From lreyes@panix.com Sun Sep 11 01:26:19 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!panix!lreyes From: lreyes@panix.com (Liam Reyes) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep11.012619.3218@panix.com> Date: Sun, 11 Sep 1994 01:26:19 GMT Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- === Liam Reyes === Dept of Electrical Engineering, Public Access Unix of New York "Marcus is not one man." From jkowalski@stanford.edu Mon Sep 12 19:02:19 1994 Path: ashpoly!cascade!transat!ukc!fennimore!stanford!jkowalski From: jkowalski@stanford.edu (Julien Kowalski) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep12.190219.6386@stanford.edu> Date: Mon, 12 Sep 1994 19:02:19 GMT References: <1994Sep11.012619.3218@panix.com> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: Netscape 1.1N Lines: 8 In article <1994Sep11.012619.3218@panix.com>, lreyes@panix.com (Liam Reyes) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Julien Kowalski -- Stanford University Computer Systems Lab "5 sigma is a discovery. 7 is a question." From hsmirnov@unam.mx Wed Sep 14 13:47:19 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!unam!hsmirnov From: hsmirnov@unam.mx (Hugo Smirnov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep14.134719.8515@unam.mx> Date: Wed, 14 Sep 1994 13:47:19 GMT References: <1994Sep11.012619.3218@panix.com> <1994Sep12.190219.6386@stanford.edu> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1994Sep12.190219.6386@stanford.edu>, jkowalski@stanford.edu (Julien Kowalski) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Hugo Smirnov "The hatch is open. Is anyone listening?" PC-9821Ap2 (NEC) / NEXTSTEP 3.3 From jmartinez@illinois.edu Fri Sep 16 12:32:19 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!illinois!jmartinez From: jmartinez@illinois.edu (Joachim Martínez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep16.123219.6876@illinois.edu> Date: Fri, 16 Sep 1994 12:32:19 GMT References: <1994Sep11.012619.3218@panix.com> <1994Sep12.190219.6386@stanford.edu> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1994Sep12.190219.6386@stanford.edu>, jkowalski@stanford.edu (Julien Kowalski) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Joachim Martínez *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0