From aramirez@netcom.com Wed Oct 23 18:43:45 1996 Path: ashpoly!cascade!mxgate!coyoacan!netcom!aramirez From: aramirez@netcom.com (Anja Ramírez) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct23.184345.9024@netcom.com> Date: Wed, 23 Oct 1996 18:43:45 GMT Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: Netscape 1.1N Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Anja Ramírez "Hardware is temporary. The signal survives." Pentium 90 (OS/2 Warp) / FreeBSD 2.1 From jeriksson@uni-hamburg.de Fri Oct 25 18:29:45 1996 Path: ashpoly!cascade!brgate!saturno!uni-hamburg!jeriksson From: jeriksson@uni-hamburg.de (Ji-woo Eriksson) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct25.182945.1100@uni-hamburg.de> Date: Fri, 25 Oct 1996 18:29:45 GMT References: <1996Oct23.184345.9024@netcom.com> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1996Oct23.184345.9024@netcom.com>, aramirez@netcom.com (Anja Ramírez) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ji-woo Eriksson | jeriksson@uni-hamburg.de PGP Key fingerprint: 31F8 EDDC 5F00 3ECA "Keep the channels open."