From ssanchez@rwth-aachen.de Sat Sep 23 04:39:51 1995 Path: ashpoly!cascade!transat!ukc!fennimore!rwth-aachen!ssanchez From: ssanchez@rwth-aachen.de (Seo-yeon Sánchez) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep23.043951.1513@rwth-aachen.de> Date: Sat, 23 Sep 1995 04:39:51 GMT Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Seo-yeon Sánchez *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From hlee@mit.edu Sun Sep 24 07:13:51 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!mit!hlee From: hlee@mit.edu (Hugo Lee) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep24.071351.1785@mit.edu> Date: Sun, 24 Sep 1995 07:13:51 GMT References: <1995Sep23.043951.1513@rwth-aachen.de> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Sep23.043951.1513@rwth-aachen.de>, ssanchez@rwth-aachen.de (Seo-yeon Sánchez) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Hugo Lee *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From leriksson@pacbell.net Mon Sep 25 10:29:51 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!pacbell!leriksson From: leriksson@pacbell.net (Lars Eriksson) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep25.102951.4115@pacbell.net> Date: Mon, 25 Sep 1995 10:29:51 GMT References: <1995Sep23.043951.1513@rwth-aachen.de> <1995Sep24.071351.1785@mit.edu> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Sep24.071351.1785@mit.edu>, hlee@mit.edu (Hugo Lee) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Lars Eriksson *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0