HydraNFC Shield v1.0 Specifications

HydraNFC Shield v1.0 is an NFC shield hardware (to be plugged on top of HydraBus) to sniff/read/write/emulate any 13.56MHz NFC tags for anyone interested in advanced NFC Research/Dev/Debug/Hack/PenTest on NFC products.
It has been designed to be used with HydraBus but can also be used with other MCU.

HydraNFC Shield v1.0 is now superseded by HydraNFC Shield v2 in an other fork see https://github.com/hydrabus/hydrafw_hydranfc_shield_v2 for more details

HydraNFC Shield v1.0 and HydraNFC Antenna

The HydraNFC Shield v1.0 + Antenna is now Available here: https://lab401.com/products/hydranfc

Note: HydraNFC shield shall be plugged on top of HydraBus (when used with HydraBus).

HydraBus/HydraNFC firmware see github: https://github.com/hydrabus/hydrafw

For more info on hardware of HydraNFC see github: https://github.com/hydrabus/hydranfc

HydraNFC firmware (requires HydraBus) can sniff ISO14443A PICC and PCD both side in real-time

For more details see https://github.com/hydrabus/hydrafw/wiki/HydraFW-HydraNFC-guide#unique-nfc-sniffer-design
Unique feature since hydrafw v0.8 hard real-time ISO14443A sniffer mode (with infinite trace) using external FTDI HS interface

Overview:

HydraNFC shield v1.0 & HydraNFC Antenna package:
- HydraNFC shield v1.0
  - Pocket size 54x35x13 mm and light weight about 33g
  - Support external NFC Antenna with U.FL connector or SMA (requires SMA male to SMA male cable)
  - 1 SMA female connector included (to be soldered on HydraNFC shield as option)
- HydraNFC Antenna (included with HydraNFC shield v1.0)
  - U.FL connector (UFL cable included) or SMA
  - 1 SMA female connector included (to be soldered on HydraNFC Antenna as option)
Features of the HydraNFC shield board:
- Autonomous mode with 4 User buttons and 4 User LEDs.
- Use Texas Instrument TRF7970A NFC chipset with full access to all pins and all modes of TRF7970A through connectors J1/J2/J3.
  - Supports Near Field Communication (NFC) Standards NFCIP-1 (ISO/IEC 18092) and NFCIP-2 (ISO/IEC 21481)
  - Completely Integrated Protocol Handling for ISO15693, ISO18000-3, ISO14443A/B, and FeliCa
  - Integrated Encoders, Decoders, and Data Framing for NFC Initiator, Active and Passive Target Operation for All Three Bit Rates (106 kbps, 212 kbps, 424 kbps) and Card Emulation
  - RF Field Detector With Programmable Wake-Up Levels for NFC Passive Transponder Emulation Operation
  - Programmable System Clock Frequency Output (RF, RF/2, RF/4) from 13.56-MHz Crystal
  - Programmable Modulation Depth
  - Dual Receiver Architecture With RSSI for Elimination of “Read Holes” and Adjacent Reader System or Ambient In-Band Noise Detection
  - Programmable Output Power: +20 dBm (100 mW), +23 dBm (200 mW)
  - Support any protocols under 13.56 MHz with modulation depth OOK (100%) or ASK (from 7% to 30%)
    - Support low level Direct Mode 0 (Raw RF Sub-Carrier Data Stream) or intermediate level (for special tags not ISO compliant like Mifare Classic …) Special Direct Mode for TX and Direct Mode 1 for RX using ISO encoders / decoders without protocol framing
    - For more details see TI TRF7970A informations
  - HydraBus Antenna (external) with U.FL connector(cable included) or SMA (optional) and can read Mifare card at up to 8cm (with 20cm cable).
    - Antenna Impedance 50 Ohm
  - Hardware doc, schematic/board are available on github: https://github.com/hydrabus/hydranfc/tree/master/hardware
  - Hardware license CC BY-NC 4.0 (for commercial license contact info@hydrabus.com)

Features of the HydraNFC embedded firmware (hydrafw) when used with HydraBus:
- Use HydraBus microSD card to save or load data.
  - Support of microSD (FAT16/FAT32) card up upto 32GB (tested with SanDisk Extreme 32GB).
- Virtual Serial Port access through microUSB with VT100 terminal/shell (compatible with any computer supporting USB Virtual Serial port).
- - Basic UID read for Vicinity/ISO15693
  - Basic UID read for ISO14443-A/Mifare card 4 or 7bytes UID
  - Read MIFARE Ultralight tag content (full dump)
  - Tag Emulation UID ISO14443A & Mifare 1K
  - Sniffer mode in autonomous / stand-alone mode (requires Power Bank on USB1 or USB2 or an other 5VDC source on VUSB pins) for ISO14443A including both PICC and PCD with data logged to microSD card (tested with success with Mifare NFC)
  - Unique feature since hydrafw v0.8 hard real-time ISO14443A sniffer mode (with infinite trace) using external FTDI HS interface
  - For more details on hydrafw NFC commands see Wiki: https://github.com/hydrabus/hydrafw/wiki/HydraFW-HYDRANFC-guide
  - For more details on hydrafw see Wiki: https://github.com/hydrabus/hydrafw/wiki
  - For pre-built dfu binary see: https://github.com/hydrabus/hydrafw/releases
Planned features / Task List:
- See Wiki https://github.com/hydrabus/hydrafw/wiki/Task-List