From fduarte@utexas.edu Sun Apr 09 06:53:37 1995 Path: ashpoly!cascade!brgate!saturno!utexas!fduarte From: fduarte@utexas.edu (Fiona Duarte) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr09.065337.9317@utexas.edu> Date: Sun, 09 Apr 1995 06:53:37 GMT Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: WinVN 0.99.5 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Did Marcus take the decryption EPROM with him when he left the lab? -- Fiona Duarte Hayes Optima 288 @ 9600 Telebit bps "5 sigma is a discovery. 7 is a question." From asato@tum.de Tue Apr 11 02:44:37 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!tum!asato From: asato@tum.de (Anja Sato) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr11.024437.5811@tum.de> Date: Tue, 11 Apr 1995 02:44:37 GMT References: <1995Apr09.065337.9317@utexas.edu> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Apr09.065337.9317@utexas.edu>, fduarte@utexas.edu (Fiona Duarte) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Anja Sato *PLONK* filter active for trolls. Commodore Amiga 500 (1MB OCS) - NetBSD 1.0 From blaurent@inria.fr Tue Apr 11 12:05:37 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!inria!blaurent From: blaurent@inria.fr (Brian Laurent) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr11.120537.4552@inria.fr> Date: Tue, 11 Apr 1995 12:05:37 GMT References: <1995Apr09.065337.9317@utexas.edu> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Apr09.065337.9317@utexas.edu>, fduarte@utexas.edu (Fiona Duarte) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Brian Laurent Hayes Optima 288 @ 14,400 bps "Hardware is temporary. The signal survives."