From gsanchez@delphi.com Mon Mar 18 05:12:01 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!delphi!gsanchez From: gsanchez@delphi.com (Göran Sánchez) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar18.051201.7006@delphi.com> Date: Mon, 18 Mar 1996 05:12:01 GMT Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: WinVN 0.99.5 Lines: 10 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Göran Sánchez Tape trading list upon request. SASE required for international mail. From shughes@uu.net Wed Mar 20 01:08:01 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!uu!shughes From: shughes@uu.net (Sven Hughes) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar20.010801.8183@uu.net> Date: Wed, 20 Mar 1996 01:08:01 GMT References: <1996Mar18.051201.7006@delphi.com> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1996Mar18.051201.7006@delphi.com>, gsanchez@delphi.com (Göran Sánchez) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Sven Hughes *PLONK* filter active for trolls. Macintosh IIfx - NetBSD 1.0 From smacdonald@titech.ac.jp Fri Mar 22 01:10:01 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!titech!smacdonald From: smacdonald@titech.ac.jp (Sergei MacDonald) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar22.011001.7262@titech.ac.jp> Date: Fri, 22 Mar 1996 01:10:01 GMT References: <1996Mar18.051201.7006@delphi.com> <1996Mar20.010801.8183@uu.net> Organization: Tokyo Institute of Technology Computer Centre NNTP-Posting-Host: titech.ac.jp X-Newsreader: WinVN 0.99.5 Lines: 8 In article <1996Mar20.010801.8183@uu.net>, shughes@uu.net (Sven Hughes) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Sergei MacDonald -- Tokyo Institute of Technology Computer Centre "The carrier frequency does not drift by accident." From lmartinez@delphi.com Fri Mar 22 18:34:01 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!delphi!lmartinez From: lmartinez@delphi.com (Lisa Martínez) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar22.183401.3159@delphi.com> Date: Fri, 22 Mar 1996 18:34:01 GMT References: <1996Mar18.051201.7006@delphi.com> <1996Mar20.010801.8183@uu.net> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: TIN [version 1.2 PL2] Lines: 8 In article <1996Mar20.010801.8183@uu.net>, shughes@uu.net (Sven Hughes) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Lisa Martínez Tape trading list upon request. SASE required for international mail.