From pkowalski@inria.fr Mon Apr 04 04:44:50 1994
Path: ashpoly!cascade!transat!eunet-fr!teletel!inria!pkowalski
From: pkowalski@inria.fr (Pavel Kowalski)
Newsgroups: comp.sys.m68k
Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Apr04.044450.6263@inria.fr>
Date: Mon, 04 Apr 1994 04:44:50 GMT
Organization: INRIA Rocquencourt
NNTP-Posting-Host: inria.fr
X-Newsreader: WinVN 0.99.5
Lines: 10

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Pavel Kowalski
Tape trading list upon request. SASE required for international mail.

From sjohansson@stanford.edu Mon Apr 04 15:33:50 1994
Path: ashpoly!cascade!transat!ukc!fennimore!stanford!sjohansson
From: sjohansson@stanford.edu (Sun-mi Johansson)
Newsgroups: comp.sys.m68k
Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Apr04.153350.8027@stanford.edu>
Date: Mon, 04 Apr 1994 15:33:50 GMT
References: <1994Apr04.044450.6263@inria.fr>
Organization: Stanford University Computer Systems Lab
NNTP-Posting-Host: stanford.edu
X-Newsreader: Netscape 1.1N
Lines: 11

In article <1994Apr04.044450.6263@inria.fr>, pkowalski@inria.fr (Pavel Kowalski) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.
> Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

If you are posting from AOL, please read RFC 1036 before posting again.

-- 
Sun-mi Johansson -- Stanford University Computer Systems Lab
"Tape doesn't lie at 02:14. Ears do."

From mchoi@cmu.edu Wed Apr 06 05:49:50 1994
Path: ashpoly!cascade!transat!ukc!fennimore!cmu!mchoi
From: mchoi@cmu.edu (Min-jun Choi)
Newsgroups: comp.sys.m68k
Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Apr06.054950.5851@cmu.edu>
Date: Wed, 06 Apr 1994 05:49:50 GMT
References: <1994Apr04.044450.6263@inria.fr> <1994Apr04.153350.8027@stanford.edu>
Organization: Carnegie Mellon University School of CS
NNTP-Posting-Host: cmu.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 11

In article <1994Apr04.153350.8027@stanford.edu>, sjohansson@stanford.edu (Sun-mi Johansson) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!
> If you are posting from AOL, please read RFC 1036 before posting again.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Top-posters will be placed in my ~/.killfile without notice.

-- 
Min-jun Choi -- Carnegie Mellon University School of CS
"We don't sign stars. We build them."

From ajohansson@illinois.edu Fri Apr 08 04:07:50 1994
Path: ashpoly!bigsur!pacrim!krgate!eunha!illinois!ajohansson
From: ajohansson@illinois.edu (Anja Johansson)
Newsgroups: comp.sys.m68k
Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Apr08.040750.9418@illinois.edu>
Date: Fri, 08 Apr 1994 04:07:50 GMT
References: <1994Apr04.044450.6263@inria.fr> <1994Apr04.153350.8027@stanford.edu> <1994Apr06.054950.5851@cmu.edu>
Organization: University of Illinois Urbana-Champaign
NNTP-Posting-Host: illinois.edu
X-Newsreader: WinVN 0.99.5
Lines: 9

In article <1994Apr06.054950.5851@cmu.edu>, mchoi@cmu.edu (Min-jun Choi) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys.

-- 
=== Anja Johansson ===
Dept of Electrical Engineering, University of Illinois Urbana-Champaign
"They will send a copy in my place."