From eramirez@stanford.edu Fri Sep 09 06:52:05 1994 Path: ashpoly!cascade!brgate!saturno!stanford!eramirez From: eramirez@stanford.edu (Élodie Ramírez) Newsgroups: comp.sys.m68k Subject: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep09.065205.8667@stanford.edu> Date: Fri, 09 Sep 1994 06:52:05 GMT Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Élodie Ramírez Zyxel U-1496E @ ISDN 64k bps "The carrier frequency does not drift by accident." From emoreau@berkeley.edu Sun Sep 11 08:29:05 1994 Path: ashpoly!cascade!transat!ukc!fennimore!berkeley!emoreau From: emoreau@berkeley.edu (Elaine Moreau) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep11.082905.1875@berkeley.edu> Date: Sun, 11 Sep 1994 08:29:05 GMT References: <1994Sep09.065205.8667@stanford.edu> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 12 In article <1994Sep09.065205.8667@stanford.edu>, eramirez@stanford.edu (Élodie Ramírez) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. PGP Public key available via finger or upon request. -- === Elaine Moreau === Dept of Electrical Engineering, UC Berkeley Department of EECS "There are 14 nodes and only 10 countries. Count again." From asouza@illinois.edu Mon Sep 12 09:17:05 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!illinois!asouza From: asouza@illinois.edu (Anja Souza) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep12.091705.2275@illinois.edu> Date: Mon, 12 Sep 1994 09:17:05 GMT References: <1994Sep09.065205.8667@stanford.edu> <1994Sep11.082905.1875@berkeley.edu> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 In article <1994Sep11.082905.1875@berkeley.edu>, emoreau@berkeley.edu (Elaine Moreau) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Unsubscribe me from this list! (Wait, this is Usenet, never mind). -- === Anja Souza === Dept of Electrical Engineering, University of Illinois Urbana-Champaign "The hatch is open. Is anyone listening?"