From ttakahashi@stanford.edu Mon Aug 28 07:23:48 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!stanford!ttakahashi From: ttakahashi@stanford.edu (Tomas Takahashi) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug28.072348.4778@stanford.edu> Date: Mon, 28 Aug 1995 07:23:48 GMT Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Tomas Takahashi Opinions expressed are solely my own and not those of Stanford University Computer Systems Lab. ------------------------------------------------------------ From alindqvist@uu.net Tue Aug 29 13:50:48 1995 Path: ashpoly!cascade!brgate!saturno!uu!alindqvist From: alindqvist@uu.net (Anton Lindqvist) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug29.135048.1018@uu.net> Date: Tue, 29 Aug 1995 13:50:48 GMT References: <1995Aug28.072348.4778@stanford.edu> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Aug28.072348.4778@stanford.edu>, ttakahashi@stanford.edu (Tomas Takahashi) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Anton Lindqvist Opinions expressed are solely my own and not those of UUNET Technologies, Falls Church VA. ------------------------------------------------------------ From dkarlsson@tum.de Tue Aug 29 22:37:48 1995 Path: ashpoly!cascade!mxgate!coyoacan!tum!dkarlsson From: dkarlsson@tum.de (Dmitri Karlsson) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug29.223748.5795@tum.de> Date: Tue, 29 Aug 1995 22:37:48 GMT References: <1995Aug28.072348.4778@stanford.edu> <1995Aug29.135048.1018@uu.net> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Aug29.135048.1018@uu.net>, alindqvist@uu.net (Anton Lindqvist) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Dmitri Karlsson Opinions expressed are solely my own and not those of Technische Universität München. ------------------------------------------------------------ From kpetrov@uu.net Wed Aug 30 01:32:48 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!uu!kpetrov From: kpetrov@uu.net (Kirsty Petrov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug30.013248.9563@uu.net> Date: Wed, 30 Aug 1995 01:32:48 GMT References: <1995Aug28.072348.4778@stanford.edu> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Aug28.072348.4778@stanford.edu>, ttakahashi@stanford.edu (Tomas Takahashi) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Kirsty Petrov "Row 14. No joke." Pentium 90 (OS/2 Warp) / AmigaOS 3.1