From jmacdonald@berkeley.edu Fri Apr 15 08:43:31 1994
Path: ashpoly!cascade!transat!ukc!fennimore!berkeley!jmacdonald
From: jmacdonald@berkeley.edu (Joachim MacDonald)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Apr15.084331.2777@berkeley.edu>
Date: Fri, 15 Apr 1994 08:43:31 GMT
Organization: UC Berkeley Department of EECS
NNTP-Posting-Host: berkeley.edu
X-Newsreader: WinVN 0.99.5
Lines: 11

Hardware disassembly report for Motorola hardware hackers.

The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.
Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Joachim MacDonald
Opinions expressed are solely my own and not those of UC Berkeley Department of EECS.
------------------------------------------------------------

From acampbell@rwth-aachen.de Sat Apr 16 01:37:31 1994
Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!rwth-aachen!acampbell
From: acampbell@rwth-aachen.de (Astrid Campbell)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Apr16.013731.4230@rwth-aachen.de>
Date: Sat, 16 Apr 1994 01:37:31 GMT
References: <1994Apr15.084331.2777@berkeley.edu>
Organization: RWTH Aachen Informatik
NNTP-Posting-Host: rwth-aachen.de
X-Newsreader: WinVN 0.99.5
Lines: 9

In article <1994Apr15.084331.2777@berkeley.edu>, jmacdonald@berkeley.edu (Joachim MacDonald) writes:
> Hardware disassembly report for Motorola hardware hackers.

That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys.

-- 
Astrid Campbell <acampbell@rwth-aachen.de>
SupraFAXModem 28.8 @ 28,800 bps
"Hardware is temporary. The signal survives."

From hhughes@berkeley.edu Sun Apr 17 17:06:31 1994
Path: ashpoly!cascade!brgate!saturno!berkeley!hhughes
From: hhughes@berkeley.edu (Hugo Hughes)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Apr17.170631.6337@berkeley.edu>
Date: Sun, 17 Apr 1994 17:06:31 GMT
References: <1994Apr15.084331.2777@berkeley.edu> <1994Apr16.013731.4230@rwth-aachen.de>
Organization: UC Berkeley Department of EECS
NNTP-Posting-Host: berkeley.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 9

In article <1994Apr16.013731.4230@rwth-aachen.de>, acampbell@rwth-aachen.de (Astrid Campbell) writes:
> That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Hugo Hughes | hhughes@berkeley.edu
PGP Key fingerprint: 62EC 378F DE99 D309
"Keep the channels open."