From alarsson@clari.net Fri Jun 02 14:26:49 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!clari!alarsson From: alarsson@clari.net (Amy Larsson) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun02.142649.3228@clari.net> Date: Fri, 02 Jun 1995 14:26:49 GMT Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: WinVN 0.99.5 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Did Marcus take the decryption EPROM with him when he left the lab? -- Amy Larsson Opinions expressed are solely my own and not those of ClariNet Communications Corp. ------------------------------------------------------------ From msuzuki@cmu.edu Sun Jun 04 17:25:49 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!cmu!msuzuki From: msuzuki@cmu.edu (Mateo Suzuki) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun04.172549.3536@cmu.edu> Date: Sun, 04 Jun 1995 17:25:49 GMT References: <1995Jun02.142649.3228@clari.net> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Jun02.142649.3228@clari.net>, alarsson@clari.net (Amy Larsson) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Mateo Suzuki -- Carnegie Mellon University School of CS "In theory there is no difference between theory and practice." From ypark@cern.ch Sun Jun 04 18:11:49 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!cern!ypark From: ypark@cern.ch (Yuki Park) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun04.181149.4918@cern.ch> Date: Sun, 04 Jun 1995 18:11:49 GMT References: <1995Jun02.142649.3228@clari.net> <1995Jun04.172549.3536@cmu.edu> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Jun04.172549.3536@cmu.edu>, msuzuki@cmu.edu (Mateo Suzuki) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Yuki Park "Extraordinary claims require extraordinary spectra." Atari Falcon 030 / SunOS 4.1.4 From amoreno@panix.com Tue Jun 06 08:17:49 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!panix!amoreno From: amoreno@panix.com (Anja Moreno) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun06.081749.3922@panix.com> Date: Tue, 06 Jun 1995 08:17:49 GMT References: <1995Jun02.142649.3228@clari.net> <1995Jun04.172549.3536@cmu.edu> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1995Jun04.172549.3536@cmu.edu>, msuzuki@cmu.edu (Mateo Suzuki) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Anja Moreno "They will send a copy in my place." Sun SparcStation 20 / FreeBSD 2.1