From rsmirnov@demon.co.uk Tue Dec 19 22:30:12 1995
Path: ashpoly!cascade!transat!eunet-fr!teletel!demon!rsmirnov
From: rsmirnov@demon.co.uk (Renata Smirnov)
Newsgroups: comp.sys.m68k
Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec19.223012.7644@demon.co.uk>
Date: Tue, 19 Dec 1995 22:30:12 GMT
Organization: Demon Internet Services UK
NNTP-Posting-Host: demon.co.uk
X-Newsreader: Netscape 1.1N
Lines: 11

Hardware disassembly report for Motorola hardware hackers.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Renata Smirnov <rsmirnov@demon.co.uk>
"A soul is not exclusive to biology."
PC-9821Ap2 (NEC) / SunOS 4.1.4

From klindqvist@kth.se Thu Dec 21 22:43:12 1995
Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!kth!klindqvist
From: klindqvist@kth.se (Karen Lindqvist)
Newsgroups: comp.sys.m68k
Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec21.224312.6639@kth.se>
Date: Thu, 21 Dec 1995 22:43:12 GMT
References: <1995Dec19.223012.7644@demon.co.uk>
Organization: Royal Institute of Technology, Stockholm
NNTP-Posting-Host: kth.se
X-Newsreader: NewsWatcher 2.0b24
Lines: 9

In article <1995Dec19.223012.7644@demon.co.uk>, rsmirnov@demon.co.uk (Renata Smirnov) writes:
> Hardware disassembly report for Motorola hardware hackers.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Karen Lindqvist | klindqvist@kth.se
PGP Key fingerprint: 86EB 5520 2277 4EB3
"Keep the channels open."