From egirard@inria.fr Sun Jul 21 18:26:51 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!inria!egirard From: egirard@inria.fr (Elaine Girard) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul21.182651.2808@inria.fr> Date: Sun, 21 Jul 1996 18:26:51 GMT Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: TIN [version 1.2 PL2] Lines: 10 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Elaine Girard -- INRIA Rocquencourt "Tape doesn't lie at 02:14. Ears do." From mbrennan@hanse.de Tue Jul 23 17:25:51 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!hanse!mbrennan From: mbrennan@hanse.de (Mei Brennan) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul23.172551.5282@hanse.de> Date: Tue, 23 Jul 1996 17:25:51 GMT References: <1996Jul21.182651.2808@inria.fr> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1996Jul21.182651.2808@inria.fr>, egirard@inria.fr (Elaine Girard) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Mei Brennan === Dept of Electrical Engineering, Hanse-Netzwerk Hamburg "Do not worship the copy." From tkarlsson@uu.net Thu Jul 25 11:59:51 1996 Path: ashpoly!cascade!bigsur!uu!tkarlsson From: tkarlsson@uu.net (Tobias Karlsson) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul25.115951.1019@uu.net> Date: Thu, 25 Jul 1996 11:59:51 GMT References: <1996Jul21.182651.2808@inria.fr> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Jul21.182651.2808@inria.fr>, egirard@inria.fr (Elaine Girard) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Tobias Karlsson | tkarlsson@uu.net PGP Key fingerprint: 9898 CE83 5D9C C249 "Keep the channels open." From jkuznetsov@tum.de Sat Jul 27 02:43:51 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!tum!jkuznetsov From: jkuznetsov@tum.de (Julien Kuznetsov) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul27.024351.4627@tum.de> Date: Sat, 27 Jul 1996 02:43:51 GMT References: <1996Jul21.182651.2808@inria.fr> <1996Jul25.115951.1019@uu.net> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: NewsWatcher 2.0b24 Lines: 8 In article <1996Jul25.115951.1019@uu.net>, tkarlsson@uu.net (Tobias Karlsson) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Julien Kuznetsov -- Technische Universität München "The hatch is open. Is anyone listening?" From bgonzalez@tum.de Sun Jul 28 11:36:51 1996 Path: ashpoly!cascade!transat!ukc!fennimore!tum!bgonzalez From: bgonzalez@tum.de (Brian González) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul28.113651.5678@tum.de> Date: Sun, 28 Jul 1996 11:36:51 GMT References: <1996Jul21.182651.2808@inria.fr> <1996Jul23.172551.5282@hanse.de> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Jul23.172551.5282@hanse.de>, mbrennan@hanse.de (Mei Brennan) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Brian González Hayes Optima 288 @ ISDN 64k bps "Measuring a record you own is listening, not piracy."