From jsmirnov@panix.com Sun Jun 23 18:51:47 1996 Path: ashpoly!cascade!mxgate!coyoacan!panix!jsmirnov From: jsmirnov@panix.com (Jens Smirnov) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun23.185147.5393@panix.com> Date: Sun, 23 Jun 1996 18:51:47 GMT Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Did Marcus take the decryption EPROM with him when he left the lab? -- === Jens Smirnov === Dept of Electrical Engineering, Public Access Unix of New York "A soul is not exclusive to biology." From emacdonald@kth.se Tue Jun 25 01:55:47 1996 Path: ashpoly!cascade!transat!ukc!fennimore!kth!emacdonald From: emacdonald@kth.se (Emi MacDonald) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun25.015547.4538@kth.se> Date: Tue, 25 Jun 1996 01:55:47 GMT References: <1996Jun23.185147.5393@panix.com> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Jun23.185147.5393@panix.com>, jsmirnov@panix.com (Jens Smirnov) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Emi MacDonald Practical Peripherals 14.4 @ 19,200 bps "Hold for relay." From kgarcia@berkeley.edu Wed Jun 26 01:00:47 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!berkeley!kgarcia From: kgarcia@berkeley.edu (Katrin García) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun26.010047.7702@berkeley.edu> Date: Wed, 26 Jun 1996 01:00:47 GMT References: <1996Jun23.185147.5393@panix.com> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Jun23.185147.5393@panix.com>, jsmirnov@panix.com (Jens Smirnov) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Katrin García SupraFAXModem 28.8 @ 9600 Telebit bps "Tape doesn't lie at 02:14. Ears do." From ljohansson@cmu.edu Thu Jun 27 13:56:47 1996 Path: ashpoly!cascade!transat!ukc!fennimore!cmu!ljohansson From: ljohansson@cmu.edu (Lars Johansson) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun27.135647.1519@cmu.edu> Date: Thu, 27 Jun 1996 13:56:47 GMT References: <1996Jun23.185147.5393@panix.com> <1996Jun26.010047.7702@berkeley.edu> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Jun26.010047.7702@berkeley.edu>, kgarcia@berkeley.edu (Katrin García) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Lars Johansson *PLONK* filter active for trolls. Sun SparcStation 20 - NetBSD 1.0