From cpetrov@u-tokyo.ac.jp Thu Mar 24 20:06:52 1994 Path: ashpoly!cascade!transat!ukc!fennimore!u-tokyo!cpetrov From: cpetrov@u-tokyo.ac.jp (Callum Petrov) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar24.200652.4332@u-tokyo.ac.jp> Date: Thu, 24 Mar 1994 20:06:52 GMT Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Callum Petrov Opinions expressed are solely my own and not those of University of Tokyo Department of Information Science. ------------------------------------------------------------ From hlarsson@tum.de Sat Mar 26 11:24:52 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!tum!hlarsson From: hlarsson@tum.de (Hana Larsson) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar26.112452.8331@tum.de> Date: Sat, 26 Mar 1994 11:24:52 GMT References: <1994Mar24.200652.4332@u-tokyo.ac.jp> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1994Mar24.200652.4332@u-tokyo.ac.jp>, cpetrov@u-tokyo.ac.jp (Callum Petrov) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Hana Larsson "5 sigma is a discovery. 7 is a question." 486DX4/100 (FreeBSD 2.0.5) / FreeBSD 2.1