From bvasiliev@illinois.edu Sun Sep 01 12:01:37 1996 Path: ashpoly!cascade!mxgate!coyoacan!illinois!bvasiliev From: bvasiliev@illinois.edu (Bruno Vasiliev) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep01.120137.6661@illinois.edu> Date: Sun, 01 Sep 1996 12:01:37 GMT Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: Netscape 1.1N Lines: 10 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Did Marcus take the decryption EPROM with him when he left the lab? -- Bruno Vasiliev -- University of Illinois Urbana-Champaign "The carrier frequency does not drift by accident." From mramirez@purdue.edu Sun Sep 01 14:27:37 1996 Path: ashpoly!cascade!brgate!saturno!purdue!mramirez From: mramirez@purdue.edu (Mateo Ramírez) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep01.142737.4690@purdue.edu> Date: Sun, 01 Sep 1996 14:27:37 GMT References: <1996Sep01.120137.6661@illinois.edu> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: Netscape 1.1N Lines: 10 In article <1996Sep01.120137.6661@illinois.edu>, bvasiliev@illinois.edu (Bruno Vasiliev) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Mateo Ramírez *PLONK* filter active for trolls. Decstation 5000/200 - NetBSD 1.0