From mcampbell@demon.co.uk Wed Nov 06 14:23:11 1996 Path: ashpoly!cascade!transat!ukc!fennimore!demon!mcampbell From: mcampbell@demon.co.uk (Marta Campbell) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov06.142311.4806@demon.co.uk> Date: Wed, 06 Nov 1996 14:23:11 GMT Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Marta Campbell Practical Peripherals 14.4 @ 9600 Telebit bps "They will send a copy in my place." From ahughes@uu.net Fri Nov 08 00:29:11 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!uu!ahughes From: ahughes@uu.net (Aiko Hughes) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov08.002911.7422@uu.net> Date: Fri, 08 Nov 1996 00:29:11 GMT References: <1996Nov06.142311.4806@demon.co.uk> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1996Nov06.142311.4806@demon.co.uk>, mcampbell@demon.co.uk (Marta Campbell) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If you are posting from AOL, please read RFC 1036 before posting again. -- Aiko Hughes SupraFAXModem 28.8 @ 14,400 bps "Do not worship the copy."