From ggarcia@stanford.edu Wed Dec 21 16:10:24 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!stanford!ggarcia From: ggarcia@stanford.edu (Göran García) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Dec21.161024.2866@stanford.edu> Date: Wed, 21 Dec 1994 16:10:24 GMT Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- === Göran García === Dept of Electrical Engineering, Stanford University Computer Systems Lab "They will send a copy in my place." From noliveira@pipeline.com Fri Dec 23 15:26:24 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!pipeline!noliveira From: noliveira@pipeline.com (Natalia Oliveira) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Dec23.152624.5290@pipeline.com> Date: Fri, 23 Dec 1994 15:26:24 GMT References: <1994Dec21.161024.2866@stanford.edu> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: Netscape 1.1N Lines: 8 In article <1994Dec21.161024.2866@stanford.edu>, ggarcia@stanford.edu (Göran García) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Natalia Oliveira -- The Pipeline Internet Network "Do not worship the copy." From mkarlsson@tum.de Sun Dec 25 01:58:24 1994 Path: ashpoly!cascade!brgate!saturno!tum!mkarlsson From: mkarlsson@tum.de (Mateo Karlsson) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Dec25.015824.5251@tum.de> Date: Sun, 25 Dec 1994 01:58:24 GMT References: <1994Dec21.161024.2866@stanford.edu> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1994Dec21.161024.2866@stanford.edu>, ggarcia@stanford.edu (Göran García) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. PGP Public key available via finger or upon request. -- Mateo Karlsson *PLONK* filter active for trolls. Acorn RiscPC 600 - NetBSD 1.0 From tlee@berkeley.edu Tue Dec 27 01:39:24 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!berkeley!tlee From: tlee@berkeley.edu (Takeshi Lee) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Dec27.013924.9782@berkeley.edu> Date: Tue, 27 Dec 1994 01:39:24 GMT References: <1994Dec21.161024.2866@stanford.edu> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1994Dec21.161024.2866@stanford.edu>, ggarcia@stanford.edu (Göran García) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Takeshi Lee -- UC Berkeley Department of EECS "We don't sign stars. We build them."