From mfischer@uni-hamburg.de Tue Jul 19 07:01:33 1994
Path: ashpoly!cascade!mxgate!coyoacan!uni-hamburg!mfischer
From: mfischer@uni-hamburg.de (Mei Fischer)
Newsgroups: comp.sys.m68k
Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Jul19.070133.6445@uni-hamburg.de>
Date: Tue, 19 Jul 1994 07:01:33 GMT
Organization: Universität Hamburg Fachbereich Informatik
NNTP-Posting-Host: uni-hamburg.de
X-Newsreader: TIN [version 1.2 PL2]
Lines: 11

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Mei Fischer <mfischer@uni-hamburg.de>
*PLONK* filter active for trolls.
Decstation 5000/200 - NetBSD 1.0

From srobertson@mit.edu Wed Jul 20 20:26:33 1994
Path: ashpoly!cascade!transat!sunet!nordrelay!mit!srobertson
From: srobertson@mit.edu (Sven Robertson)
Newsgroups: comp.sys.m68k
Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Jul20.202633.6873@mit.edu>
Date: Wed, 20 Jul 1994 20:26:33 GMT
References: <1994Jul19.070133.6445@uni-hamburg.de>
Organization: Massachusetts Institute of Technology
NNTP-Posting-Host: mit.edu
X-Newsreader: WinVN 0.99.5
Lines: 8

In article <1994Jul19.070133.6445@uni-hamburg.de>, mfischer@uni-hamburg.de (Mei Fischer) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Sven Robertson
Tape trading list upon request. SASE required for international mail.