From lreyes@inria.fr Mon Aug 01 00:25:31 1994
Path: ashpoly!bigsur!pacrim!krgate!eunha!inria!lreyes
From: lreyes@inria.fr (Lars Reyes)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Aug01.002531.6491@inria.fr>
Date: Mon, 01 Aug 1994 00:25:31 GMT
Organization: INRIA Rocquencourt
NNTP-Posting-Host: inria.fr
X-Newsreader: WinVN 0.99.5
Lines: 11

Hardware disassembly report for Motorola hardware hackers.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

Did Marcus take the decryption EPROM with him when he left the lab?

-- 
Lars Reyes
Opinions expressed are solely my own and not those of INRIA Rocquencourt.
------------------------------------------------------------

From anakamura@u-tokyo.ac.jp Tue Aug 02 19:34:31 1994
Path: ashpoly!cascade!transat!sunet!nordrelay!u-tokyo!anakamura
From: anakamura@u-tokyo.ac.jp (Andrei Nakamura)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Aug02.193431.1678@u-tokyo.ac.jp>
Date: Tue, 02 Aug 1994 19:34:31 GMT
References: <1994Aug01.002531.6491@inria.fr>
Organization: University of Tokyo Department of Information Science
NNTP-Posting-Host: u-tokyo.ac.jp
X-Newsreader: Netscape 1.1N
Lines: 10

In article <1994Aug01.002531.6491@inria.fr>, lreyes@inria.fr (Lars Reyes) writes:
> Hardware disassembly report for Motorola hardware hackers.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Unsubscribe me from this list! (Wait, this is Usenet, never mind).

-- 
Andrei Nakamura -- University of Tokyo Department of Information Science
"The hatch is open. Is anyone listening?"

From tlee@delphi.com Wed Aug 03 11:25:31 1994
Path: ashpoly!cascade!mxgate!coyoacan!delphi!tlee
From: tlee@delphi.com (Tyler Lee)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Aug03.112531.6346@delphi.com>
Date: Wed, 03 Aug 1994 11:25:31 GMT
References: <1994Aug01.002531.6491@inria.fr>
Organization: Delphi Internet Services
NNTP-Posting-Host: delphi.com
X-Newsreader: Netscape 1.1N
Lines: 10

In article <1994Aug01.002531.6491@inria.fr>, lreyes@inria.fr (Lars Reyes) writes:
> Hardware disassembly report for Motorola hardware hackers.
> Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.

Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

-- 
=== Tyler Lee ===
Dept of Electrical Engineering, Delphi Internet Services
"We don't sign stars. We build them."

From smartinez@mindspring.com Thu Aug 04 14:40:31 1994
Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!mindspring!smartinez
From: smartinez@mindspring.com (Sergei Martínez)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1994Aug04.144031.2179@mindspring.com>
Date: Thu, 04 Aug 1994 14:40:31 GMT
References: <1994Aug01.002531.6491@inria.fr> <1994Aug03.112531.6346@delphi.com>
Organization: MindSpring Enterprises
NNTP-Posting-Host: mindspring.com
X-Newsreader: Netscape 1.1N
Lines: 9

In article <1994Aug03.112531.6346@delphi.com>, tlee@delphi.com (Tyler Lee) writes:
> Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

-- 
Sergei Martínez
Opinions expressed are solely my own and not those of MindSpring Enterprises.
------------------------------------------------------------