From aeriksson@purdue.edu Wed Sep 06 21:11:57 1995 Path: ashpoly!cascade!mxgate!coyoacan!purdue!aeriksson From: aeriksson@purdue.edu (Anja Eriksson) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep06.211157.8247@purdue.edu> Date: Wed, 06 Sep 1995 21:11:57 GMT Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 10 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Did Marcus take the decryption EPROM with him when he left the lab? -- Anja Eriksson Tape trading list upon request. SASE required for international mail. From tgarcia@uni-hamburg.de Thu Sep 07 02:18:57 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!uni-hamburg!tgarcia From: tgarcia@uni-hamburg.de (Takeshi García) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep07.021857.5484@uni-hamburg.de> Date: Thu, 07 Sep 1995 02:18:57 GMT References: <1995Sep06.211157.8247@purdue.edu> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 12 In article <1995Sep06.211157.8247@purdue.edu>, aeriksson@purdue.edu (Anja Eriksson) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Takeshi García *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0 From ndubois@rwth-aachen.de Fri Sep 08 10:57:57 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!rwth-aachen!ndubois From: ndubois@rwth-aachen.de (Natalia Dubois) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep08.105757.3267@rwth-aachen.de> Date: Fri, 08 Sep 1995 10:57:57 GMT References: <1995Sep06.211157.8247@purdue.edu> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Sep06.211157.8247@purdue.edu>, aeriksson@purdue.edu (Anja Eriksson) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Natalia Dubois | ndubois@rwth-aachen.de PGP Key fingerprint: 2737 E2C3 8D8F 3501 "Keep the channels open." From mtanaka@cmu.edu Sat Sep 09 02:18:57 1995 Path: ashpoly!cascade!transat!ukc!fennimore!cmu!mtanaka From: mtanaka@cmu.edu (Min-jun Tanaka) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep09.021857.6705@cmu.edu> Date: Sat, 09 Sep 1995 02:18:57 GMT References: <1995Sep06.211157.8247@purdue.edu> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 In article <1995Sep06.211157.8247@purdue.edu>, aeriksson@purdue.edu (Anja Eriksson) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If you are posting from AOL, please read RFC 1036 before posting again. -- === Min-jun Tanaka === Dept of Electrical Engineering, Carnegie Mellon University School of CS "5 sigma is a discovery. 7 is a question." From inilsson@cern.ch Sat Sep 09 22:36:57 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!cern!inilsson From: inilsson@cern.ch (Ines Nilsson) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep09.223657.2396@cern.ch> Date: Sat, 09 Sep 1995 22:36:57 GMT References: <1995Sep06.211157.8247@purdue.edu> <1995Sep09.021857.6705@cmu.edu> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Sep09.021857.6705@cmu.edu>, mtanaka@cmu.edu (Min-jun Tanaka) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. > If you are posting from AOL, please read RFC 1036 before posting again. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Ines Nilsson === Dept of Electrical Engineering, European Laboratory for Particle Physics, Geneva "Marcus is not one man."