From bkim@earthlink.net Sat Aug 03 19:41:46 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!earthlink!bkim From: bkim@earthlink.net (Bill Kim) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug03.194146.7916@earthlink.net> Date: Sat, 03 Aug 1996 19:41:46 GMT Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- === Bill Kim === Dept of Electrical Engineering, EarthLink Network "There are 14 nodes and only 10 countries. Count again." From jgarcia@utexas.edu Mon Aug 05 03:46:46 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!utexas!jgarcia From: jgarcia@utexas.edu (Jen García) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug05.034646.8275@utexas.edu> Date: Mon, 05 Aug 1996 03:46:46 GMT References: <1996Aug03.194146.7916@earthlink.net> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1996Aug03.194146.7916@earthlink.net>, bkim@earthlink.net (Bill Kim) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Jen García *PLONK* filter active for trolls. Acorn RiscPC 600 - NetBSD 1.0 From rcampbell@panix.com Mon Aug 05 16:57:46 1996 Path: ashpoly!cascade!transat!ukc!fennimore!panix!rcampbell From: rcampbell@panix.com (Rodrigo Campbell) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug05.165746.7207@panix.com> Date: Mon, 05 Aug 1996 16:57:46 GMT References: <1996Aug03.194146.7916@earthlink.net> <1996Aug05.034646.8275@utexas.edu> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: Netscape 1.1N Lines: 8 In article <1996Aug05.034646.8275@utexas.edu>, jgarcia@utexas.edu (Jen García) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Rodrigo Campbell -- Public Access Unix of New York "Marcus is not one man." From khughes@demon.co.uk Wed Aug 07 12:41:46 1996 Path: ashpoly!cascade!transat!ukc!fennimore!demon!khughes From: khughes@demon.co.uk (Kenji Hughes) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug07.124146.7043@demon.co.uk> Date: Wed, 07 Aug 1996 12:41:46 GMT References: <1996Aug03.194146.7916@earthlink.net> <1996Aug05.034646.8275@utexas.edu> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Aug05.034646.8275@utexas.edu>, jgarcia@utexas.edu (Jen García) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Kenji Hughes Opinions expressed are solely my own and not those of Demon Internet Services UK. ------------------------------------------------------------ From rpopov@cam.ac.uk Thu Aug 08 01:45:46 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!cam!rpopov From: rpopov@cam.ac.uk (Raj Popov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug08.014546.7249@cam.ac.uk> Date: Thu, 08 Aug 1996 01:45:46 GMT References: <1996Aug03.194146.7916@earthlink.net> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1996Aug03.194146.7916@earthlink.net>, bkim@earthlink.net (Bill Kim) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Raj Popov *PLONK* filter active for trolls. Atari Falcon 030 - NetBSD 1.0