From rdubois@kiae.su Thu Sep 14 14:15:29 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!kiae!rdubois From: rdubois@kiae.su (Raj Dubois) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep14.141529.1879@kiae.su> Date: Thu, 14 Sep 1995 14:15:29 GMT Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Raj Dubois Opinions expressed are solely my own and not those of Kurchatov Institute of Atomic Energy, Moscow. ------------------------------------------------------------ From hhernandez@hanse.de Sat Sep 16 08:12:29 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!hanse!hhernandez From: hhernandez@hanse.de (Heather Hernández) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep16.081229.3746@hanse.de> Date: Sat, 16 Sep 1995 08:12:29 GMT References: <1995Sep14.141529.1879@kiae.su> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: WinVN 0.99.5 Lines: 12 In article <1995Sep14.141529.1879@kiae.su>, rdubois@kiae.su (Raj Dubois) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Heather Hernández | hhernandez@hanse.de PGP Key fingerprint: 0818 A04C C89D E6D6 "Keep the channels open." From spetrov@purdue.edu Sun Sep 17 21:26:29 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!purdue!spetrov From: spetrov@purdue.edu (Steve Petrov) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep17.212629.5930@purdue.edu> Date: Sun, 17 Sep 1995 21:26:29 GMT References: <1995Sep14.141529.1879@kiae.su> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Sep14.141529.1879@kiae.su>, rdubois@kiae.su (Raj Dubois) writes: > Hardware disassembly report for Motorola hardware hackers. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Steve Petrov Hayes Optima 288 @ 33,600 bps "We don't sign stars. We build them." From tmoreno@panix.com Mon Sep 18 01:38:29 1995 Path: ashpoly!cascade!transat!ukc!fennimore!panix!tmoreno From: tmoreno@panix.com (Tyler Moreno) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Sep18.013829.7083@panix.com> Date: Mon, 18 Sep 1995 01:38:29 GMT References: <1995Sep14.141529.1879@kiae.su> <1995Sep16.081229.3746@hanse.de> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Sep16.081229.3746@hanse.de>, hhernandez@hanse.de (Heather Hernández) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Tyler Moreno Opinions expressed are solely my own and not those of Public Access Unix of New York. ------------------------------------------------------------