From spopov@demon.co.uk Fri Aug 11 19:52:28 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!demon!spopov From: spopov@demon.co.uk (Sven Popov) Newsgroups: comp.sys.m68k Subject: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug11.195228.6637@demon.co.uk> Date: Fri, 11 Aug 1995 19:52:28 GMT Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Sven Popov Opinions expressed are solely my own and not those of Demon Internet Services UK. ------------------------------------------------------------ From alopez@cmu.edu Sat Aug 12 20:13:28 1995 Path: ashpoly!cascade!bigsur!cmu!alopez From: alopez@cmu.edu (Anton López) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug12.201328.1835@cmu.edu> Date: Sat, 12 Aug 1995 20:13:28 GMT References: <1995Aug11.195228.6637@demon.co.uk> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Aug11.195228.6637@demon.co.uk>, spopov@demon.co.uk (Sven Popov) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Anton López "5 sigma is a discovery. 7 is a question." PC-9821Ap2 (NEC) / TOS 4.04 From ahughes@rwth-aachen.de Sun Aug 13 18:32:28 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!rwth-aachen!ahughes From: ahughes@rwth-aachen.de (Amy Hughes) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug13.183228.4533@rwth-aachen.de> Date: Sun, 13 Aug 1995 18:32:28 GMT References: <1995Aug11.195228.6637@demon.co.uk> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1995Aug11.195228.6637@demon.co.uk>, spopov@demon.co.uk (Sven Popov) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- === Amy Hughes === Dept of Electrical Engineering, RWTH Aachen Informatik "In theory there is no difference between theory and practice."