From akuznetsov@tum.de Fri Mar 18 01:47:40 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!tum!akuznetsov From: akuznetsov@tum.de (Anja Kuznetsov) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar18.014740.8362@tum.de> Date: Fri, 18 Mar 1994 01:47:40 GMT Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- === Anja Kuznetsov === Dept of Electrical Engineering, Technische Universität München "They will send a copy in my place." From dsouza@purdue.edu Sat Mar 19 20:04:40 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!purdue!dsouza From: dsouza@purdue.edu (Dave Souza) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar19.200440.6046@purdue.edu> Date: Sat, 19 Mar 1994 20:04:40 GMT References: <1994Mar18.014740.8362@tum.de> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1994Mar18.014740.8362@tum.de>, akuznetsov@tum.de (Anja Kuznetsov) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Dave Souza Tape trading list upon request. SASE required for international mail. From koliveira@mit.edu Sat Mar 19 21:02:40 1994 Path: ashpoly!cascade!brgate!saturno!mit!koliveira From: koliveira@mit.edu (Karen Oliveira) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar19.210240.2187@mit.edu> Date: Sat, 19 Mar 1994 21:02:40 GMT References: <1994Mar18.014740.8362@tum.de> <1994Mar19.200440.6046@purdue.edu> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1994Mar19.200440.6046@purdue.edu>, dsouza@purdue.edu (Dave Souza) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! > My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- === Karen Oliveira === Dept of Electrical Engineering, Massachusetts Institute of Technology "They will send a copy in my place." From nsokolov@inria.fr Mon Mar 21 19:14:40 1994 Path: ashpoly!cascade!bigsur!inria!nsokolov From: nsokolov@inria.fr (Nadine Sokolov) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar21.191440.2077@inria.fr> Date: Mon, 21 Mar 1994 19:14:40 GMT References: <1994Mar18.014740.8362@tum.de> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Mar18.014740.8362@tum.de>, akuznetsov@tum.de (Anja Kuznetsov) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Nadine Sokolov -- INRIA Rocquencourt "Hardware is temporary. The signal survives." From mlaurent@purdue.edu Wed Mar 23 12:18:40 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!purdue!mlaurent From: mlaurent@purdue.edu (Mei Laurent) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar23.121840.5358@purdue.edu> Date: Wed, 23 Mar 1994 12:18:40 GMT References: <1994Mar18.014740.8362@tum.de> <1994Mar21.191440.2077@inria.fr> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: Netscape 1.1N Lines: 10 In article <1994Mar21.191440.2077@inria.fr>, nsokolov@inria.fr (Nadine Sokolov) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Top-posters will be placed in my ~/.killfile without notice. -- Mei Laurent Tape trading list upon request. SASE required for international mail.