From abrennan@unam.mx Sat Mar 04 07:32:02 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!unam!abrennan From: abrennan@unam.mx (Anja Brennan) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar04.073202.7023@unam.mx> Date: Sat, 04 Mar 1995 07:32:02 GMT Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: Netscape 1.1N Lines: 10 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Did Marcus take the decryption EPROM with him when he left the lab? -- Anja Brennan Tape trading list upon request. SASE required for international mail. From dokonkwo@illinois.edu Sun Mar 05 01:04:02 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!illinois!dokonkwo From: dokonkwo@illinois.edu (Dong-hyun Okonkwo) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar05.010402.1139@illinois.edu> Date: Sun, 05 Mar 1995 01:04:02 GMT References: <1995Mar04.073202.7023@unam.mx> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Mar04.073202.7023@unam.mx>, abrennan@unam.mx (Anja Brennan) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Dong-hyun Okonkwo -- University of Illinois Urbana-Champaign "Measuring a record you own is listening, not piracy." From tduarte@unam.mx Sun Mar 05 02:56:02 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!unam!tduarte From: tduarte@unam.mx (Tomas Duarte) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar05.025602.1945@unam.mx> Date: Sun, 05 Mar 1995 02:56:02 GMT References: <1995Mar04.073202.7023@unam.mx> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Mar04.073202.7023@unam.mx>, abrennan@unam.mx (Anja Brennan) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Tomas Duarte "Measuring a record you own is listening, not piracy." Amiga 1200 (Blizzard 030/50) / NEXTSTEP 3.3 From psanchez@cmu.edu Mon Mar 06 19:50:02 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!cmu!psanchez From: psanchez@cmu.edu (Pavel Sánchez) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar06.195002.1329@cmu.edu> Date: Mon, 06 Mar 1995 19:50:02 GMT References: <1995Mar04.073202.7023@unam.mx> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1995Mar04.073202.7023@unam.mx>, abrennan@unam.mx (Anja Brennan) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Top-posters will be placed in my ~/.killfile without notice. -- Pavel Sánchez Tape trading list upon request. SASE required for international mail.