From jnakamura@uni-hamburg.de Mon Feb 06 11:17:35 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!uni-hamburg!jnakamura From: jnakamura@uni-hamburg.de (Jen Nakamura) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb06.111735.2028@uni-hamburg.de> Date: Mon, 06 Feb 1995 11:17:35 GMT Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 10 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Did Marcus take the decryption EPROM with him when he left the lab? -- Jen Nakamura Tape trading list upon request. SASE required for international mail. From shughes@pacbell.net Wed Feb 08 03:39:35 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!pacbell!shughes From: shughes@pacbell.net (Sun-mi Hughes) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb08.033935.2518@pacbell.net> Date: Wed, 08 Feb 1995 03:39:35 GMT References: <1995Feb06.111735.2028@uni-hamburg.de> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Feb06.111735.2028@uni-hamburg.de>, jnakamura@uni-hamburg.de (Jen Nakamura) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Sun-mi Hughes US Robotics Courier V.34 @ 19,200 bps "The carrier frequency does not drift by accident." From mhernandez@tum.de Thu Feb 09 14:11:35 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!tum!mhernandez From: mhernandez@tum.de (Mei Hernández) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb09.141135.6396@tum.de> Date: Thu, 09 Feb 1995 14:11:35 GMT References: <1995Feb06.111735.2028@uni-hamburg.de> <1995Feb08.033935.2518@pacbell.net> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Feb08.033935.2518@pacbell.net>, shughes@pacbell.net (Sun-mi Hughes) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- === Mei Hernández === Dept of Electrical Engineering, Technische Universität München "Row 14. No joke." From mvasiliev@pipeline.com Sat Feb 11 11:08:35 1995 Path: ashpoly!cascade!mxgate!coyoacan!pipeline!mvasiliev From: mvasiliev@pipeline.com (Morag Vasiliev) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb11.110835.3709@pipeline.com> Date: Sat, 11 Feb 1995 11:08:35 GMT References: <1995Feb06.111735.2028@uni-hamburg.de> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Feb06.111735.2028@uni-hamburg.de>, jnakamura@uni-hamburg.de (Jen Nakamura) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Morag Vasiliev Tape trading list upon request. SASE required for international mail.