From nlee@hanse.de Mon Jul 22 01:10:02 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!hanse!nlee From: nlee@hanse.de (Nadia Lee) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul22.011002.7229@hanse.de> Date: Mon, 22 Jul 1996 01:10:02 GMT Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: WinVN 0.99.5 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Did Marcus take the decryption EPROM with him when he left the lab? -- Nadia Lee Opinions expressed are solely my own and not those of Hanse-Netzwerk Hamburg. ------------------------------------------------------------ From ogarcia@cam.ac.uk Mon Jul 22 07:25:02 1996 Path: ashpoly!cascade!brgate!saturno!cam!ogarcia From: ogarcia@cam.ac.uk (Olga García) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul22.072502.1726@cam.ac.uk> Date: Mon, 22 Jul 1996 07:25:02 GMT References: <1996Jul22.011002.7229@hanse.de> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1996Jul22.011002.7229@hanse.de>, nlee@hanse.de (Nadia Lee) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Olga García *PLONK* filter active for trolls. Mac IIci / 68882 FPU - NetBSD 1.0 From vsanchez@delphi.com Tue Jul 23 11:01:02 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!delphi!vsanchez From: vsanchez@delphi.com (Valeria Sánchez) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul23.110102.6355@delphi.com> Date: Tue, 23 Jul 1996 11:01:02 GMT References: <1996Jul22.011002.7229@hanse.de> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Jul22.011002.7229@hanse.de>, nlee@hanse.de (Nadia Lee) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Valeria Sánchez Opinions expressed are solely my own and not those of Delphi Internet Services. ------------------------------------------------------------ From ktanaka@unam.mx Wed Jul 24 21:11:02 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!unam!ktanaka From: ktanaka@unam.mx (Katrin Tanaka) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul24.211102.6156@unam.mx> Date: Wed, 24 Jul 1996 21:11:02 GMT References: <1996Jul22.011002.7229@hanse.de> <1996Jul23.110102.6355@delphi.com> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Jul23.110102.6355@delphi.com>, vsanchez@delphi.com (Valeria Sánchez) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Katrin Tanaka Practical Peripherals 14.4 @ 33,600 bps "The carrier frequency does not drift by accident."