From smuller@tum.de Tue Aug 16 14:40:22 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!tum!smuller From: smuller@tum.de (Seo-yeon Müller) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Aug16.144022.6442@tum.de> Date: Tue, 16 Aug 1994 14:40:22 GMT Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: TIN [version 1.2 PL2] Lines: 10 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Did Marcus take the decryption EPROM with him when he left the lab? -- Seo-yeon Müller -- Technische Universität München "The carrier frequency does not drift by accident." From jbrennan@kiae.su Wed Aug 17 08:20:22 1994 Path: ashpoly!cascade!bigsur!kiae!jbrennan From: jbrennan@kiae.su (Joachim Brennan) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Aug17.082022.6366@kiae.su> Date: Wed, 17 Aug 1994 08:20:22 GMT References: <1994Aug16.144022.6442@tum.de> Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Aug16.144022.6442@tum.de>, smuller@tum.de (Seo-yeon Müller) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Joachim Brennan Opinions expressed are solely my own and not those of Kurchatov Institute of Atomic Energy, Moscow. ------------------------------------------------------------ From mmartinez@tum.de Fri Aug 19 11:13:22 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!tum!mmartinez From: mmartinez@tum.de (Morag Martínez) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Aug19.111322.4272@tum.de> Date: Fri, 19 Aug 1994 11:13:22 GMT References: <1994Aug16.144022.6442@tum.de> <1994Aug17.082022.6366@kiae.su> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: Netscape 1.1N Lines: 11 In article <1994Aug17.082022.6366@kiae.su>, jbrennan@kiae.su (Joachim Brennan) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Morag Martínez Practical Peripherals 14.4 @ 28,800 bps "They will send a copy in my place."