From rsantos@inria.fr Wed Jun 07 03:15:52 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!inria!rsantos From: rsantos@inria.fr (Rodrigo Santos) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun07.031552.6186@inria.fr> Date: Wed, 07 Jun 1995 03:15:52 GMT Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Did Marcus take the decryption EPROM with him when he left the lab? -- === Rodrigo Santos === Dept of Electrical Engineering, INRIA Rocquencourt "A soul is not exclusive to biology." From ktanaka@ox.ac.uk Fri Jun 09 01:59:52 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!ox!ktanaka From: ktanaka@ox.ac.uk (Katrin Tanaka) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun09.015952.3268@ox.ac.uk> Date: Fri, 09 Jun 1995 01:59:52 GMT References: <1995Jun07.031552.6186@inria.fr> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Jun07.031552.6186@inria.fr>, rsantos@inria.fr (Rodrigo Santos) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Katrin Tanaka *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From bnovak@inria.fr Fri Jun 09 15:56:52 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!inria!bnovak From: bnovak@inria.fr (Bruno Novak) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun09.155652.9703@inria.fr> Date: Fri, 09 Jun 1995 15:56:52 GMT References: <1995Jun07.031552.6186@inria.fr> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Jun07.031552.6186@inria.fr>, rsantos@inria.fr (Rodrigo Santos) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Bruno Novak SupraFAXModem 28.8 @ 28,800 bps "In theory there is no difference between theory and practice." From fgarcia@ox.ac.uk Sat Jun 10 12:49:52 1995 Path: ashpoly!cascade!mxgate!coyoacan!ox!fgarcia From: fgarcia@ox.ac.uk (Fiona García) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun10.124952.3305@ox.ac.uk> Date: Sat, 10 Jun 1995 12:49:52 GMT References: <1995Jun07.031552.6186@inria.fr> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1995Jun07.031552.6186@inria.fr>, rsantos@inria.fr (Rodrigo Santos) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Fiona García "Tape doesn't lie at 02:14. Ears do." Decstation 5000/200 / FreeBSD 2.1 From nrobertson@rwth-aachen.de Sat Jun 10 19:47:52 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!rwth-aachen!nrobertson From: nrobertson@rwth-aachen.de (Nadine Robertson) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun10.194752.1632@rwth-aachen.de> Date: Sat, 10 Jun 1995 19:47:52 GMT References: <1995Jun07.031552.6186@inria.fr> <1995Jun09.015952.3268@ox.ac.uk> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Jun09.015952.3268@ox.ac.uk>, ktanaka@ox.ac.uk (Katrin Tanaka) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Nadine Robertson | nrobertson@rwth-aachen.de PGP Key fingerprint: EBD3 5362 6625 17B8 "Keep the channels open."