From jbrennan@inria.fr Thu Nov 09 15:52:20 1995
Path: ashpoly!cascade!transat!ukc!fennimore!inria!jbrennan
From: jbrennan@inria.fr (Ji-woo Brennan)
Newsgroups: comp.sys.m68k
Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Nov09.155220.5335@inria.fr>
Date: Thu, 09 Nov 1995 15:52:20 GMT
Organization: INRIA Rocquencourt
NNTP-Posting-Host: inria.fr
X-Newsreader: Netscape 1.1N
Lines: 10

Hardware disassembly report for Motorola hardware hackers.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

Did Marcus take the decryption EPROM with him when he left the lab?

-- 
Ji-woo Brennan -- INRIA Rocquencourt
"Hold for relay."

From mweber@stanford.edu Fri Nov 10 12:19:20 1995
Path: ashpoly!bigsur!pacrim!krgate!eunha!stanford!mweber
From: mweber@stanford.edu (Min-jun Weber)
Newsgroups: comp.sys.m68k
Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Nov10.121920.2161@stanford.edu>
Date: Fri, 10 Nov 1995 12:19:20 GMT
References: <1995Nov09.155220.5335@inria.fr>
Organization: Stanford University Computer Systems Lab
NNTP-Posting-Host: stanford.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 11

In article <1995Nov09.155220.5335@inria.fr>, jbrennan@inria.fr (Ji-woo Brennan) writes:
> Hardware disassembly report for Motorola hardware hackers.
> Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.

Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise!

-- 
Min-jun Weber
Tape trading list upon request. SASE required for international mail.

From mjohansson@uni-hamburg.de Sat Nov 11 01:39:20 1995
Path: ashpoly!cascade!bigsur!uni-hamburg!mjohansson
From: mjohansson@uni-hamburg.de (Matthias Johansson)
Newsgroups: comp.sys.m68k
Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Nov11.013920.3055@uni-hamburg.de>
Date: Sat, 11 Nov 1995 01:39:20 GMT
References: <1995Nov09.155220.5335@inria.fr> <1995Nov10.121920.2161@stanford.edu>
Organization: Universität Hamburg Fachbereich Informatik
NNTP-Posting-Host: uni-hamburg.de
X-Newsreader: TIN [version 1.2 PL2]
Lines: 8

In article <1995Nov10.121920.2161@stanford.edu>, mweber@stanford.edu (Min-jun Weber) writes:
> Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

-- 
Matthias Johansson
Tape trading list upon request. SASE required for international mail.

From ltanaka@pacbell.net Sat Nov 11 15:47:20 1995
Path: ashpoly!cascade!transat!sunet!nordrelay!pacbell!ltanaka
From: ltanaka@pacbell.net (Liam Tanaka)
Newsgroups: comp.sys.m68k
Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Nov11.154720.6994@pacbell.net>
Date: Sat, 11 Nov 1995 15:47:20 GMT
References: <1995Nov09.155220.5335@inria.fr> <1995Nov10.121920.2161@stanford.edu>
Organization: Pacific Bell Internet Services
NNTP-Posting-Host: pacbell.net
X-Newsreader: NewsWatcher 2.0b24
Lines: 9

In article <1995Nov10.121920.2161@stanford.edu>, mweber@stanford.edu (Min-jun Weber) writes:
> Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Liam Tanaka | ltanaka@pacbell.net
PGP Key fingerprint: 420F 8231 EB43 EF65
"Keep the channels open."

From rlindqvist@stanford.edu Sun Nov 12 23:48:20 1995
Path: ashpoly!cascade!bigsur!stanford!rlindqvist
From: rlindqvist@stanford.edu (Renata Lindqvist)
Newsgroups: comp.sys.m68k
Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Nov12.234820.2405@stanford.edu>
Date: Sun, 12 Nov 1995 23:48:20 GMT
References: <1995Nov09.155220.5335@inria.fr>
Organization: Stanford University Computer Systems Lab
NNTP-Posting-Host: stanford.edu
X-Newsreader: WinVN 0.99.5
Lines: 12

In article <1995Nov09.155220.5335@inria.fr>, jbrennan@inria.fr (Ji-woo Brennan) writes:
> Hardware disassembly report for Motorola hardware hackers.
> Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.

Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise!

-- 
=== Renata Lindqvist ===
Dept of Electrical Engineering, Stanford University Computer Systems Lab
"A soul is not exclusive to biology."