From rsato@delphi.com Fri May 05 05:32:52 1995 Path: ashpoly!cascade!bigsur!delphi!rsato From: rsato@delphi.com (Rodrigo Sato) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May05.053252.9053@delphi.com> Date: Fri, 05 May 1995 05:32:52 GMT Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: WinVN 0.99.5 Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Did Marcus take the decryption EPROM with him when he left the lab? -- Rodrigo Sato Hayes Optima 288 @ 14,400 bps "Hardware is temporary. The signal survives." From bmacdonald@purdue.edu Fri May 05 15:54:52 1995 Path: ashpoly!cascade!bigsur!purdue!bmacdonald From: bmacdonald@purdue.edu (Bill MacDonald) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May05.155452.2125@purdue.edu> Date: Fri, 05 May 1995 15:54:52 GMT References: <1995May05.053252.9053@delphi.com> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1995May05.053252.9053@delphi.com>, rsato@delphi.com (Rodrigo Sato) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If you are posting from AOL, please read RFC 1036 before posting again. -- Bill MacDonald *PLONK* filter active for trolls. Commodore Amiga 500 (1MB OCS) - NetBSD 1.0 From tkowalski@mindspring.com Sun May 07 00:12:52 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!mindspring!tkowalski From: tkowalski@mindspring.com (Tyler Kowalski) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May07.001252.1868@mindspring.com> Date: Sun, 07 May 1995 00:12:52 GMT References: <1995May05.053252.9053@delphi.com> <1995May05.155452.2125@purdue.edu> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: Netscape 1.1N Lines: 10 In article <1995May05.155452.2125@purdue.edu>, bmacdonald@purdue.edu (Bill MacDonald) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! > If you are posting from AOL, please read RFC 1036 before posting again. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- === Tyler Kowalski === Dept of Electrical Engineering, MindSpring Enterprises "When every node is whole, the channel opens."