS.CHARACTERISTIC_HEART_RATE_MEASURE)[0]
char_d = char_m.getDescriptors(forUUID=UUIDS.NOTIFICATION_DESCRIPTOR)[0]
char_d.write(b'\x01\x00', True)
self._char_heart_ctrl.write(b'\x15\x00\x00', True)
# measure interval set to off
self._char_heart_ctrl.write(b'\x14\x00', True)
if enabled:
self._char_heart_ctrl.write(b'\x15\x00\x01', True)
# measure interval set
self._char_heart_ctrl.write(b'\x14' + str(measure_minute_interval).encode(), True)
char_d.write(b'\x00\x00', True)
def get_serial(self):
svc = self.getServiceByUUID(UUIDS.SERVICE_DEVICE_INFO)
char = svc.getCharacteristics(UUIDS.CHARACTERISTIC_SERIAL)[0]
data = char.read()
serial = struct.unpack('12s', data[-12:])[0] if len(data) == 12 else None
return serial
def get_steps(self):
char = self.svc_1.getCharacteristics(UUIDS.CHARACTERISTIC_STEPS)[0]
a = char.read()
steps = struct.unpack('h', a[1:3]) if len(a) >= 3 else None
meters = struct.unpack('h', a[5:7]) if len(a) >= 7 else None
fat_gramms = struct.unpack('h', a[2:4]) if len(a) >= 4 else None
# why only 1 byte??
calories = struct.unpack('b', a[9:10]) if len(a) >= 10 else None
return {
"steps": steps,
"meters": meters,
"fat_gramms": fat_gramms,
"calories": calories
}
def send_alert(self, _type):
svc = self.getServiceByUUID(UUIDS.SERVICE_ALERT)
char = svc.getCharacteristics(UUIDS.CHARACTERISTIC_ALERT)[0]
char.write(_type)
def send_custom_alert(self, type):
if type == 5:
base_value = '\x05\x01'
elif type == 4:
base_value = '\x04\x01'
elif type == 3:
base_value = '\x03\x01'
phone = input('Sender Name or Caller ID')
svc = self.getServiceByUUID(UUIDS.SERVICE_ALERT_NOTIFICATION)
char = svc.getCharacteristics(UUIDS.CHARACTERISTIC_CUSTOM_ALERT)[0]
char.write(base_value+phone, withResponse=True)
def change_date(self):
print('Change date and time')
svc = self.getServiceByUUID(UUIDS.SERVICE_MIBAND1)
char = svc.getCharacteristics(UUIDS.CHARACTERISTIC_CURRENT_TIME)[0]
# date = raw_input('Enter the date in dd-mm-yyyy format\n')
# time = raw_input('Enter the time in HH:MM:SS format\n')
#
# day = int(date[:2])
# month = int(date[3:5])
# year = int(date[6:10])
# fraction = year / 256
# rem = year % 256
#
# hour = int(time[:2])
# minute = int(time[3:5])
# seconds = int(time[6:])
#
# write_val = format(rem, '#04x') + format(fraction, '#04x') + format(month, '#04x') + format(day, '#04x') + format(hour, '#04x') + format(minute, '#04x') + format(seconds, '#04x') + format(5, '#04x') + format(0, '#04x') + format(0, '#04x') +'0x16'
# write_val = write_val.replace('0x', '\\x')
# print(write_val)
char.write('\xe2\x07\x01\x1e\x00\x00\x00\x00\x00\x00\x16', withResponse=True)
input('Date Changed, press any key to continue')
def dfuUpdate(self, fileName):
print('Update Firmware/Resource')
svc = self.getServiceByUUID(UUIDS.SERVICE_DFU_FIRMWARE)
char = svc.getCharacteristics(UUIDS.CHARACTERISTIC_DFU_FIRMWARE)[0]
extension = os.path.splitext(fileName)[1][1:]
fileSize = os.path.getsize(fileName)
# calculating crc checksum of firmware
#crc16
crc = 0xFFFF
with open(fileName) as f:
while True:
c = f.read(1)
if not c:
break
cInt = int(c.encode('hex'), 16) #converting hex to int
# now calculate crc
crc = ((crc >> 8) | (crc << 8)) & 0xFFFF
crc ^= (cInt & 0xff)
crc ^= ((crc & 0xff) >> 4)
crc ^= (crc << 12) & 0xFFFF
crc ^= ((crc & 0xFF) << 5) & 0xFFFFFF
crc &= 0xFFFF
print(('CRC Value is-->', crc))
input('Press Enter to Continue')
if extension.lower() == "res":
# file size hex value is
char.write('\x01'+ struct.pack("<i", fileSize)[:-1] +'\x02', withResponse=True)
elif extension.lower() == "fw":
char.write('\x01' + struct.pack("<i", fileSize)[:-1], withResponse=True)
char.write("\x03", withResponse=True)
char1 = svc.getCharacteristics(UUIDS.CHARACTERISTIC_DFU_FIRMWARE_WRITE)[0]
with open(fileName) as f:
while True:
c = f.read(20) #takes 20 bytes :D
if not c:
print("Update Over")
break
print(('Writing Resource', c.encode('hex')))
char1.write(c)
# after update is done send these values
char.write(b'\x00', withResponse=True)
self.waitForNotifications(0.5)
print(('CheckSum is --> ', hex(crc & 0xFF), hex((crc >> 8) & 0xFF)))
checkSum = b'\x04' + chr(crc & 0xFF) + chr((crc >> 8) & 0xFF)
char.write(checkSum, withResponse=True)
if extension.lower() == "fw":
self.waitForNotifications(0.5)
char.write('\x05', withResponse=True)
print('Update Complete')
input('Press Enter to Continue')
def start_raw_data_realtime(self, heart_measure_callback=None, heart_raw_callback=None, accel_raw_callback=None):
char_m = self.svc_heart.getCharacteristics(UUIDS.CHARACTERISTIC_HEART_RATE_MEASURE)[0]
char_d = char_m.getDescriptors(forUUID=UUIDS.NOTIFICATION_DESCRIPTOR)[0]
char_ctrl = self.svc_heart.getCharacteristics(UUIDS.CHARACTERISTIC_HEART_RATE_CONTROL)[0]
if heart_measure_callback:
self.heart_measure_callback = heart_measure_callback
if heart_raw_callback:
self.heart_raw_callback = heart_raw_callback
if accel_raw_callback:
self.accel_raw_callback = accel_raw_callback
char_sensor = self.svc_1.getCharacteristics(UUIDS.CHARACTERISTIC_SENSOR)[0]
# stop heart monitor continues & manual
char_ctrl.write(b'\x15\x02\x00', True)
char_ctrl.write(b'\x15\x01\x00', True)
# WTF
# char_sens_d1.write(b'\x01\x00', True)
# enabling accelerometer & heart monitor raw data notifications
char_sensor.write(b'\x01\x03\x19')
# IMO: enablee heart monitor notifications
char_d.write(b'\x01\x00', True)
# start hear monitor continues
char_ctrl.write(b'\x15\x01\x01', True)
# WTF
char_sensor.write(b'\x02')
t = time.time()
while True:
self.waitForNotifications(0.5)
self._parse_queue()
# send ping request every 12 sec
if (time.time() - t) >= 12:
char_ctrl.write(b'\x16', True)
t = time.time()
def stop_realtime(self):
char_m = self.svc_heart.getCharacteristics(UUIDS.CHARACTERISTIC_HEART_RATE_MEASURE)[0]
char_d = char_m.getDescriptors(forUUID=UUIDS.NOTIFICATION_DESCRIPTOR)[0]
char_ctrl = self.svc_heart.getCharacteristics(UUIDS.CHARACTERISTIC_HEART_RATE_CONTROL)[0]
char_sensor1 = self.svc_1.getCharacteristics(UUIDS.CHARACTERISTIC_HZ)[0]
char_sens_d1 = char_sensor1.getDescriptors(forUUID=UUIDS.NOTIFICATION_DESCRIPTOR)[0]
char_sensor2 = self.svc_1.getCharacteristics(UUIDS.CHARACTERISTIC_SENSOR)[0]
# stop heart monitor continues
char_ctrl.write(b'\x15\x01\x00', True)
char_ctrl.write(b'\x15\x01\x00', True)
# IMO: stop heart monitor notifications
char_d.write(b'\x00\x00', True)
# WTF
char_sensor2.write(b'\x03')
# IMO: stop notifications from sensors
char_sens_d1.write(b'\x00\x00', True)
self.heart_measure_callback = None
self.heart_raw_callback = None
self.accel_raw_callback = None
def start_get_previews_data(self, start_timestamp):
self._auth_previews_data_notif(True)
self.waitForNotifications(0.1)
print("Trigger activity communication")
year = struct.pack("<H", start_timestamp.year)
month = struct.pack("<H", start_timestamp.month)[0]
day = struct.pack("<H", start_timestamp.day)[0]
hour = struct.pack("<H", start_timestamp.hour)[0]
minute = struct.pack("<H", start_timestamp.minute)[0]
ts = year + month + day + hour + minute
trigger = b'\x01\x01' + ts + b'\x00\x08'
self._char_fetch.write(trigger, False)
self.active = True