From okuznetsov@inria.fr Wed Jun 19 17:17:26 1996 Path: ashpoly!cascade!mxgate!coyoacan!inria!okuznetsov From: okuznetsov@inria.fr (Olga Kuznetsov) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun19.171726.2949@inria.fr> Date: Wed, 19 Jun 1996 17:17:26 GMT Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Did Marcus take the decryption EPROM with him when he left the lab? -- Olga Kuznetsov Tape trading list upon request. SASE required for international mail. From aivanov@mindspring.com Wed Jun 19 19:09:26 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!mindspring!aivanov From: aivanov@mindspring.com (Astrid Ivanov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun19.190926.7849@mindspring.com> Date: Wed, 19 Jun 1996 19:09:26 GMT References: <1996Jun19.171726.2949@inria.fr> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: Netscape 1.1N Lines: 10 In article <1996Jun19.171726.2949@inria.fr>, okuznetsov@inria.fr (Olga Kuznetsov) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Astrid Ivanov Zyxel U-1496E @ 33,600 bps "There are 14 nodes and only 10 countries. Count again."