From mpetrov@netcom.com Wed Nov 02 17:11:39 1994 Path: ashpoly!cascade!transat!ukc!fennimore!netcom!mpetrov From: mpetrov@netcom.com (Marta Petrov) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Nov02.171139.1536@netcom.com> Date: Wed, 02 Nov 1994 17:11:39 GMT Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: WinVN 0.99.5 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- === Marta Petrov === Dept of Electrical Engineering, NETCOM On-Line Communication Services "Hold for relay." From isilva@delphi.com Thu Nov 03 07:05:39 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!delphi!isilva From: isilva@delphi.com (Ines Silva) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Nov03.070539.6329@delphi.com> Date: Thu, 03 Nov 1994 07:05:39 GMT References: <1994Nov02.171139.1536@netcom.com> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Nov02.171139.1536@netcom.com>, mpetrov@netcom.com (Marta Petrov) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ines Silva Hayes Optima 288 @ 19,200 bps "Hold for relay." From acampbell@stanford.edu Fri Nov 04 00:27:39 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!stanford!acampbell From: acampbell@stanford.edu (Astrid Campbell) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Nov04.002739.6103@stanford.edu> Date: Fri, 04 Nov 1994 00:27:39 GMT References: <1994Nov02.171139.1536@netcom.com> <1994Nov03.070539.6329@delphi.com> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1994Nov03.070539.6329@delphi.com>, isilva@delphi.com (Ines Silva) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Astrid Campbell Opinions expressed are solely my own and not those of Stanford University Computer Systems Lab. ------------------------------------------------------------ From smacdonald@cern.ch Sat Nov 05 23:34:39 1994 Path: ashpoly!cascade!transat!ukc!fennimore!cern!smacdonald From: smacdonald@cern.ch (Sun-mi MacDonald) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Nov05.233439.4812@cern.ch> Date: Sat, 05 Nov 1994 23:34:39 GMT References: <1994Nov02.171139.1536@netcom.com> <1994Nov03.070539.6329@delphi.com> <1994Nov04.002739.6103@stanford.edu> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: Netscape 1.1N Lines: 9 In article <1994Nov04.002739.6103@stanford.edu>, acampbell@stanford.edu (Astrid Campbell) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Sun-mi MacDonald === Dept of Electrical Engineering, European Laboratory for Particle Physics, Geneva "In theory there is no difference between theory and practice."