Support new Tuya BLE?

Question

Support new Tuya BLE?

pvvx opened this issue 2 years ago · 13 comments

Some new Tuya devices with BLE transmit data in an encrypted format.

For example TH-05:
When temperature or humidity changes, TH-05 transmits data to BLE advertising encrypted using the Tuya protocol (using additional advertising packages). If there are no changes, a typical BLE advertisement with device identification data is transmitted.

LocalTuya can receive Authorization Key and other codes from Cloud (and includes a description of the device)...

Answer 1 · 2022-12-23T16:19:51.000Z

##Advertising packages:

UUID 0xFD50 - TUYA BLE PROTOCOL VERSION 4

type	Flag	UUID 02	UUID 16	UUID 16 Data
msg	020106	030250fd	141650fd	488040000001b36eb30d64e80a4d9cbc38
adv	020106	030250fd	141650fd	490000080c9c105bc01d9f87

adv - always transmitted.
msg - transmitted when temperature and/or humidity changes.

##Adv contains:

before bond - device pid, after bond - encrypted device_id with login_key and device_id

##Packet bytes, except for standard identifiers, are formed as follows:

[7] pid_len+7
[11,12] Frame Control: bound_flag |0x08, DEVICE_SHARED |0x04, connect request bit |0x02
[13] pid_type
[14] pid_len
[15...] code

Clarification https://github.com/tuya/tuya-ble-sdk/blob/main/sdk/src/tuya_ble_main.c#L453

Answer 2 · 2023-01-08T10:09:04.000Z

Thanks for the info. I'm afraid this will be difficult (for me) to add. Will give it a try later.

I assume temperature and humidity are in [15...] code, after decryption.

Answer 3 · 2023-05-28T17:27:21.000Z

Another thermometer with Tuya BLE - MHO-C122 (2AWMOMHOC122).

fcc.report

Answer 4 · 2023-06-12T17:25:08.000Z

@pvvx have you had any luck?

Answer 5 · 2023-06-18T16:23:45.000Z

Any luck with getting data out of the TH05?

They're now available very cheap on the AliExpress Choice Day Sales - which is why I now own one.

Answer 6 · 2023-11-29T15:05:48.000Z

Following. I bought some of these thinking they were the same as the old ones I have that work just fine with BLE sensor in HA proxied through ESPHome. I didn't see they were new models :(

Answer 7 · 2023-12-23T04:55:44.000Z

For the "THB2" sensor, the only solution so far is to reflash it in the PhyPlusKit program, using the files from https://pvvx.github.io/THB2/
Test firmware files for working in BTHome format.

This is not a full version - only temperature and humidity are transmitted every 2.5 seconds.
Updates are possible in the future.

Answer 8 · 2023-12-23T15:09:08.000Z

@pvvx Do you have a functional download link for the PhyPlusKit software? I came across a link, but unfortunately, it's no longer operational!

Answer 9 · 2023-12-23T18:24:24.000Z

https://github.com/pvvx/PHY62x2/tree/master/PhyPlusKit
I have all the SDKs from PHY, but they can be found by searching on github.
The test firmware is based on sources from https://github.com/biemster/st17h66_FindMy
They had previously worked on optimizing consumption and these developments were used.

Answer 10 · 2023-12-23T19:16:20.000Z

@pvvx Thank you very much for the resources. Keep up the great work!

Answer 11 · 2024-02-21T01:13:13.000Z

Custom firmware for Tuya devices on the PHY622x2 chipset to work in the BTHomeV2 format.

Answer 12 · 2024-02-21T06:25:27.000Z

great work, thanks!!

Answer 13 · 2024-02-21T12:01:13.000Z

Custom firmware for Tuya devices on the PHY622x2 chipset to work in the BTHomeV2 format.

This is great! Thank you!
When flashed, is the device openly accessible? I would like to skip esphome altogether and just read the sensor data from an ESP32/Arduino (not EspHome).