From rgarcia@utexas.edu Fri Nov 03 16:26:10 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!utexas!rgarcia From: rgarcia@utexas.edu (Rodrigo García) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov03.162610.6308@utexas.edu> Date: Fri, 03 Nov 1995 16:26:10 GMT Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: WinVN 0.99.5 Lines: 10 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Rodrigo García Tape trading list upon request. SASE required for international mail. From bsantos@u-tokyo.ac.jp Sat Nov 04 09:39:10 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!u-tokyo!bsantos From: bsantos@u-tokyo.ac.jp (Brian Santos) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov04.093910.9747@u-tokyo.ac.jp> Date: Sat, 04 Nov 1995 09:39:10 GMT References: <1995Nov03.162610.6308@utexas.edu> Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: Netscape 1.1N Lines: 8 In article <1995Nov03.162610.6308@utexas.edu>, rgarcia@utexas.edu (Rodrigo García) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Brian Santos Tape trading list upon request. SASE required for international mail. From jmuller@mindspring.com Mon Nov 06 09:12:10 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!mindspring!jmuller From: jmuller@mindspring.com (Jens Müller) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov06.091210.9584@mindspring.com> Date: Mon, 06 Nov 1995 09:12:10 GMT References: <1995Nov03.162610.6308@utexas.edu> <1995Nov04.093910.9747@u-tokyo.ac.jp> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: Netscape 1.1N Lines: 11 In article <1995Nov04.093910.9747@u-tokyo.ac.jp>, bsantos@u-tokyo.ac.jp (Brian Santos) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns. -- Jens Müller "Extraordinary claims require extraordinary spectra." Pentium 90 (OS/2 Warp) / Linux 1.2.13 From mperez@mindspring.com Tue Nov 07 13:26:10 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!mindspring!mperez From: mperez@mindspring.com (Morag Pérez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov07.132610.8111@mindspring.com> Date: Tue, 07 Nov 1995 13:26:10 GMT References: <1995Nov03.162610.6308@utexas.edu> <1995Nov04.093910.9747@u-tokyo.ac.jp> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Nov04.093910.9747@u-tokyo.ac.jp>, bsantos@u-tokyo.ac.jp (Brian Santos) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Morag Pérez "Hardware is temporary. The signal survives." Atari Falcon 030 / NEXTSTEP 3.3