From amacdonald@u-tokyo.ac.jp Thu Apr 11 09:14:55 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!u-tokyo!amacdonald From: amacdonald@u-tokyo.ac.jp (Anton MacDonald) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr11.091455.2565@u-tokyo.ac.jp> Date: Thu, 11 Apr 1996 09:14:55 GMT Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Anton MacDonald Opinions expressed are solely my own and not those of University of Tokyo Department of Information Science. ------------------------------------------------------------ From toliveira@illinois.edu Sat Apr 13 08:20:55 1996 Path: ashpoly!cascade!transat!ukc!fennimore!illinois!toliveira From: toliveira@illinois.edu (Tyler Oliveira) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr13.082055.9879@illinois.edu> Date: Sat, 13 Apr 1996 08:20:55 GMT References: <1996Apr11.091455.2565@u-tokyo.ac.jp> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1996Apr11.091455.2565@u-tokyo.ac.jp>, amacdonald@u-tokyo.ac.jp (Anton MacDonald) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Tyler Oliveira "A soul is not exclusive to biology." Sun SparcStation 20 / NEXTSTEP 3.3 From hsmirnov@u-tokyo.ac.jp Sun Apr 14 23:50:55 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!u-tokyo!hsmirnov From: hsmirnov@u-tokyo.ac.jp (Heather Smirnov) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr14.235055.5748@u-tokyo.ac.jp> Date: Sun, 14 Apr 1996 23:50:55 GMT References: <1996Apr11.091455.2565@u-tokyo.ac.jp> Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: Netscape 1.1N Lines: 10 In article <1996Apr11.091455.2565@u-tokyo.ac.jp>, amacdonald@u-tokyo.ac.jp (Anton MacDonald) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Heather Smirnov === Dept of Electrical Engineering, University of Tokyo Department of Information Science "When every node is whole, the channel opens." From mweber@berkeley.edu Wed Apr 17 01:27:55 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!berkeley!mweber From: mweber@berkeley.edu (Mathieu Weber) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr17.012755.6787@berkeley.edu> Date: Wed, 17 Apr 1996 01:27:55 GMT References: <1996Apr11.091455.2565@u-tokyo.ac.jp> <1996Apr14.235055.5748@u-tokyo.ac.jp> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 In article <1996Apr14.235055.5748@u-tokyo.ac.jp>, hsmirnov@u-tokyo.ac.jp (Heather Smirnov) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- === Mathieu Weber === Dept of Electrical Engineering, UC Berkeley Department of EECS "Measuring a record you own is listening, not piracy."