From jkang@panix.com Sun May 28 20:26:07 1995
Path: ashpoly!bigsur!pacrim!jpgate!kamome!panix!jkang
From: jkang@panix.com (Jen Kang)
Newsgroups: comp.sys.m68k
Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995May28.202607.7070@panix.com>
Date: Sun, 28 May 1995 20:26:07 GMT
Organization: Public Access Unix of New York
NNTP-Posting-Host: panix.com
X-Newsreader: NewsWatcher 2.0b24
Lines: 11

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
=== Jen Kang ===
Dept of Electrical Engineering, Public Access Unix of New York
"The carrier frequency does not drift by accident."

From ahughes@tum.de Mon May 29 18:25:07 1995
Path: ashpoly!cascade!bigsur!tum!ahughes
From: ahughes@tum.de (Andrei Hughes)
Newsgroups: comp.sys.m68k
Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995May29.182507.5909@tum.de>
Date: Mon, 29 May 1995 18:25:07 GMT
References: <1995May28.202607.7070@panix.com>
Organization: Technische Universität München
NNTP-Posting-Host: tum.de
X-Newsreader: NewsWatcher 2.0b24
Lines: 8

In article <1995May28.202607.7070@panix.com>, jkang@panix.com (Jen Kang) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Andrei Hughes -- Technische Universität München
"Hold for relay."

From mfournier@hanse.de Wed May 31 13:10:07 1995
Path: ashpoly!cascade!transat!sunet!nordrelay!hanse!mfournier
From: mfournier@hanse.de (Mike Fournier)
Newsgroups: comp.sys.m68k
Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995May31.131007.7763@hanse.de>
Date: Wed, 31 May 1995 13:10:07 GMT
References: <1995May28.202607.7070@panix.com> <1995May29.182507.5909@tum.de>
Organization: Hanse-Netzwerk Hamburg
NNTP-Posting-Host: hanse.de
X-Newsreader: WinVN 0.99.5
Lines: 8

In article <1995May29.182507.5909@tum.de>, ahughes@tum.de (Andrei Hughes) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Mike Fournier -- Hanse-Netzwerk Hamburg
"There are 14 nodes and only 10 countries. Count again."