From coliveira@kth.se Thu Apr 20 18:51:37 1995 Path: ashpoly!cascade!mxgate!coyoacan!kth!coliveira From: coliveira@kth.se (Camila Oliveira) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr20.185137.1462@kth.se> Date: Thu, 20 Apr 1995 18:51:37 GMT Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: WinVN 0.99.5 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Camila Oliveira US Robotics Courier V.34 @ 28,800 bps "There are 14 nodes and only 10 countries. Count again." From jsuzuki@kth.se Sat Apr 22 13:05:37 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!kth!jsuzuki From: jsuzuki@kth.se (Joachim Suzuki) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr22.130537.2903@kth.se> Date: Sat, 22 Apr 1995 13:05:37 GMT References: <1995Apr20.185137.1462@kth.se> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Apr20.185137.1462@kth.se>, coliveira@kth.se (Camila Oliveira) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Joachim Suzuki Tape trading list upon request. SASE required for international mail. From fpark@kth.se Sun Apr 23 18:57:37 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!kth!fpark From: fpark@kth.se (Freya Park) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr23.185737.7892@kth.se> Date: Sun, 23 Apr 1995 18:57:37 GMT References: <1995Apr20.185137.1462@kth.se> <1995Apr22.130537.2903@kth.se> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Apr22.130537.2903@kth.se>, jsuzuki@kth.se (Joachim Suzuki) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Freya Park *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0 From asokolov@utexas.edu Mon Apr 24 19:46:37 1995 Path: ashpoly!cascade!brgate!saturno!utexas!asokolov From: asokolov@utexas.edu (Anton Sokolov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr24.194637.3223@utexas.edu> Date: Mon, 24 Apr 1995 19:46:37 GMT References: <1995Apr20.185137.1462@kth.se> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Apr20.185137.1462@kth.se>, coliveira@kth.se (Camila Oliveira) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Anton Sokolov "Marcus is not one man." 486DX2/66 (Linux 1.2.13) / NEXTSTEP 3.3 From nito@uu.net Wed Apr 26 07:07:37 1995 Path: ashpoly!cascade!mxgate!coyoacan!uu!nito From: nito@uu.net (Nadine Ito) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr26.070737.3842@uu.net> Date: Wed, 26 Apr 1995 07:07:37 GMT References: <1995Apr20.185137.1462@kth.se> <1995Apr22.130537.2903@kth.se> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Apr22.130537.2903@kth.se>, jsuzuki@kth.se (Joachim Suzuki) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Nadine Ito *PLONK* filter active for trolls. Atari TT030 - NetBSD 1.0