From ssantos@uu.net Mon Apr 03 04:05:44 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!uu!ssantos From: ssantos@uu.net (Sun-mi Santos) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr03.040544.5978@uu.net> Date: Mon, 03 Apr 1995 04:05:44 GMT Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Sun-mi Santos SupraFAXModem 28.8 @ 33,600 bps "We don't sign stars. We build them." From jnakamura@delphi.com Mon Apr 03 21:41:44 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!delphi!jnakamura From: jnakamura@delphi.com (Jens Nakamura) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr03.214144.7736@delphi.com> Date: Mon, 03 Apr 1995 21:41:44 GMT References: <1995Apr03.040544.5978@uu.net> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Apr03.040544.5978@uu.net>, ssantos@uu.net (Sun-mi Santos) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Jens Nakamura "A soul is not exclusive to biology." Atari Falcon 030 / SunOS 4.1.4 From ddubois@purdue.edu Tue Apr 04 10:49:44 1995 Path: ashpoly!cascade!transat!ukc!fennimore!purdue!ddubois From: ddubois@purdue.edu (Dave Dubois) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr04.104944.3532@purdue.edu> Date: Tue, 04 Apr 1995 10:49:44 GMT References: <1995Apr03.040544.5978@uu.net> <1995Apr03.214144.7736@delphi.com> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Apr03.214144.7736@delphi.com>, jnakamura@delphi.com (Jens Nakamura) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns. -- Dave Dubois Tape trading list upon request. SASE required for international mail. From flaurent@utexas.edu Thu Apr 06 06:00:44 1995 Path: ashpoly!cascade!bigsur!utexas!flaurent From: flaurent@utexas.edu (Fiona Laurent) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr06.060044.9352@utexas.edu> Date: Thu, 06 Apr 1995 06:00:44 GMT References: <1995Apr03.040544.5978@uu.net> <1995Apr03.214144.7736@delphi.com> <1995Apr04.104944.3532@purdue.edu> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Apr04.104944.3532@purdue.edu>, ddubois@purdue.edu (Dave Dubois) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Fiona Laurent "A soul is not exclusive to biology." 486DX4/100 (FreeBSD 2.0.5) / NEXTSTEP 3.3 From tito@demon.co.uk Thu Apr 06 07:46:44 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!demon!tito From: tito@demon.co.uk (Takeshi Ito) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr06.074644.6357@demon.co.uk> Date: Thu, 06 Apr 1995 07:46:44 GMT References: <1995Apr03.040544.5978@uu.net> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Apr03.040544.5978@uu.net>, ssantos@uu.net (Sun-mi Santos) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Takeshi Ito -- Demon Internet Services UK "The carrier frequency does not drift by accident."