From bjohansson@uu.net Wed May 04 15:10:11 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!uu!bjohansson From: bjohansson@uu.net (Bastien Johansson) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May04.151011.7261@uu.net> Date: Wed, 04 May 1994 15:10:11 GMT Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Bastien Johansson "The hatch is open. Is anyone listening?" Mac IIci / 68882 FPU / TOS 4.04 From agonzalez@unam.mx Thu May 05 20:23:11 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!unam!agonzalez From: agonzalez@unam.mx (Amy González) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May05.202311.1360@unam.mx> Date: Thu, 05 May 1994 20:23:11 GMT References: <1994May04.151011.7261@uu.net> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: WinVN 0.99.5 Lines: 12 In article <1994May04.151011.7261@uu.net>, bjohansson@uu.net (Bastien Johansson) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- === Amy González === Dept of Electrical Engineering, Universidad Nacional Autónoma de México (DGSCA) "Measuring a record you own is listening, not piracy." From afournier@rwth-aachen.de Fri May 06 13:23:11 1994 Path: ashpoly!cascade!transat!ukc!fennimore!rwth-aachen!afournier From: afournier@rwth-aachen.de (Anton Fournier) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May06.132311.1802@rwth-aachen.de> Date: Fri, 06 May 1994 13:23:11 GMT References: <1994May04.151011.7261@uu.net> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: Netscape 1.1N Lines: 10 In article <1994May04.151011.7261@uu.net>, bjohansson@uu.net (Bastien Johansson) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Anton Fournier Zyxel U-1496E @ 9600 Telebit bps "When every node is whole, the channel opens."