write protect key

Makefile

@@ -20,6 +20,6 @@ build-all::
 	echo '```' > builds/buildout
 	echo $(TM_TOOL) >> builds/buildout
 	rustc --version >> builds/buildout
-	sha256sum builds/* >> builds/buildout
+	sha256sum builds/tmtool* >> builds/buildout
 	echo '```' >> builds/buildout
 	cat builds/buildout

src/cmds.rs

@@ -240,9 +240,106 @@ pub fn lock(device: String, slot: u16, force: bool) -> Result<()> {
         }
     }
 
-    tm.write_byte(slot as u8)?;
+    // tested on 0xe0e9
 
-    // TODO
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    let data = [0x88, 0x00, 0x00];
+    tm.write_bytes(&data)?;
+
+    tm.write_byte(0x84)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    let data = [0x81, 0x01, 0x15];
+    tm.write_bytes(&data)?;
+
+    tm.write_byte(0x81)?;
+
+    let mut data = [0; 2];
+    tm.read_bytes(&mut data)?;
+
+    let data = [0x80, 0x03, 0x00, 0x16, 0x08, 0x20, 0xf0, 0x00, 0x00, 0x10, 0xd2, 0x76, 0x00, 0x00, 0x04, 0x47, 0x65, 0x6e, 0x41, 0x75, 0x74, 0x68, 0x41, 0x70, 0x70, 0x6c, 0xbe, 0x40];
+    tm.write_bytes(&data)?;
+
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    let mut data = [0; 5];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x80)?;
+
+    let mut data = [0; 11];
+    tm.read_bytes(&mut data)?;
+
+    let data = [0x80, 0x80, 0x00, 0x00, 0x0c, 0xec];
+    tm.write_bytes(&data)?;
+
+    let mut data = [0x80, 0x04, 0x00, 0x0f, 0x08, 0x20, 0x82, 0x01, 0x00, 0x09, 0xe0, 0xe9, 0x00, 0x00, 0x20, 0x03, 0xd0, 0x01, 0xff, 0x5d, 0xd8];
+    if slot == TM_SLOT1 {
+        data[10] = 0xe0;
+        data[11] = 0xe8;
+    } else if slot == TM_SLOT2 {
+        data[10] = 0xe0;
+        data[11] = 0xe9;
+    }
+
+    tm.write_bytes(&data)?;
+
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x80)?;
+
+    let mut data = [0; 5];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x82)?;
+
+    let mut data = [0; 4];
+    tm.read_bytes(&mut data)?;
+
+    tm.write_byte(0x80)?;
+
+    let mut data = [0; 11];
+    tm.read_bytes(&mut data)?;
+
+    let data = [0x80, 0x81, 0x00, 0x00, 0x56, 0x30];
+    tm.write_bytes(&data)?;
 
     Ok(())
 }