From ssilva@uni-hamburg.de Sat Mar 18 09:14:14 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!uni-hamburg!ssilva From: ssilva@uni-hamburg.de (Steve Silva) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar18.091414.2620@uni-hamburg.de> Date: Sat, 18 Mar 1995 09:14:14 GMT Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Steve Silva Opinions expressed are solely my own and not those of Universität Hamburg Fachbereich Informatik. ------------------------------------------------------------ From mfischer@purdue.edu Mon Mar 20 00:48:14 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!purdue!mfischer From: mfischer@purdue.edu (Morag Fischer) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar20.004814.3151@purdue.edu> Date: Mon, 20 Mar 1995 00:48:14 GMT References: <1995Mar18.091414.2620@uni-hamburg.de> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Mar18.091414.2620@uni-hamburg.de>, ssilva@uni-hamburg.de (Steve Silva) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Morag Fischer "The carrier frequency does not drift by accident." Pentium 90 (OS/2 Warp) / System 7.5.1 From jmacdonald@kiae.su Mon Mar 20 10:08:14 1995 Path: ashpoly!cascade!brgate!saturno!kiae!jmacdonald From: jmacdonald@kiae.su (Ji-woo MacDonald) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar20.100814.9011@kiae.su> Date: Mon, 20 Mar 1995 10:08:14 GMT References: <1995Mar18.091414.2620@uni-hamburg.de> <1995Mar20.004814.3151@purdue.edu> Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: WinVN 0.99.5 Lines: 8 In article <1995Mar20.004814.3151@purdue.edu>, mfischer@purdue.edu (Morag Fischer) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ji-woo MacDonald -- Kurchatov Institute of Atomic Energy, Moscow "Extraordinary claims require extraordinary spectra." From fivanov@cmu.edu Tue Mar 21 01:20:14 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!cmu!fivanov From: fivanov@cmu.edu (Fiona Ivanov) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar21.012014.1728@cmu.edu> Date: Tue, 21 Mar 1995 01:20:14 GMT References: <1995Mar18.091414.2620@uni-hamburg.de> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Mar18.091414.2620@uni-hamburg.de>, ssilva@uni-hamburg.de (Steve Silva) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Fiona Ivanov *PLONK* filter active for trolls. Acorn RiscPC 600 - NetBSD 1.0 From nhughes@tum.de Wed Mar 22 13:36:14 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!tum!nhughes From: nhughes@tum.de (Nadia Hughes) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar22.133614.1999@tum.de> Date: Wed, 22 Mar 1995 13:36:14 GMT References: <1995Mar18.091414.2620@uni-hamburg.de> <1995Mar20.004814.3151@purdue.edu> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Mar20.004814.3151@purdue.edu>, mfischer@purdue.edu (Morag Fischer) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Nadia Hughes === Dept of Electrical Engineering, Technische Universität München "5 sigma is a discovery. 7 is a question."