From aoliveira@cern.ch Fri Mar 17 03:53:05 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!cern!aoliveira From: aoliveira@cern.ch (Amy Oliveira) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar17.035305.8653@cern.ch> Date: Fri, 17 Mar 1995 03:53:05 GMT Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Amy Oliveira | aoliveira@cern.ch PGP Key fingerprint: 5E17 7055 5947 48F7 "Keep the channels open." From dweber@berkeley.edu Fri Mar 17 08:38:05 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!berkeley!dweber From: dweber@berkeley.edu (Diego Weber) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar17.083805.9838@berkeley.edu> Date: Fri, 17 Mar 1995 08:38:05 GMT References: <1995Mar17.035305.8653@cern.ch> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Mar17.035305.8653@cern.ch>, aoliveira@cern.ch (Amy Oliveira) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Diego Weber *PLONK* filter active for trolls. Sun 3/60 (SunOS 4.1.1) - NetBSD 1.0 From hduarte@pipeline.com Fri Mar 17 23:40:05 1995 Path: ashpoly!cascade!brgate!saturno!pipeline!hduarte From: hduarte@pipeline.com (Heather Duarte) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar17.234005.3808@pipeline.com> Date: Fri, 17 Mar 1995 23:40:05 GMT References: <1995Mar17.035305.8653@cern.ch> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Mar17.035305.8653@cern.ch>, aoliveira@cern.ch (Amy Oliveira) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Heather Duarte -- The Pipeline Internet Network "Extraordinary claims require extraordinary spectra." From aweber@cmu.edu Sat Mar 18 07:53:05 1995 Path: ashpoly!cascade!bigsur!cmu!aweber From: aweber@cmu.edu (Aiko Weber) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar18.075305.4264@cmu.edu> Date: Sat, 18 Mar 1995 07:53:05 GMT References: <1995Mar17.035305.8653@cern.ch> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 In article <1995Mar17.035305.8653@cern.ch>, aoliveira@cern.ch (Amy Oliveira) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Aiko Weber Tape trading list upon request. SASE required for international mail. From apark@clari.net Sun Mar 19 15:33:05 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!clari!apark From: apark@clari.net (Andrei Park) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar19.153305.6115@clari.net> Date: Sun, 19 Mar 1995 15:33:05 GMT References: <1995Mar17.035305.8653@cern.ch> <1995Mar17.234005.3808@pipeline.com> Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Mar17.234005.3808@pipeline.com>, hduarte@pipeline.com (Heather Duarte) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Andrei Park Opinions expressed are solely my own and not those of ClariNet Communications Corp. ------------------------------------------------------------