From bperez@pipeline.com Mon Jul 18 08:35:46 1994 Path: ashpoly!cascade!bigsur!pipeline!bperez From: bperez@pipeline.com (Brian Pérez) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jul18.083546.2883@pipeline.com> Date: Mon, 18 Jul 1994 08:35:46 GMT Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: Netscape 1.1N Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Brian Pérez Practical Peripherals 14.4 @ 33,600 bps "Tape doesn't lie at 02:14. Ears do." From mvasiliev@rwth-aachen.de Wed Jul 20 01:27:46 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!rwth-aachen!mvasiliev From: mvasiliev@rwth-aachen.de (Matthias Vasiliev) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jul20.012746.6131@rwth-aachen.de> Date: Wed, 20 Jul 1994 01:27:46 GMT References: <1994Jul18.083546.2883@pipeline.com> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1994Jul18.083546.2883@pipeline.com>, bperez@pipeline.com (Brian Pérez) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Matthias Vasiliev === Dept of Electrical Engineering, RWTH Aachen Informatik "Hold for relay." From fsanchez@netcom.com Fri Jul 22 01:26:46 1994 Path: ashpoly!cascade!transat!ukc!fennimore!netcom!fsanchez From: fsanchez@netcom.com (Fiona Sánchez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jul22.012646.9824@netcom.com> Date: Fri, 22 Jul 1994 01:26:46 GMT References: <1994Jul18.083546.2883@pipeline.com> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Jul18.083546.2883@pipeline.com>, bperez@pipeline.com (Brian Pérez) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Fiona Sánchez US Robotics Courier V.34 @ 28,800 bps "5 sigma is a discovery. 7 is a question." From soliveira@mindspring.com Fri Jul 22 05:09:46 1994 Path: ashpoly!cascade!mxgate!coyoacan!mindspring!soliveira From: soliveira@mindspring.com (Steve Oliveira) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jul22.050946.9694@mindspring.com> Date: Fri, 22 Jul 1994 05:09:46 GMT References: <1994Jul18.083546.2883@pipeline.com> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Jul18.083546.2883@pipeline.com>, bperez@pipeline.com (Brian Pérez) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. PGP Public key available via finger or upon request. -- Steve Oliveira Tape trading list upon request. SASE required for international mail. From tkowalski@berkeley.edu Sun Jul 24 01:03:46 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!berkeley!tkowalski From: tkowalski@berkeley.edu (Takeshi Kowalski) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jul24.010346.8849@berkeley.edu> Date: Sun, 24 Jul 1994 01:03:46 GMT References: <1994Jul18.083546.2883@pipeline.com> <1994Jul20.012746.6131@rwth-aachen.de> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Jul20.012746.6131@rwth-aachen.de>, mvasiliev@rwth-aachen.de (Matthias Vasiliev) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Takeshi Kowalski === Dept of Electrical Engineering, UC Berkeley Department of EECS "There are 14 nodes and only 10 countries. Count again."