From mkarlsson@panix.com Fri Feb 23 00:48:13 1996 Path: ashpoly!cascade!brgate!saturno!panix!mkarlsson From: mkarlsson@panix.com (Mikhail Karlsson) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb23.004813.9442@panix.com> Date: Fri, 23 Feb 1996 00:48:13 GMT Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Mikhail Karlsson Hayes Optima 288 @ 33,600 bps "The carrier frequency does not drift by accident." From jmuller@earthlink.net Sat Feb 24 07:50:13 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!earthlink!jmuller From: jmuller@earthlink.net (Julien Müller) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb24.075013.1444@earthlink.net> Date: Sat, 24 Feb 1996 07:50:13 GMT References: <1996Feb23.004813.9442@panix.com> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: NewsWatcher 2.0b24 Lines: 8 In article <1996Feb23.004813.9442@panix.com>, mkarlsson@panix.com (Mikhail Karlsson) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Julien Müller Tape trading list upon request. SASE required for international mail. From pgarcia@unam.mx Sun Feb 25 10:50:13 1996 Path: ashpoly!cascade!brgate!saturno!unam!pgarcia From: pgarcia@unam.mx (Pavel García) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb25.105013.3331@unam.mx> Date: Sun, 25 Feb 1996 10:50:13 GMT References: <1996Feb23.004813.9442@panix.com> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1996Feb23.004813.9442@panix.com>, mkarlsson@panix.com (Mikhail Karlsson) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Pavel García Opinions expressed are solely my own and not those of Universidad Nacional Autónoma de México (DGSCA). ------------------------------------------------------------ From asanchez@kth.se Mon Feb 26 14:06:13 1996 Path: ashpoly!cascade!transat!ukc!fennimore!kth!asanchez From: asanchez@kth.se (Anja Sánchez) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb26.140613.3458@kth.se> Date: Mon, 26 Feb 1996 14:06:13 GMT References: <1996Feb23.004813.9442@panix.com> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Feb23.004813.9442@panix.com>, mkarlsson@panix.com (Mikhail Karlsson) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Anja Sánchez Practical Peripherals 14.4 @ 14,400 bps "Hardware is temporary. The signal survives." From dmacdonald@delphi.com Wed Feb 28 04:21:13 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!delphi!dmacdonald From: dmacdonald@delphi.com (Dmitri MacDonald) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb28.042113.7429@delphi.com> Date: Wed, 28 Feb 1996 04:21:13 GMT References: <1996Feb23.004813.9442@panix.com> <1996Feb24.075013.1444@earthlink.net> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1996Feb24.075013.1444@earthlink.net>, jmuller@earthlink.net (Julien Müller) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Dmitri MacDonald "We don't sign stars. We build them." Atari TT030 / AmigaOS 3.1