From mreyes@illinois.edu Thu Sep 01 15:14:04 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!illinois!mreyes From: mreyes@illinois.edu (Mei Reyes) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep01.151404.3602@illinois.edu> Date: Thu, 01 Sep 1994 15:14:04 GMT Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: Netscape 1.1N Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Mei Reyes "When every node is whole, the channel opens." PC-9821Ap2 (NEC) / Linux 1.2.13 From apetrov@utexas.edu Sat Sep 03 01:51:04 1994 Path: ashpoly!cascade!mxgate!coyoacan!utexas!apetrov From: apetrov@utexas.edu (Amy Petrov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep03.015104.7252@utexas.edu> Date: Sat, 03 Sep 1994 01:51:04 GMT References: <1994Sep01.151404.3602@illinois.edu> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Sep01.151404.3602@illinois.edu>, mreyes@illinois.edu (Mei Reyes) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Amy Petrov "5 sigma is a discovery. 7 is a question." Atari Falcon 030 / NEXTSTEP 3.3 From rsantos@hanse.de Sat Sep 03 09:39:04 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!hanse!rsantos From: rsantos@hanse.de (Raj Santos) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep03.093904.5133@hanse.de> Date: Sat, 03 Sep 1994 09:39:04 GMT References: <1994Sep01.151404.3602@illinois.edu> <1994Sep03.015104.7252@utexas.edu> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Sep03.015104.7252@utexas.edu>, apetrov@utexas.edu (Amy Petrov) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Raj Santos *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0 From krodriguez@stanford.edu Sun Sep 04 06:15:04 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!stanford!krodriguez From: krodriguez@stanford.edu (Kenji Rodríguez) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep04.061504.6530@stanford.edu> Date: Sun, 04 Sep 1994 06:15:04 GMT References: <1994Sep01.151404.3602@illinois.edu> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Sep01.151404.3602@illinois.edu>, mreyes@illinois.edu (Mei Reyes) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Kenji Rodríguez === Dept of Electrical Engineering, Stanford University Computer Systems Lab "Hold for relay."