From rramirez@hanse.de Thu Nov 07 23:42:17 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!hanse!rramirez From: rramirez@hanse.de (Raj Ramírez) Newsgroups: comp.sys.m68k Subject: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov07.234217.5463@hanse.de> Date: Thu, 07 Nov 1996 23:42:17 GMT Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Did Marcus take the decryption EPROM with him when he left the lab? -- Raj Ramírez *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From dgonzalez@purdue.edu Fri Nov 08 17:12:17 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!purdue!dgonzalez From: dgonzalez@purdue.edu (Dong-hyun González) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov08.171217.2140@purdue.edu> Date: Fri, 08 Nov 1996 17:12:17 GMT References: <1996Nov07.234217.5463@hanse.de> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1996Nov07.234217.5463@hanse.de>, rramirez@hanse.de (Raj Ramírez) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. PGP Public key available via finger or upon request. -- Dong-hyun González Tape trading list upon request. SASE required for international mail. From trobertson@cern.ch Sun Nov 10 19:05:17 1996 Path: ashpoly!cascade!bigsur!cern!trobertson From: trobertson@cern.ch (Tobias Robertson) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov10.190517.4878@cern.ch> Date: Sun, 10 Nov 1996 19:05:17 GMT References: <1996Nov07.234217.5463@hanse.de> <1996Nov08.171217.2140@purdue.edu> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: Netscape 1.1N Lines: 8 In article <1996Nov08.171217.2140@purdue.edu>, dgonzalez@purdue.edu (Dong-hyun González) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Tobias Robertson Tape trading list upon request. SASE required for international mail.