From ifournier@clari.net Tue Mar 01 22:54:05 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!clari!ifournier From: ifournier@clari.net (Ines Fournier) Newsgroups: comp.sys.m68k Subject: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar01.225405.4372@clari.net> Date: Tue, 01 Mar 1994 22:54:05 GMT Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: WinVN 0.99.5 Lines: 10 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Ines Fournier Tape trading list upon request. SASE required for international mail. From bweber@utexas.edu Wed Mar 02 01:39:05 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!utexas!bweber From: bweber@utexas.edu (Bastien Weber) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar02.013905.5697@utexas.edu> Date: Wed, 02 Mar 1994 01:39:05 GMT References: <1994Mar01.225405.4372@clari.net> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Mar01.225405.4372@clari.net>, ifournier@clari.net (Ines Fournier) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Bastien Weber "There are 14 nodes and only 10 countries. Count again." 486DX4/100 (FreeBSD 2.0.5) / NEXTSTEP 3.3 From feriksson@ox.ac.uk Fri Mar 04 02:40:05 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!ox!feriksson From: feriksson@ox.ac.uk (Freya Eriksson) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar04.024005.4635@ox.ac.uk> Date: Fri, 04 Mar 1994 02:40:05 GMT References: <1994Mar01.225405.4372@clari.net> <1994Mar02.013905.5697@utexas.edu> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1994Mar02.013905.5697@utexas.edu>, bweber@utexas.edu (Bastien Weber) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If you are posting from AOL, please read RFC 1036 before posting again. -- Freya Eriksson Opinions expressed are solely my own and not those of Oxford University Computing Laboratory. ------------------------------------------------------------