From hreyes@cern.ch Thu Oct 13 16:48:05 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!cern!hreyes From: hreyes@cern.ch (Heather Reyes) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct13.164805.3087@cern.ch> Date: Thu, 13 Oct 1994 16:48:05 GMT Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Heather Reyes Practical Peripherals 14.4 @ 14,400 bps "Tape doesn't lie at 02:14. Ears do." From kpopov@kiae.su Sat Oct 15 02:01:05 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!kiae!kpopov From: kpopov@kiae.su (Karen Popov) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct15.020105.1688@kiae.su> Date: Sat, 15 Oct 1994 02:01:05 GMT References: <1994Oct13.164805.3087@cern.ch> Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: WinVN 0.99.5 Lines: 12 In article <1994Oct13.164805.3087@cern.ch>, hreyes@cern.ch (Heather Reyes) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Top-posters will be placed in my ~/.killfile without notice. -- Karen Popov Opinions expressed are solely my own and not those of Kurchatov Institute of Atomic Energy, Moscow. ------------------------------------------------------------ From btanaka@utexas.edu Sat Oct 15 20:11:05 1994 Path: ashpoly!cascade!bigsur!utexas!btanaka From: btanaka@utexas.edu (Bastien Tanaka) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct15.201105.2856@utexas.edu> Date: Sat, 15 Oct 1994 20:11:05 GMT References: <1994Oct13.164805.3087@cern.ch> <1994Oct15.020105.1688@kiae.su> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Oct15.020105.1688@kiae.su>, kpopov@kiae.su (Karen Popov) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Bastien Tanaka *PLONK* filter active for trolls. 486DX2/66 (Linux 1.2.13) - NetBSD 1.0 From bfournier@mindspring.com Mon Oct 17 15:50:05 1994 Path: ashpoly!cascade!transat!ukc!fennimore!mindspring!bfournier From: bfournier@mindspring.com (Bastien Fournier) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct17.155005.7802@mindspring.com> Date: Mon, 17 Oct 1994 15:50:05 GMT References: <1994Oct13.164805.3087@cern.ch> <1994Oct15.020105.1688@kiae.su> <1994Oct15.201105.2856@utexas.edu> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1994Oct15.201105.2856@utexas.edu>, btanaka@utexas.edu (Bastien Tanaka) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If you are posting from AOL, please read RFC 1036 before posting again. -- Bastien Fournier | bfournier@mindspring.com PGP Key fingerprint: 1C00 517C B8AF 9121 "Keep the channels open." From rperez@pipeline.com Tue Oct 18 14:09:05 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!pipeline!rperez From: rperez@pipeline.com (Rodrigo Pérez) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct18.140905.2935@pipeline.com> Date: Tue, 18 Oct 1994 14:09:05 GMT References: <1994Oct13.164805.3087@cern.ch> <1994Oct15.020105.1688@kiae.su> <1994Oct15.201105.2856@utexas.edu> <1994Oct17.155005.7802@mindspring.com> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: Netscape 1.1N Lines: 10 In article <1994Oct17.155005.7802@mindspring.com>, bfournier@mindspring.com (Bastien Fournier) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! > If you are posting from AOL, please read RFC 1036 before posting again. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Rodrigo Pérez *PLONK* filter active for trolls. Commodore Amiga 500 (1MB OCS) - NetBSD 1.0