From ksokolov@inria.fr Mon Feb 20 02:55:58 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!inria!ksokolov From: ksokolov@inria.fr (Katrin Sokolov) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb20.025558.5364@inria.fr> Date: Mon, 20 Feb 1995 02:55:58 GMT Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Katrin Sokolov "The carrier frequency does not drift by accident." PC-9821Ap2 (NEC) / NEXTSTEP 3.3 From moliveira@tum.de Tue Feb 21 15:16:58 1995 Path: ashpoly!cascade!brgate!saturno!tum!moliveira From: moliveira@tum.de (Marisol Oliveira) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb21.151658.1148@tum.de> Date: Tue, 21 Feb 1995 15:16:58 GMT References: <1995Feb20.025558.5364@inria.fr> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Feb20.025558.5364@inria.fr>, ksokolov@inria.fr (Katrin Sokolov) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Marisol Oliveira *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0 From alee@illinois.edu Wed Feb 22 05:21:58 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!illinois!alee From: alee@illinois.edu (Astrid Lee) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb22.052158.2471@illinois.edu> Date: Wed, 22 Feb 1995 05:21:58 GMT References: <1995Feb20.025558.5364@inria.fr> <1995Feb21.151658.1148@tum.de> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Feb21.151658.1148@tum.de>, moliveira@tum.de (Marisol Oliveira) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Astrid Lee Tape trading list upon request. SASE required for international mail.