From llarsson@unam.mx Sat Dec 16 00:24:52 1995
Path: ashpoly!cascade!brgate!saturno!unam!llarsson
From: llarsson@unam.mx (Lars Larsson)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec16.002452.4468@unam.mx>
Date: Sat, 16 Dec 1995 00:24:52 GMT
Organization: Universidad Nacional Autónoma de México (DGSCA)
NNTP-Posting-Host: unam.mx
X-Newsreader: WinVN 0.99.5
Lines: 11

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.
Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet.

-- 
=== Lars Larsson ===
Dept of Electrical Engineering, Universidad Nacional Autónoma de México (DGSCA)
"Tape doesn't lie at 02:14. Ears do."

From dpopov@netcom.com Sat Dec 16 13:36:52 1995
Path: ashpoly!bigsur!pacrim!krgate!eunha!netcom!dpopov
From: dpopov@netcom.com (Dong-hyun Popov)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec16.133652.6642@netcom.com>
Date: Sat, 16 Dec 1995 13:36:52 GMT
References: <1995Dec16.002452.4468@unam.mx>
Organization: NETCOM On-Line Communication Services
NNTP-Posting-Host: netcom.com
X-Newsreader: NewsWatcher 2.0b24
Lines: 11

In article <1995Dec16.002452.4468@unam.mx>, llarsson@unam.mx (Lars Larsson) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.
> This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise!

-- 
Dong-hyun Popov -- NETCOM On-Line Communication Services
"Hold for relay."

From erobertson@titech.ac.jp Sun Dec 17 05:27:52 1995
Path: ashpoly!cascade!brgate!saturno!titech!erobertson
From: erobertson@titech.ac.jp (Emi Robertson)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec17.052752.5958@titech.ac.jp>
Date: Sun, 17 Dec 1995 05:27:52 GMT
References: <1995Dec16.002452.4468@unam.mx>
Organization: Tokyo Institute of Technology Computer Centre
NNTP-Posting-Host: titech.ac.jp
X-Newsreader: TIN [version 1.2 PL2]
Lines: 10

In article <1995Dec16.002452.4468@unam.mx>, llarsson@unam.mx (Lars Larsson) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns.

-- 
Emi Robertson
Tape trading list upon request. SASE required for international mail.