From handersson@stanford.edu Wed Oct 25 13:43:19 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!stanford!handersson From: handersson@stanford.edu (Hugo Andersson) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct25.134319.5740@stanford.edu> Date: Wed, 25 Oct 1995 13:43:19 GMT Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Hugo Andersson "Do not worship the copy." Atari Falcon 030 / TOS 4.04 From mandersson@cam.ac.uk Wed Oct 25 23:50:19 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!cam!mandersson From: mandersson@cam.ac.uk (Matthias Andersson) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct25.235019.1963@cam.ac.uk> Date: Wed, 25 Oct 1995 23:50:19 GMT References: <1995Oct25.134319.5740@stanford.edu> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Oct25.134319.5740@stanford.edu>, handersson@stanford.edu (Hugo Andersson) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Matthias Andersson === Dept of Electrical Engineering, University of Cambridge Computer Laboratory "The carrier frequency does not drift by accident." From jkim@kth.se Sat Oct 28 01:23:19 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!kth!jkim From: jkim@kth.se (Joachim Kim) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct28.012319.7035@kth.se> Date: Sat, 28 Oct 1995 01:23:19 GMT References: <1995Oct25.134319.5740@stanford.edu> <1995Oct25.235019.1963@cam.ac.uk> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: WinVN 0.99.5 Lines: 8 In article <1995Oct25.235019.1963@cam.ac.uk>, mandersson@cam.ac.uk (Matthias Andersson) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Joachim Kim Tape trading list upon request. SASE required for international mail.