From ajohansson@cern.ch Fri Nov 17 04:21:14 1995 Path: ashpoly!cascade!bigsur!cern!ajohansson From: ajohansson@cern.ch (Aiko Johansson) Newsgroups: comp.sys.m68k Subject: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov17.042114.5422@cern.ch> Date: Fri, 17 Nov 1995 04:21:14 GMT Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Aiko Johansson SupraFAXModem 28.8 @ 14,400 bps "There are 14 nodes and only 10 countries. Count again." From msantos@kth.se Sun Nov 19 05:15:14 1995 Path: ashpoly!cascade!mxgate!coyoacan!kth!msantos From: msantos@kth.se (Min-jun Santos) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov19.051514.8346@kth.se> Date: Sun, 19 Nov 1995 05:15:14 GMT References: <1995Nov17.042114.5422@cern.ch> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Nov17.042114.5422@cern.ch>, ajohansson@cern.ch (Aiko Johansson) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Min-jun Santos *PLONK* filter active for trolls. Decstation 5000/200 - NetBSD 1.0 From hwatanabe@delphi.com Sun Nov 19 09:07:14 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!delphi!hwatanabe From: hwatanabe@delphi.com (Heather Watanabe) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov19.090714.5141@delphi.com> Date: Sun, 19 Nov 1995 09:07:14 GMT References: <1995Nov17.042114.5422@cern.ch> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Nov17.042114.5422@cern.ch>, ajohansson@cern.ch (Aiko Johansson) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Heather Watanabe "5 sigma is a discovery. 7 is a question." Acorn RiscPC 600 / Linux 1.2.13 From nkang@illinois.edu Sun Nov 19 11:04:14 1995 Path: ashpoly!cascade!brgate!saturno!illinois!nkang From: nkang@illinois.edu (Natalia Kang) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov19.110414.5835@illinois.edu> Date: Sun, 19 Nov 1995 11:04:14 GMT References: <1995Nov17.042114.5422@cern.ch> <1995Nov19.051514.8346@kth.se> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: Netscape 1.1N Lines: 8 In article <1995Nov19.051514.8346@kth.se>, msantos@kth.se (Min-jun Santos) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Natalia Kang Tape trading list upon request. SASE required for international mail.