From mmoreno@clari.net Sat Nov 25 09:48:00 1995 Path: ashpoly!cascade!transat!ukc!fennimore!clari!mmoreno From: mmoreno@clari.net (Mike Moreno) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov25.094800.9026@clari.net> Date: Sat, 25 Nov 1995 09:48:00 GMT Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Mike Moreno SupraFAXModem 28.8 @ 33,600 bps "A soul is not exclusive to biology." From mduarte@titech.ac.jp Sat Nov 25 17:43:00 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!titech!mduarte From: mduarte@titech.ac.jp (Morag Duarte) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov25.174300.4149@titech.ac.jp> Date: Sat, 25 Nov 1995 17:43:00 GMT References: <1995Nov25.094800.9026@clari.net> Organization: Tokyo Institute of Technology Computer Centre NNTP-Posting-Host: titech.ac.jp X-Newsreader: Netscape 1.1N Lines: 12 In article <1995Nov25.094800.9026@clari.net>, mmoreno@clari.net (Mike Moreno) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Morag Duarte Opinions expressed are solely my own and not those of Tokyo Institute of Technology Computer Centre. ------------------------------------------------------------ From jschneider@mindspring.com Sun Nov 26 14:20:00 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!mindspring!jschneider From: jschneider@mindspring.com (Jen Schneider) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov26.142000.3301@mindspring.com> Date: Sun, 26 Nov 1995 14:20:00 GMT References: <1995Nov25.094800.9026@clari.net> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Nov25.094800.9026@clari.net>, mmoreno@clari.net (Mike Moreno) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Jen Schneider === Dept of Electrical Engineering, MindSpring Enterprises "The carrier frequency does not drift by accident." From mlarsson@berkeley.edu Tue Nov 28 07:31:00 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!berkeley!mlarsson From: mlarsson@berkeley.edu (Mathieu Larsson) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov28.073100.9763@berkeley.edu> Date: Tue, 28 Nov 1995 07:31:00 GMT References: <1995Nov25.094800.9026@clari.net> <1995Nov25.174300.4149@titech.ac.jp> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Nov25.174300.4149@titech.ac.jp>, mduarte@titech.ac.jp (Morag Duarte) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! > Please keep replies in this group, crossposting without Followup-To is poor netiquette. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Mathieu Larsson *PLONK* filter active for trolls. Amiga 3000T - NetBSD 1.0