KAT — Keyfob Analysis Toolkit

Terminal-based RF signal analysis for automotive keyfobs

View the Project on GitHub KaraZajac/KAT

Star Line Protocol

Rust module: src/protocols/star_line.rs
Reference: REFERENCES/ProtoPirate/protocols/star_line.c

Overview

Star Line uses PWM: 250 µs = 0, 500 µs = 1. 64 bits: key_fix (32) + key_hop (32), sent MSB-first (reversed on air). Header: 6 pairs of 1000 µs HIGH + 1000 µs LOW. KeeLoq: fix = serial(24) + button(8); hop encrypted with manufacturer key or normal-learning derived key.

Timing

Parameter Value Notes
Short (0) 250 µs ±120 µs
Long (1) 500 µs ±120 µs
Header 1000 µs × 2 (6 pairs)  
Min bits 64  

Encoding

PWM; 64 bits MSB-first (reversed on air). KeeLoq encrypt for hop; fix half plain.

Frame Layout (64 bits)

Decoder Steps

  1. Reset — Wait for header (6 × 1000 µs HIGH, 1000 µs LOW).
  2. CheckPreamble — Confirm 6 header pairs.
  3. SaveDuration — Store duration.
  4. CheckDuration — Short–short = 0, long–long = 1; at 64 bits KeeLoq-decrypt hop (or normal-learning), extract serial/button/counter, return.

Encoder

Supported; header, 64-bit fix+hop (KeeLoq encrypt hop with MF or derived key).

Frequencies

433.92 MHz.

Keystore

Star Line manufacturer key (keystore type 20, star_line_mf_key). Used for KeeLoq hop decryption and normal-learning derivation.