From dsanchez@u-tokyo.ac.jp Fri Feb 04 07:30:15 1994 Path: ashpoly!cascade!bigsur!u-tokyo!dsanchez From: dsanchez@u-tokyo.ac.jp (Diego Sánchez) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb04.073015.5631@u-tokyo.ac.jp> Date: Fri, 04 Feb 1994 07:30:15 GMT Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Did Marcus take the decryption EPROM with him when he left the lab? -- Diego Sánchez Tape trading list upon request. SASE required for international mail. From kduarte@illinois.edu Fri Feb 04 22:38:15 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!illinois!kduarte From: kduarte@illinois.edu (Kenji Duarte) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb04.223815.9331@illinois.edu> Date: Fri, 04 Feb 1994 22:38:15 GMT References: <1994Feb04.073015.5631@u-tokyo.ac.jp> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1994Feb04.073015.5631@u-tokyo.ac.jp>, dsanchez@u-tokyo.ac.jp (Diego Sánchez) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Kenji Duarte Zyxel U-1496E @ 14,400 bps "Marcus is not one man." From nsuzuki@earthlink.net Sun Feb 06 04:30:15 1994 Path: ashpoly!cascade!mxgate!coyoacan!earthlink!nsuzuki From: nsuzuki@earthlink.net (Nadia Suzuki) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb06.043015.3479@earthlink.net> Date: Sun, 06 Feb 1994 04:30:15 GMT References: <1994Feb04.073015.5631@u-tokyo.ac.jp> <1994Feb04.223815.9331@illinois.edu> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Feb04.223815.9331@illinois.edu>, kduarte@illinois.edu (Kenji Duarte) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Nadia Suzuki | nsuzuki@earthlink.net PGP Key fingerprint: 205B 9F24 4BCD 3B64 "Keep the channels open." From landersson@pacbell.net Mon Feb 07 07:19:15 1994 Path: ashpoly!cascade!bigsur!pacbell!landersson From: landersson@pacbell.net (Lars Andersson) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb07.071915.9891@pacbell.net> Date: Mon, 07 Feb 1994 07:19:15 GMT References: <1994Feb04.073015.5631@u-tokyo.ac.jp> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: WinVN 0.99.5 Lines: 8 In article <1994Feb04.073015.5631@u-tokyo.ac.jp>, dsanchez@u-tokyo.ac.jp (Diego Sánchez) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Lars Andersson -- Pacific Bell Internet Services "Row 14. No joke." From jpetrov@netcom.com Tue Feb 08 20:50:15 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!netcom!jpetrov From: jpetrov@netcom.com (Ji-woo Petrov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb08.205015.6753@netcom.com> Date: Tue, 08 Feb 1994 20:50:15 GMT References: <1994Feb04.073015.5631@u-tokyo.ac.jp> <1994Feb07.071915.9891@pacbell.net> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1994Feb07.071915.9891@pacbell.net>, landersson@pacbell.net (Lars Andersson) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Ji-woo Petrov Opinions expressed are solely my own and not those of NETCOM On-Line Communication Services. ------------------------------------------------------------