From ekarlsson@uu.net Tue Dec 19 21:24:12 1995 Path: ashpoly!cascade!brgate!saturno!uu!ekarlsson From: ekarlsson@uu.net (Élodie Karlsson) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec19.212412.2961@uu.net> Date: Tue, 19 Dec 1995 21:24:12 GMT Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- === Élodie Karlsson === Dept of Electrical Engineering, UUNET Technologies, Falls Church VA "We don't sign stars. We build them." From kcampbell@rwth-aachen.de Thu Dec 21 21:16:12 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!rwth-aachen!kcampbell From: kcampbell@rwth-aachen.de (Katrin Campbell) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec21.211612.3526@rwth-aachen.de> Date: Thu, 21 Dec 1995 21:16:12 GMT References: <1995Dec19.212412.2961@uu.net> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1995Dec19.212412.2961@uu.net>, ekarlsson@uu.net (Élodie Karlsson) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Katrin Campbell *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0