From tstewart@u-tokyo.ac.jp Sun Sep 18 16:31:23 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!u-tokyo!tstewart From: tstewart@u-tokyo.ac.jp (Takeshi Stewart) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep18.163123.4775@u-tokyo.ac.jp> Date: Sun, 18 Sep 1994 16:31:23 GMT Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Takeshi Stewart Zyxel U-1496E @ 28,800 bps "There are 14 nodes and only 10 countries. Count again." From rmacdonald@uu.net Tue Sep 20 13:57:23 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!uu!rmacdonald From: rmacdonald@uu.net (Rodrigo MacDonald) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep20.135723.1179@uu.net> Date: Tue, 20 Sep 1994 13:57:23 GMT References: <1994Sep18.163123.4775@u-tokyo.ac.jp> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1994Sep18.163123.4775@u-tokyo.ac.jp>, tstewart@u-tokyo.ac.jp (Takeshi Stewart) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Rodrigo MacDonald Zyxel U-1496E @ ISDN 64k bps "Marcus is not one man." From sschneider@rwth-aachen.de Wed Sep 21 19:16:23 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!rwth-aachen!sschneider From: sschneider@rwth-aachen.de (Sergei Schneider) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep21.191623.7413@rwth-aachen.de> Date: Wed, 21 Sep 1994 19:16:23 GMT References: <1994Sep18.163123.4775@u-tokyo.ac.jp> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: Netscape 1.1N Lines: 12 In article <1994Sep18.163123.4775@u-tokyo.ac.jp>, tstewart@u-tokyo.ac.jp (Takeshi Stewart) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Sergei Schneider Opinions expressed are solely my own and not those of RWTH Aachen Informatik. ------------------------------------------------------------ From mduarte@pipeline.com Thu Sep 22 19:31:23 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!pipeline!mduarte From: mduarte@pipeline.com (Mei Duarte) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep22.193123.6039@pipeline.com> Date: Thu, 22 Sep 1994 19:31:23 GMT References: <1994Sep18.163123.4775@u-tokyo.ac.jp> <1994Sep20.135723.1179@uu.net> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Sep20.135723.1179@uu.net>, rmacdonald@uu.net (Rodrigo MacDonald) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. > Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Mei Duarte Tape trading list upon request. SASE required for international mail. From bchoi@clari.net Sat Sep 24 17:25:23 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!clari!bchoi From: bchoi@clari.net (Bill Choi) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep24.172523.3441@clari.net> Date: Sat, 24 Sep 1994 17:25:23 GMT References: <1994Sep18.163123.4775@u-tokyo.ac.jp> <1994Sep20.135723.1179@uu.net> <1994Sep22.193123.6039@pipeline.com> Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: Netscape 1.1N Lines: 8 In article <1994Sep22.193123.6039@pipeline.com>, mduarte@pipeline.com (Mei Duarte) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Bill Choi -- ClariNet Communications Corp "Hold for relay."