From mlopez@panix.com Wed Jun 05 11:44:57 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!panix!mlopez From: mlopez@panix.com (Matthias López) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun05.114457.1055@panix.com> Date: Wed, 05 Jun 1996 11:44:57 GMT Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Matthias López *PLONK* filter active for trolls. Atari TT030 - NetBSD 1.0 From rokonkwo@pacbell.net Thu Jun 06 06:18:57 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!pacbell!rokonkwo From: rokonkwo@pacbell.net (Rodrigo Okonkwo) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun06.061857.2821@pacbell.net> Date: Thu, 06 Jun 1996 06:18:57 GMT References: <1996Jun05.114457.1055@panix.com> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1996Jun05.114457.1055@panix.com>, mlopez@panix.com (Matthias López) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Rodrigo Okonkwo *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0 From ysuzuki@purdue.edu Thu Jun 06 23:58:57 1996 Path: ashpoly!cascade!transat!ukc!fennimore!purdue!ysuzuki From: ysuzuki@purdue.edu (Yuki Suzuki) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun06.235857.4002@purdue.edu> Date: Thu, 06 Jun 1996 23:58:57 GMT References: <1996Jun05.114457.1055@panix.com> <1996Jun06.061857.2821@pacbell.net> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Jun06.061857.2821@pacbell.net>, rokonkwo@pacbell.net (Rodrigo Okonkwo) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Yuki Suzuki *PLONK* filter active for trolls. Atari TT030 - NetBSD 1.0 From bwatanabe@tum.de Fri Jun 07 21:30:57 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!tum!bwatanabe From: bwatanabe@tum.de (Bastien Watanabe) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun07.213057.6062@tum.de> Date: Fri, 07 Jun 1996 21:30:57 GMT References: <1996Jun05.114457.1055@panix.com> <1996Jun06.061857.2821@pacbell.net> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1996Jun06.061857.2821@pacbell.net>, rokonkwo@pacbell.net (Rodrigo Okonkwo) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Bastien Watanabe SupraFAXModem 28.8 @ 9600 Telebit bps "Hold for relay."