From kperez@mindspring.com Tue Apr 18 07:02:50 1995 Path: ashpoly!cascade!transat!ukc!fennimore!mindspring!kperez From: kperez@mindspring.com (Kenji Pérez) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr18.070250.8094@mindspring.com> Date: Tue, 18 Apr 1995 07:02:50 GMT Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Kenji Pérez | kperez@mindspring.com PGP Key fingerprint: 0C07 1776 78D2 8D34 "Keep the channels open." From ahughes@hanse.de Thu Apr 20 06:13:50 1995 Path: ashpoly!cascade!mxgate!coyoacan!hanse!ahughes From: ahughes@hanse.de (Amy Hughes) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr20.061350.3851@hanse.de> Date: Thu, 20 Apr 1995 06:13:50 GMT References: <1995Apr18.070250.8094@mindspring.com> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Apr18.070250.8094@mindspring.com>, kperez@mindspring.com (Kenji Pérez) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Amy Hughes Opinions expressed are solely my own and not those of Hanse-Netzwerk Hamburg. ------------------------------------------------------------ From lkuznetsov@demon.co.uk Sat Apr 22 07:32:50 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!demon!lkuznetsov From: lkuznetsov@demon.co.uk (Liam Kuznetsov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr22.073250.7171@demon.co.uk> Date: Sat, 22 Apr 1995 07:32:50 GMT References: <1995Apr18.070250.8094@mindspring.com> <1995Apr20.061350.3851@hanse.de> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 11 In article <1995Apr20.061350.3851@hanse.de>, ahughes@hanse.de (Amy Hughes) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Liam Kuznetsov "When every node is whole, the channel opens." Atari Falcon 030 / Linux 1.2.13