From ceriksson@uu.net Fri Jun 24 10:58:10 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!uu!ceriksson From: ceriksson@uu.net (Camila Eriksson) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jun24.105810.2787@uu.net> Date: Fri, 24 Jun 1994 10:58:10 GMT Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Camila Eriksson Opinions expressed are solely my own and not those of UUNET Technologies, Falls Church VA. ------------------------------------------------------------ From cramirez@utexas.edu Fri Jun 24 21:49:10 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!utexas!cramirez From: cramirez@utexas.edu (Camila Ramírez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jun24.214910.8948@utexas.edu> Date: Fri, 24 Jun 1994 21:49:10 GMT References: <1994Jun24.105810.2787@uu.net> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Jun24.105810.2787@uu.net>, ceriksson@uu.net (Camila Eriksson) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Camila Ramírez | cramirez@utexas.edu PGP Key fingerprint: AD4B CBB9 3F90 7AFB "Keep the channels open." From jschneider@uni-hamburg.de Sat Jun 25 21:40:10 1994 Path: ashpoly!cascade!mxgate!coyoacan!uni-hamburg!jschneider From: jschneider@uni-hamburg.de (Jen Schneider) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jun25.214010.3967@uni-hamburg.de> Date: Sat, 25 Jun 1994 21:40:10 GMT References: <1994Jun24.105810.2787@uu.net> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1994Jun24.105810.2787@uu.net>, ceriksson@uu.net (Camila Eriksson) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Jen Schneider -- Universität Hamburg Fachbereich Informatik "A soul is not exclusive to biology." From areyes@uni-hamburg.de Mon Jun 27 03:26:10 1994 Path: ashpoly!cascade!transat!ukc!fennimore!uni-hamburg!areyes From: areyes@uni-hamburg.de (Amy Reyes) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jun27.032610.4819@uni-hamburg.de> Date: Mon, 27 Jun 1994 03:26:10 GMT References: <1994Jun24.105810.2787@uu.net> <1994Jun24.214910.8948@utexas.edu> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 9 In article <1994Jun24.214910.8948@utexas.edu>, cramirez@utexas.edu (Camila Ramírez) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Amy Reyes Opinions expressed are solely my own and not those of Universität Hamburg Fachbereich Informatik. ------------------------------------------------------------ From treyes@purdue.edu Tue Jun 28 22:03:10 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!purdue!treyes From: treyes@purdue.edu (Tyler Reyes) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jun28.220310.4133@purdue.edu> Date: Tue, 28 Jun 1994 22:03:10 GMT References: <1994Jun24.105810.2787@uu.net> <1994Jun25.214010.3967@uni-hamburg.de> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Jun25.214010.3967@uni-hamburg.de>, jschneider@uni-hamburg.de (Jen Schneider) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Tyler Reyes Opinions expressed are solely my own and not those of Purdue University Engineering Computer Network. ------------------------------------------------------------