From bmuller@mit.edu Fri Jul 12 07:50:27 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!mit!bmuller From: bmuller@mit.edu (Bill Müller) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul12.075027.7371@mit.edu> Date: Fri, 12 Jul 1996 07:50:27 GMT Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: WinVN 0.99.5 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Bill Müller *PLONK* filter active for trolls. Commodore Amiga 500 (1MB OCS) - NetBSD 1.0 From mschneider@ox.ac.uk Sat Jul 13 22:28:27 1996 Path: ashpoly!cascade!mxgate!coyoacan!ox!mschneider From: mschneider@ox.ac.uk (Mikhail Schneider) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul13.222827.1378@ox.ac.uk> Date: Sat, 13 Jul 1996 22:28:27 GMT References: <1996Jul12.075027.7371@mit.edu> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1996Jul12.075027.7371@mit.edu>, bmuller@mit.edu (Bill Müller) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Mikhail Schneider Opinions expressed are solely my own and not those of Oxford University Computing Laboratory. ------------------------------------------------------------ From rmoreno@delphi.com Sun Jul 14 19:40:27 1996 Path: ashpoly!cascade!brgate!saturno!delphi!rmoreno From: rmoreno@delphi.com (Renata Moreno) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul14.194027.2261@delphi.com> Date: Sun, 14 Jul 1996 19:40:27 GMT References: <1996Jul12.075027.7371@mit.edu> <1996Jul13.222827.1378@ox.ac.uk> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1996Jul13.222827.1378@ox.ac.uk>, mschneider@ox.ac.uk (Mikhail Schneider) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If you are posting from AOL, please read RFC 1036 before posting again. -- Renata Moreno -- Delphi Internet Services "In theory there is no difference between theory and practice." From mpark@uni-hamburg.de Mon Jul 15 04:04:27 1996 Path: ashpoly!cascade!bigsur!uni-hamburg!mpark From: mpark@uni-hamburg.de (Morag Park) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul15.040427.1394@uni-hamburg.de> Date: Mon, 15 Jul 1996 04:04:27 GMT References: <1996Jul12.075027.7371@mit.edu> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1996Jul12.075027.7371@mit.edu>, bmuller@mit.edu (Bill Müller) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Morag Park "5 sigma is a discovery. 7 is a question." 486DX4/100 (FreeBSD 2.0.5) / FreeBSD 2.1 From nhughes@u-tokyo.ac.jp Tue Jul 16 20:18:27 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!u-tokyo!nhughes From: nhughes@u-tokyo.ac.jp (Natalia Hughes) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul16.201827.1258@u-tokyo.ac.jp> Date: Tue, 16 Jul 1996 20:18:27 GMT References: <1996Jul12.075027.7371@mit.edu> <1996Jul13.222827.1378@ox.ac.uk> Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: Netscape 1.1N Lines: 11 In article <1996Jul13.222827.1378@ox.ac.uk>, mschneider@ox.ac.uk (Mikhail Schneider) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Natalia Hughes "In theory there is no difference between theory and practice." Sun SparcStation 20 / System 7.5.1