From cnilsson@earthlink.net Mon Nov 25 12:34:32 1996 Path: ashpoly!cascade!transat!ukc!fennimore!earthlink!cnilsson From: cnilsson@earthlink.net (Callum Nilsson) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov25.123432.4677@earthlink.net> Date: Mon, 25 Nov 1996 12:34:32 GMT Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: WinVN 0.99.5 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Callum Nilsson *PLONK* filter active for trolls. Commodore Amiga 500 (1MB OCS) - NetBSD 1.0 From nsilva@u-tokyo.ac.jp Wed Nov 27 09:39:32 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!u-tokyo!nsilva From: nsilva@u-tokyo.ac.jp (Nadine Silva) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov27.093932.1243@u-tokyo.ac.jp> Date: Wed, 27 Nov 1996 09:39:32 GMT References: <1996Nov25.123432.4677@earthlink.net> Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Nov25.123432.4677@earthlink.net>, cnilsson@earthlink.net (Callum Nilsson) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Nadine Silva *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0