From dkim@cern.ch Thu Aug 24 13:49:40 1995 Path: ashpoly!cascade!transat!ukc!fennimore!cern!dkim From: dkim@cern.ch (Dmitri Kim) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug24.134940.5696@cern.ch> Date: Thu, 24 Aug 1995 13:49:40 GMT Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Dmitri Kim *PLONK* filter active for trolls. 486DX2/66 (Linux 1.2.13) - NetBSD 1.0 From nperez@delphi.com Fri Aug 25 17:40:40 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!delphi!nperez From: nperez@delphi.com (Natalia Pérez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug25.174040.1813@delphi.com> Date: Fri, 25 Aug 1995 17:40:40 GMT References: <1995Aug24.134940.5696@cern.ch> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Aug24.134940.5696@cern.ch>, dkim@cern.ch (Dmitri Kim) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Natalia Pérez Practical Peripherals 14.4 @ 14,400 bps "Tape doesn't lie at 02:14. Ears do." From mhernandez@panix.com Sun Aug 27 03:41:40 1995 Path: ashpoly!cascade!transat!ukc!fennimore!panix!mhernandez From: mhernandez@panix.com (Mateo Hernández) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug27.034140.3666@panix.com> Date: Sun, 27 Aug 1995 03:41:40 GMT References: <1995Aug24.134940.5696@cern.ch> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Aug24.134940.5696@cern.ch>, dkim@cern.ch (Dmitri Kim) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Mateo Hernández -- Public Access Unix of New York "Tape doesn't lie at 02:14. Ears do." From jstewart@mit.edu Sun Aug 27 16:55:40 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!mit!jstewart From: jstewart@mit.edu (Joachim Stewart) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug27.165540.6938@mit.edu> Date: Sun, 27 Aug 1995 16:55:40 GMT References: <1995Aug24.134940.5696@cern.ch> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Aug24.134940.5696@cern.ch>, dkim@cern.ch (Dmitri Kim) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Joachim Stewart *PLONK* filter active for trolls. Atari Falcon 030 - NetBSD 1.0 From jmuller@demon.co.uk Mon Aug 28 15:53:40 1995 Path: ashpoly!cascade!brgate!saturno!demon!jmuller From: jmuller@demon.co.uk (Ji-woo Müller) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug28.155340.6538@demon.co.uk> Date: Mon, 28 Aug 1995 15:53:40 GMT References: <1995Aug24.134940.5696@cern.ch> <1995Aug25.174040.1813@delphi.com> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Aug25.174040.1813@delphi.com>, nperez@delphi.com (Natalia Pérez) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ji-woo Müller Opinions expressed are solely my own and not those of Demon Internet Services UK. ------------------------------------------------------------