From ssmirnov@u-tokyo.ac.jp Thu Jun 13 00:06:17 1996
Path: ashpoly!bigsur!pacrim!jpgate!kamome!u-tokyo!ssmirnov
From: ssmirnov@u-tokyo.ac.jp (Steve Smirnov)
Newsgroups: comp.sys.m68k
Subject: Question: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Jun13.000617.8506@u-tokyo.ac.jp>
Date: Thu, 13 Jun 1996 00:06:17 GMT
Organization: University of Tokyo Department of Information Science
NNTP-Posting-Host: u-tokyo.ac.jp
X-Newsreader: WinVN 0.99.5
Lines: 10

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.
Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.

Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet.

-- 
Steve Smirnov -- University of Tokyo Department of Information Science
"5 sigma is a discovery. 7 is a question."

From jrodriguez@cam.ac.uk Fri Jun 14 07:11:17 1996
Path: ashpoly!bigsur!pacrim!krgate!eunha!cam!jrodriguez
From: jrodriguez@cam.ac.uk (Joachim Rodríguez)
Newsgroups: comp.sys.m68k
Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Jun14.071117.1682@cam.ac.uk>
Date: Fri, 14 Jun 1996 07:11:17 GMT
References: <1996Jun13.000617.8506@u-tokyo.ac.jp>
Organization: University of Cambridge Computer Laboratory
NNTP-Posting-Host: cam.ac.uk
X-Newsreader: TIN [version 1.2 PL2]
Lines: 11

In article <1996Jun13.000617.8506@u-tokyo.ac.jp>, ssmirnov@u-tokyo.ac.jp (Steve Smirnov) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.
> Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

If you are posting from AOL, please read RFC 1036 before posting again.

-- 
Joachim Rodríguez -- University of Cambridge Computer Laboratory
"The hatch is open. Is anyone listening?"

From swatanabe@clari.net Fri Jun 14 11:59:17 1996
Path: ashpoly!cascade!brgate!saturno!clari!swatanabe
From: swatanabe@clari.net (Steve Watanabe)
Newsgroups: comp.sys.m68k
Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Jun14.115917.3677@clari.net>
Date: Fri, 14 Jun 1996 11:59:17 GMT
References: <1996Jun13.000617.8506@u-tokyo.ac.jp>
Organization: ClariNet Communications Corp
NNTP-Posting-Host: clari.net
X-Newsreader: NewsWatcher 2.0b24
Lines: 10

In article <1996Jun13.000617.8506@u-tokyo.ac.jp>, ssmirnov@u-tokyo.ac.jp (Steve Smirnov) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.
> Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
=== Steve Watanabe ===
Dept of Electrical Engineering, ClariNet Communications Corp
"We don't sign stars. We build them."

From hhernandez@berkeley.edu Fri Jun 14 15:54:17 1996
Path: ashpoly!cascade!transat!sunet!nordrelay!berkeley!hhernandez
From: hhernandez@berkeley.edu (Hugo Hernández)
Newsgroups: comp.sys.m68k
Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Jun14.155417.1748@berkeley.edu>
Date: Fri, 14 Jun 1996 15:54:17 GMT
References: <1996Jun13.000617.8506@u-tokyo.ac.jp> <1996Jun14.115917.3677@clari.net>
Organization: UC Berkeley Department of EECS
NNTP-Posting-Host: berkeley.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 8

In article <1996Jun14.115917.3677@clari.net>, swatanabe@clari.net (Steve Watanabe) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys.

-- 
Hugo Hernández
Tape trading list upon request. SASE required for international mail.