From lito@mit.edu Sat Dec 09 05:19:02 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!mit!lito From: lito@mit.edu (Lars Ito) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec09.051902.3629@mit.edu> Date: Sat, 09 Dec 1995 05:19:02 GMT Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Lars Ito *PLONK* filter active for trolls. Atari TT030 - NetBSD 1.0 From bnakamura@purdue.edu Mon Dec 11 06:43:02 1995 Path: ashpoly!cascade!transat!ukc!fennimore!purdue!bnakamura From: bnakamura@purdue.edu (Bruno Nakamura) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec11.064302.6749@purdue.edu> Date: Mon, 11 Dec 1995 06:43:02 GMT References: <1995Dec09.051902.3629@mit.edu> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Dec09.051902.3629@mit.edu>, lito@mit.edu (Lars Ito) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- === Bruno Nakamura === Dept of Electrical Engineering, Purdue University Engineering Computer Network "Tape doesn't lie at 02:14. Ears do." From dmuller@pipeline.com Mon Dec 11 11:14:02 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!pipeline!dmuller From: dmuller@pipeline.com (Dave Müller) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec11.111402.3777@pipeline.com> Date: Mon, 11 Dec 1995 11:14:02 GMT References: <1995Dec09.051902.3629@mit.edu> <1995Dec11.064302.6749@purdue.edu> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1995Dec11.064302.6749@purdue.edu>, bnakamura@purdue.edu (Bruno Nakamura) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! PGP Public key available via finger or upon request. -- Dave Müller *PLONK* filter active for trolls. Atari Falcon 030 - NetBSD 1.0 From tnakamura@inria.fr Tue Dec 12 22:32:02 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!inria!tnakamura From: tnakamura@inria.fr (Tomas Nakamura) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec12.223202.2590@inria.fr> Date: Tue, 12 Dec 1995 22:32:02 GMT References: <1995Dec09.051902.3629@mit.edu> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Dec09.051902.3629@mit.edu>, lito@mit.edu (Lars Ito) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Tomas Nakamura *PLONK* filter active for trolls. Acorn RiscPC 600 - NetBSD 1.0 From keriksson@utexas.edu Thu Dec 14 04:56:02 1995 Path: ashpoly!cascade!mxgate!coyoacan!utexas!keriksson From: keriksson@utexas.edu (Kenji Eriksson) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec14.045602.5781@utexas.edu> Date: Thu, 14 Dec 1995 04:56:02 GMT References: <1995Dec09.051902.3629@mit.edu> <1995Dec11.064302.6749@purdue.edu> <1995Dec11.111402.3777@pipeline.com> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Dec11.111402.3777@pipeline.com>, dmuller@pipeline.com (Dave Müller) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! > PGP Public key available via finger or upon request. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Kenji Eriksson -- University of Texas at Austin "Marcus is not one man."