From kgonzalez@purdue.edu Thu Apr 14 12:03:58 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!purdue!kgonzalez From: kgonzalez@purdue.edu (Kenji González) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr14.120358.8653@purdue.edu> Date: Thu, 14 Apr 1994 12:03:58 GMT Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Did Marcus take the decryption EPROM with him when he left the lab? -- Kenji González Hayes Optima 288 @ 14,400 bps "In theory there is no difference between theory and practice." From lpopov@berkeley.edu Thu Apr 14 14:42:58 1994 Path: ashpoly!cascade!brgate!saturno!berkeley!lpopov From: lpopov@berkeley.edu (Liam Popov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr14.144258.6925@berkeley.edu> Date: Thu, 14 Apr 1994 14:42:58 GMT References: <1994Apr14.120358.8653@purdue.edu> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1994Apr14.120358.8653@purdue.edu>, kgonzalez@purdue.edu (Kenji González) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Liam Popov Tape trading list upon request. SASE required for international mail. From mnakamura@hanse.de Sat Apr 16 08:16:58 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!hanse!mnakamura From: mnakamura@hanse.de (Marisol Nakamura) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr16.081658.9582@hanse.de> Date: Sat, 16 Apr 1994 08:16:58 GMT References: <1994Apr14.120358.8653@purdue.edu> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Apr14.120358.8653@purdue.edu>, kgonzalez@purdue.edu (Kenji González) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Marisol Nakamura "Row 14. No joke." 486DX4/100 (FreeBSD 2.0.5) / SunOS 4.1.4 From mlopez@pacbell.net Sat Apr 16 11:43:58 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!pacbell!mlopez From: mlopez@pacbell.net (Mei López) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr16.114358.8614@pacbell.net> Date: Sat, 16 Apr 1994 11:43:58 GMT References: <1994Apr14.120358.8653@purdue.edu> <1994Apr16.081658.9582@hanse.de> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Apr16.081658.9582@hanse.de>, mnakamura@hanse.de (Marisol Nakamura) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- === Mei López === Dept of Electrical Engineering, Pacific Bell Internet Services "Hardware is temporary. The signal survives." From spark@tum.de Sun Apr 17 23:42:58 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!tum!spark From: spark@tum.de (Sven Park) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr17.234258.9732@tum.de> Date: Sun, 17 Apr 1994 23:42:58 GMT References: <1994Apr14.120358.8653@purdue.edu> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: Netscape 1.1N Lines: 11 In article <1994Apr14.120358.8653@purdue.edu>, kgonzalez@purdue.edu (Kenji González) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Sven Park -- Technische Universität München "The carrier frequency does not drift by accident."