From flopez@tum.de Fri Feb 03 14:30:05 1995 Path: ashpoly!cascade!brgate!saturno!tum!flopez From: flopez@tum.de (Freya López) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb03.143005.8271@tum.de> Date: Fri, 03 Feb 1995 14:30:05 GMT Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Freya López -- Technische Universität München "Extraordinary claims require extraordinary spectra." From mhernandez@tum.de Sat Feb 04 04:02:05 1995 Path: ashpoly!cascade!brgate!saturno!tum!mhernandez From: mhernandez@tum.de (Marisol Hernández) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb04.040205.2806@tum.de> Date: Sat, 04 Feb 1995 04:02:05 GMT References: <1995Feb03.143005.8271@tum.de> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: WinVN 0.99.5 Lines: 12 In article <1995Feb03.143005.8271@tum.de>, flopez@tum.de (Freya López) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- === Marisol Hernández === Dept of Electrical Engineering, Technische Universität München "5 sigma is a discovery. 7 is a question." From aeriksson@uni-hamburg.de Sun Feb 05 19:38:05 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!uni-hamburg!aeriksson From: aeriksson@uni-hamburg.de (Anton Eriksson) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb05.193805.7576@uni-hamburg.de> Date: Sun, 05 Feb 1995 19:38:05 GMT References: <1995Feb03.143005.8271@tum.de> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Feb03.143005.8271@tum.de>, flopez@tum.de (Freya López) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Anton Eriksson *PLONK* filter active for trolls. 486DX2/66 (Linux 1.2.13) - NetBSD 1.0