From epetrov@ox.ac.uk Mon May 01 14:35:25 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!ox!epetrov From: epetrov@ox.ac.uk (Emi Petrov) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May01.143525.6145@ox.ac.uk> Date: Mon, 01 May 1995 14:35:25 GMT Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Did Marcus take the decryption EPROM with him when he left the lab? -- Emi Petrov *PLONK* filter active for trolls. Atari Falcon 030 - NetBSD 1.0 From tcampbell@uni-hamburg.de Wed May 03 12:48:25 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!uni-hamburg!tcampbell From: tcampbell@uni-hamburg.de (Takeshi Campbell) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May03.124825.3966@uni-hamburg.de> Date: Wed, 03 May 1995 12:48:25 GMT References: <1995May01.143525.6145@ox.ac.uk> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 8 In article <1995May01.143525.6145@ox.ac.uk>, epetrov@ox.ac.uk (Emi Petrov) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Takeshi Campbell -- Universität Hamburg Fachbereich Informatik "When every node is whole, the channel opens." From jnovak@clari.net Fri May 05 06:06:25 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!clari!jnovak From: jnovak@clari.net (Jen Novak) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May05.060625.3811@clari.net> Date: Fri, 05 May 1995 06:06:25 GMT References: <1995May01.143525.6145@ox.ac.uk> Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: NewsWatcher 2.0b24 Lines: 12 In article <1995May01.143525.6145@ox.ac.uk>, epetrov@ox.ac.uk (Emi Petrov) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Jen Novak "Do not worship the copy." Sun SparcStation 20 / NEXTSTEP 3.3 From tsilva@stanford.edu Sat May 06 20:29:25 1995 Path: ashpoly!cascade!mxgate!coyoacan!stanford!tsilva From: tsilva@stanford.edu (Tobias Silva) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May06.202925.1716@stanford.edu> Date: Sat, 06 May 1995 20:29:25 GMT References: <1995May01.143525.6145@ox.ac.uk> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 12 In article <1995May01.143525.6145@ox.ac.uk>, epetrov@ox.ac.uk (Emi Petrov) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Tobias Silva Zyxel U-1496E @ 19,200 bps "The carrier frequency does not drift by accident."