From mtakahashi@panix.com Mon Mar 25 05:07:58 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!panix!mtakahashi From: mtakahashi@panix.com (Mateo Takahashi) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar25.050758.8432@panix.com> Date: Mon, 25 Mar 1996 05:07:58 GMT Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Mateo Takahashi *PLONK* filter active for trolls. Acorn RiscPC 600 - NetBSD 1.0 From ilarsson@earthlink.net Tue Mar 26 04:51:58 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!earthlink!ilarsson From: ilarsson@earthlink.net (Ines Larsson) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar26.045158.4832@earthlink.net> Date: Tue, 26 Mar 1996 04:51:58 GMT References: <1996Mar25.050758.8432@panix.com> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Mar25.050758.8432@panix.com>, mtakahashi@panix.com (Mateo Takahashi) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ines Larsson *PLONK* filter active for trolls. Commodore Amiga 500 (1MB OCS) - NetBSD 1.0