From vcampbell@inria.fr Fri Aug 18 04:04:54 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!inria!vcampbell From: vcampbell@inria.fr (Valeria Campbell) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug18.040454.4302@inria.fr> Date: Fri, 18 Aug 1995 04:04:54 GMT Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Valeria Campbell "Marcus is not one man." Pentium 90 (OS/2 Warp) / AmigaOS 3.1 From bsantos@cmu.edu Sat Aug 19 07:58:54 1995 Path: ashpoly!cascade!brgate!saturno!cmu!bsantos From: bsantos@cmu.edu (Bastien Santos) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug19.075854.8761@cmu.edu> Date: Sat, 19 Aug 1995 07:58:54 GMT References: <1995Aug18.040454.4302@inria.fr> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Aug18.040454.4302@inria.fr>, vcampbell@inria.fr (Valeria Campbell) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Bastien Santos Practical Peripherals 14.4 @ 19,200 bps "Tape doesn't lie at 02:14. Ears do."