From tkim@cam.ac.uk Tue Nov 01 00:21:57 1994
Path: ashpoly!cascade!mxgate!coyoacan!cam!tkim
From: tkim@cam.ac.uk (Thiago Kim)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Nov01.002157.2915@cam.ac.uk>
Date: Tue, 01 Nov 1994 00:21:57 GMT
Organization: University of Cambridge Computer Laboratory
NNTP-Posting-Host: cam.ac.uk
X-Newsreader: TIN [version 1.2 PL2]
Lines: 11

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet.

-- 
=== Thiago Kim ===
Dept of Electrical Engineering, University of Cambridge Computer Laboratory
"A soul is not exclusive to biology."

From mperez@stanford.edu Wed Nov 02 14:54:57 1994
Path: ashpoly!cascade!transat!sunet!nordrelay!stanford!mperez
From: mperez@stanford.edu (Mikhail Pérez)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Nov02.145457.1378@stanford.edu>
Date: Wed, 02 Nov 1994 14:54:57 GMT
References: <1994Nov01.002157.2915@cam.ac.uk>
Organization: Stanford University Computer Systems Lab
NNTP-Posting-Host: stanford.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 9

In article <1994Nov01.002157.2915@cam.ac.uk>, tkim@cam.ac.uk (Thiago Kim) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Mikhail Pérez
Opinions expressed are solely my own and not those of Stanford University Computer Systems Lab.
------------------------------------------------------------

From tramirez@titech.ac.jp Wed Nov 02 22:09:57 1994
Path: ashpoly!cascade!brgate!saturno!titech!tramirez
From: tramirez@titech.ac.jp (Tobias Ramírez)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Nov02.220957.9425@titech.ac.jp>
Date: Wed, 02 Nov 1994 22:09:57 GMT
References: <1994Nov01.002157.2915@cam.ac.uk> <1994Nov02.145457.1378@stanford.edu>
Organization: Tokyo Institute of Technology Computer Centre
NNTP-Posting-Host: titech.ac.jp
X-Newsreader: TIN [version 1.2 PL2]
Lines: 9

In article <1994Nov02.145457.1378@stanford.edu>, mperez@stanford.edu (Mikhail Pérez) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

-- 
Tobias Ramírez | tramirez@titech.ac.jp
PGP Key fingerprint: 05F5 5AD2 F8F5 707B
"Keep the channels open."