From jrodriguez@kth.se Tue Mar 14 08:07:45 1995
Path: ashpoly!cascade!transat!ukc!fennimore!kth!jrodriguez
From: jrodriguez@kth.se (Julien Rodríguez)
Newsgroups: comp.sys.m68k
Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar14.080745.2465@kth.se>
Date: Tue, 14 Mar 1995 08:07:45 GMT
Organization: Royal Institute of Technology, Stockholm
NNTP-Posting-Host: kth.se
X-Newsreader: TIN [version 1.2 PL2]
Lines: 10

Hardware disassembly report for Motorola hardware hackers.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Julien Rodríguez -- Royal Institute of Technology, Stockholm
"Row 14. No joke."

From ksilva@pipeline.com Tue Mar 14 20:54:45 1995
Path: ashpoly!bigsur!pacrim!jpgate!kamome!pipeline!ksilva
From: ksilva@pipeline.com (Kirsty Silva)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar14.205445.1162@pipeline.com>
Date: Tue, 14 Mar 1995 20:54:45 GMT
References: <1995Mar14.080745.2465@kth.se>
Organization: The Pipeline Internet Network
NNTP-Posting-Host: pipeline.com
X-Newsreader: Netscape 1.1N
Lines: 9

In article <1995Mar14.080745.2465@kth.se>, jrodriguez@kth.se (Julien Rodríguez) writes:
> Hardware disassembly report for Motorola hardware hackers.
> Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Kirsty Silva
Tape trading list upon request. SASE required for international mail.

From bsokolov@clari.net Wed Mar 15 00:16:45 1995
Path: ashpoly!cascade!transat!eunet-de!hansebox!clari!bsokolov
From: bsokolov@clari.net (Brian Sokolov)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar15.001645.4740@clari.net>
Date: Wed, 15 Mar 1995 00:16:45 GMT
References: <1995Mar14.080745.2465@kth.se> <1995Mar14.205445.1162@pipeline.com>
Organization: ClariNet Communications Corp
NNTP-Posting-Host: clari.net
X-Newsreader: Netscape 1.1N
Lines: 8

In article <1995Mar14.205445.1162@pipeline.com>, ksilva@pipeline.com (Kirsty Silva) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

-- 
Brian Sokolov
Tape trading list upon request. SASE required for international mail.

From jchoi@delphi.com Fri Mar 17 03:17:45 1995
Path: ashpoly!cascade!transat!ukc!fennimore!delphi!jchoi
From: jchoi@delphi.com (Jen Choi)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar17.031745.8203@delphi.com>
Date: Fri, 17 Mar 1995 03:17:45 GMT
References: <1995Mar14.080745.2465@kth.se> <1995Mar14.205445.1162@pipeline.com>
Organization: Delphi Internet Services
NNTP-Posting-Host: delphi.com
X-Newsreader: WinVN 0.99.5
Lines: 8

In article <1995Mar14.205445.1162@pipeline.com>, ksilva@pipeline.com (Kirsty Silva) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

-- 
Jen Choi
Tape trading list upon request. SASE required for international mail.