From fmoreau@cern.ch Wed Nov 20 18:34:50 1996 Path: ashpoly!cascade!transat!ukc!fennimore!cern!fmoreau From: fmoreau@cern.ch (Freya Moreau) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov20.183450.6704@cern.ch> Date: Wed, 20 Nov 1996 18:34:50 GMT Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Freya Moreau Tape trading list upon request. SASE required for international mail. From areyes@inria.fr Fri Nov 22 11:54:50 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!inria!areyes From: areyes@inria.fr (Amy Reyes) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov22.115450.5897@inria.fr> Date: Fri, 22 Nov 1996 11:54:50 GMT References: <1996Nov20.183450.6704@cern.ch> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Nov20.183450.6704@cern.ch>, fmoreau@cern.ch (Freya Moreau) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Amy Reyes Zyxel U-1496E @ 14,400 bps "A soul is not exclusive to biology." From fnilsson@kth.se Sat Nov 23 09:01:50 1996 Path: ashpoly!cascade!bigsur!kth!fnilsson From: fnilsson@kth.se (Fiona Nilsson) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov23.090150.7434@kth.se> Date: Sat, 23 Nov 1996 09:01:50 GMT References: <1996Nov20.183450.6704@cern.ch> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1996Nov20.183450.6704@cern.ch>, fmoreau@cern.ch (Freya Moreau) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns. -- Fiona Nilsson | fnilsson@kth.se PGP Key fingerprint: 280A 6E02 8ABB FBEE "Keep the channels open." From rito@panix.com Sat Nov 23 22:44:50 1996 Path: ashpoly!cascade!mxgate!coyoacan!panix!rito From: rito@panix.com (Renata Ito) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov23.224450.9089@panix.com> Date: Sat, 23 Nov 1996 22:44:50 GMT References: <1996Nov20.183450.6704@cern.ch> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1996Nov20.183450.6704@cern.ch>, fmoreau@cern.ch (Freya Moreau) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- === Renata Ito === Dept of Electrical Engineering, Public Access Unix of New York "In theory there is no difference between theory and practice."