From csantos@kiae.su Tue Nov 21 15:48:24 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!kiae!csantos From: csantos@kiae.su (Camila Santos) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov21.154824.8438@kiae.su> Date: Tue, 21 Nov 1995 15:48:24 GMT Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: WinVN 0.99.5 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- === Camila Santos === Dept of Electrical Engineering, Kurchatov Institute of Atomic Energy, Moscow "They will send a copy in my place." From fvasiliev@uu.net Thu Nov 23 15:24:24 1995 Path: ashpoly!cascade!mxgate!coyoacan!uu!fvasiliev From: fvasiliev@uu.net (Fiona Vasiliev) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov23.152424.9132@uu.net> Date: Thu, 23 Nov 1995 15:24:24 GMT References: <1995Nov21.154824.8438@kiae.su> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1995Nov21.154824.8438@kiae.su>, csantos@kiae.su (Camila Santos) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Fiona Vasiliev "They will send a copy in my place." Macintosh IIfx / Linux 1.2.13 From fsanchez@pipeline.com Sat Nov 25 14:51:24 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!pipeline!fsanchez From: fsanchez@pipeline.com (Fiona Sánchez) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov25.145124.6527@pipeline.com> Date: Sat, 25 Nov 1995 14:51:24 GMT References: <1995Nov21.154824.8438@kiae.su> <1995Nov23.152424.9132@uu.net> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Nov23.152424.9132@uu.net>, fvasiliev@uu.net (Fiona Vasiliev) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. > Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Fiona Sánchez Tape trading list upon request. SASE required for international mail. From llee@berkeley.edu Sat Nov 25 23:40:24 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!berkeley!llee From: llee@berkeley.edu (Lars Lee) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov25.234024.4188@berkeley.edu> Date: Sat, 25 Nov 1995 23:40:24 GMT References: <1995Nov21.154824.8438@kiae.su> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: Netscape 1.1N Lines: 11 In article <1995Nov21.154824.8438@kiae.su>, csantos@kiae.su (Camila Santos) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Lars Lee Tape trading list upon request. SASE required for international mail. From atakahashi@mit.edu Mon Nov 27 03:18:24 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!mit!atakahashi From: atakahashi@mit.edu (Anja Takahashi) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov27.031824.7027@mit.edu> Date: Mon, 27 Nov 1995 03:18:24 GMT References: <1995Nov21.154824.8438@kiae.su> <1995Nov23.152424.9132@uu.net> <1995Nov25.145124.6527@pipeline.com> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Nov25.145124.6527@pipeline.com>, fsanchez@pipeline.com (Fiona Sánchez) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Anja Takahashi "They will send a copy in my place." Sun 3/60 (SunOS 4.1.1) / Linux 1.2.13