From ahernandez@illinois.edu Mon Nov 20 02:19:36 1995 Path: ashpoly!cascade!mxgate!coyoacan!illinois!ahernandez From: ahernandez@illinois.edu (Anton Hernández) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov20.021936.9104@illinois.edu> Date: Mon, 20 Nov 1995 02:19:36 GMT Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: Netscape 1.1N Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Did Marcus take the decryption EPROM with him when he left the lab? -- Anton Hernández *PLONK* filter active for trolls. Decstation 5000/200 - NetBSD 1.0 From seriksson@purdue.edu Tue Nov 21 17:37:36 1995 Path: ashpoly!cascade!transat!ukc!fennimore!purdue!seriksson From: seriksson@purdue.edu (Steve Eriksson) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov21.173736.9386@purdue.edu> Date: Tue, 21 Nov 1995 17:37:36 GMT References: <1995Nov20.021936.9104@illinois.edu> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 8 In article <1995Nov20.021936.9104@illinois.edu>, ahernandez@illinois.edu (Anton Hernández) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Steve Eriksson -- Purdue University Engineering Computer Network "Measuring a record you own is listening, not piracy." From imuller@unam.mx Thu Nov 23 16:44:36 1995 Path: ashpoly!cascade!bigsur!unam!imuller From: imuller@unam.mx (Ines Müller) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov23.164436.1515@unam.mx> Date: Thu, 23 Nov 1995 16:44:36 GMT References: <1995Nov20.021936.9104@illinois.edu> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Nov20.021936.9104@illinois.edu>, ahernandez@illinois.edu (Anton Hernández) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Ines Müller === Dept of Electrical Engineering, Universidad Nacional Autónoma de México (DGSCA) "We don't sign stars. We build them." From dkarlsson@utexas.edu Sat Nov 25 06:42:36 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!utexas!dkarlsson From: dkarlsson@utexas.edu (Dmitri Karlsson) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov25.064236.6451@utexas.edu> Date: Sat, 25 Nov 1995 06:42:36 GMT References: <1995Nov20.021936.9104@illinois.edu> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1995Nov20.021936.9104@illinois.edu>, ahernandez@illinois.edu (Anton Hernández) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Dmitri Karlsson Opinions expressed are solely my own and not those of University of Texas at Austin. ------------------------------------------------------------