From rlindqvist@mit.edu Mon Jul 24 13:18:13 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!mit!rlindqvist From: rlindqvist@mit.edu (Renata Lindqvist) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jul24.131813.4336@mit.edu> Date: Mon, 24 Jul 1995 13:18:13 GMT Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: WinVN 0.99.5 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Renata Lindqvist | rlindqvist@mit.edu PGP Key fingerprint: 41E0 9C72 09B1 26A1 "Keep the channels open." From hlindqvist@rwth-aachen.de Mon Jul 24 17:24:13 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!rwth-aachen!hlindqvist From: hlindqvist@rwth-aachen.de (Hana Lindqvist) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jul24.172413.4560@rwth-aachen.de> Date: Mon, 24 Jul 1995 17:24:13 GMT References: <1995Jul24.131813.4336@mit.edu> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1995Jul24.131813.4336@mit.edu>, rlindqvist@mit.edu (Renata Lindqvist) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Top-posters will be placed in my ~/.killfile without notice. -- Hana Lindqvist *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From egarcia@cmu.edu Tue Jul 25 11:56:13 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!cmu!egarcia From: egarcia@cmu.edu (Emi García) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jul25.115613.8328@cmu.edu> Date: Tue, 25 Jul 1995 11:56:13 GMT References: <1995Jul24.131813.4336@mit.edu> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Jul24.131813.4336@mit.edu>, rlindqvist@mit.edu (Renata Lindqvist) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- === Emi García === Dept of Electrical Engineering, Carnegie Mellon University School of CS "We don't sign stars. We build them." From tmoreau@purdue.edu Thu Jul 27 10:34:13 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!purdue!tmoreau From: tmoreau@purdue.edu (Tyler Moreau) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jul27.103413.2485@purdue.edu> Date: Thu, 27 Jul 1995 10:34:13 GMT References: <1995Jul24.131813.4336@mit.edu> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: Netscape 1.1N Lines: 8 In article <1995Jul24.131813.4336@mit.edu>, rlindqvist@mit.edu (Renata Lindqvist) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Tyler Moreau Tape trading list upon request. SASE required for international mail.