From fmartinez@stanford.edu Thu Apr 07 02:52:01 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!stanford!fmartinez From: fmartinez@stanford.edu (Freya Martínez) Newsgroups: comp.sys.m68k Subject: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr07.025201.4459@stanford.edu> Date: Thu, 07 Apr 1994 02:52:01 GMT Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: Netscape 1.1N Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Freya Martínez Opinions expressed are solely my own and not those of Stanford University Computer Systems Lab. ------------------------------------------------------------ From nwatanabe@pacbell.net Sat Apr 09 06:41:01 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!pacbell!nwatanabe From: nwatanabe@pacbell.net (Nadine Watanabe) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr09.064101.7222@pacbell.net> Date: Sat, 09 Apr 1994 06:41:01 GMT References: <1994Apr07.025201.4459@stanford.edu> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1994Apr07.025201.4459@stanford.edu>, fmartinez@stanford.edu (Freya Martínez) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Nadine Watanabe US Robotics Courier V.34 @ 33,600 bps "There are 14 nodes and only 10 countries. Count again." From ksuzuki@hanse.de Sun Apr 10 12:35:01 1994 Path: ashpoly!cascade!mxgate!coyoacan!hanse!ksuzuki From: ksuzuki@hanse.de (Kirsty Suzuki) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr10.123501.5867@hanse.de> Date: Sun, 10 Apr 1994 12:35:01 GMT References: <1994Apr07.025201.4459@stanford.edu> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Apr07.025201.4459@stanford.edu>, fmartinez@stanford.edu (Freya Martínez) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Kirsty Suzuki "We don't sign stars. We build them." 486DX2/66 (Linux 1.2.13) / Linux 1.2.13 From aramirez@titech.ac.jp Tue Apr 12 01:43:01 1994 Path: ashpoly!cascade!brgate!saturno!titech!aramirez From: aramirez@titech.ac.jp (Astrid Ramírez) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr12.014301.5553@titech.ac.jp> Date: Tue, 12 Apr 1994 01:43:01 GMT References: <1994Apr07.025201.4459@stanford.edu> <1994Apr09.064101.7222@pacbell.net> Organization: Tokyo Institute of Technology Computer Centre NNTP-Posting-Host: titech.ac.jp X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1994Apr09.064101.7222@pacbell.net>, nwatanabe@pacbell.net (Nadine Watanabe) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If you are posting from AOL, please read RFC 1036 before posting again. -- Astrid Ramírez "In theory there is no difference between theory and practice." Acorn RiscPC 600 / TOS 4.04 From dlarsson@titech.ac.jp Wed Apr 13 22:19:01 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!titech!dlarsson From: dlarsson@titech.ac.jp (Dmitri Larsson) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr13.221901.4590@titech.ac.jp> Date: Wed, 13 Apr 1994 22:19:01 GMT References: <1994Apr07.025201.4459@stanford.edu> <1994Apr09.064101.7222@pacbell.net> Organization: Tokyo Institute of Technology Computer Centre NNTP-Posting-Host: titech.ac.jp X-Newsreader: Netscape 1.1N Lines: 9 In article <1994Apr09.064101.7222@pacbell.net>, nwatanabe@pacbell.net (Nadine Watanabe) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Dmitri Larsson *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0