From ecampbell@netcom.com Wed Oct 05 23:40:48 1994 Path: ashpoly!cascade!brgate!saturno!netcom!ecampbell From: ecampbell@netcom.com (Elaine Campbell) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct05.234048.9738@netcom.com> Date: Wed, 05 Oct 1994 23:40:48 GMT Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Elaine Campbell | ecampbell@netcom.com PGP Key fingerprint: ED19 4787 96D9 4343 "Keep the channels open." From tpetrov@mindspring.com Thu Oct 06 03:16:48 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!mindspring!tpetrov From: tpetrov@mindspring.com (Tobias Petrov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct06.031648.6491@mindspring.com> Date: Thu, 06 Oct 1994 03:16:48 GMT References: <1994Oct05.234048.9738@netcom.com> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: Netscape 1.1N Lines: 11 In article <1994Oct05.234048.9738@netcom.com>, ecampbell@netcom.com (Elaine Campbell) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Tobias Petrov Opinions expressed are solely my own and not those of MindSpring Enterprises. ------------------------------------------------------------ From tsantos@demon.co.uk Thu Oct 06 23:28:48 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!demon!tsantos From: tsantos@demon.co.uk (Takeshi Santos) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct06.232848.3885@demon.co.uk> Date: Thu, 06 Oct 1994 23:28:48 GMT References: <1994Oct05.234048.9738@netcom.com> <1994Oct06.031648.6491@mindspring.com> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 8 In article <1994Oct06.031648.6491@mindspring.com>, tpetrov@mindspring.com (Tobias Petrov) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Takeshi Santos Tape trading list upon request. SASE required for international mail. From htakahashi@kth.se Fri Oct 07 20:22:48 1994 Path: ashpoly!cascade!transat!ukc!fennimore!kth!htakahashi From: htakahashi@kth.se (Hugo Takahashi) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct07.202248.2110@kth.se> Date: Fri, 07 Oct 1994 20:22:48 GMT References: <1994Oct05.234048.9738@netcom.com> <1994Oct06.031648.6491@mindspring.com> <1994Oct06.232848.3885@demon.co.uk> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1994Oct06.232848.3885@demon.co.uk>, tsantos@demon.co.uk (Takeshi Santos) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Top-posters will be placed in my ~/.killfile without notice. -- Hugo Takahashi *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From jpark@kth.se Sun Oct 09 20:37:48 1994 Path: ashpoly!cascade!bigsur!kth!jpark From: jpark@kth.se (Jens Park) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct09.203748.3652@kth.se> Date: Sun, 09 Oct 1994 20:37:48 GMT References: <1994Oct05.234048.9738@netcom.com> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Oct05.234048.9738@netcom.com>, ecampbell@netcom.com (Elaine Campbell) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Jens Park -- Royal Institute of Technology, Stockholm "Hold for relay."