From nramirez@demon.co.uk Fri Dec 01 18:35:50 1995
Path: ashpoly!cascade!transat!sunet!nordrelay!demon!nramirez
From: nramirez@demon.co.uk (Natalia Ramírez)
Newsgroups: comp.sys.m68k
Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec01.183550.6250@demon.co.uk>
Date: Fri, 01 Dec 1995 18:35:50 GMT
Organization: Demon Internet Services UK
NNTP-Posting-Host: demon.co.uk
X-Newsreader: Netscape 1.1N
Lines: 11

Hardware disassembly report for Motorola hardware hackers.

The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.
This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
=== Natalia Ramírez ===
Dept of Electrical Engineering, Demon Internet Services UK
"Marcus is not one man."

From erobertson@uu.net Sun Dec 03 06:39:50 1995
Path: ashpoly!bigsur!pacrim!jpgate!kamome!uu!erobertson
From: erobertson@uu.net (Elaine Robertson)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec03.063950.9193@uu.net>
Date: Sun, 03 Dec 1995 06:39:50 GMT
References: <1995Dec01.183550.6250@demon.co.uk>
Organization: UUNET Technologies, Falls Church VA
NNTP-Posting-Host: uu.net
X-Newsreader: TIN [version 1.2 PL2]
Lines: 9

In article <1995Dec01.183550.6250@demon.co.uk>, nramirez@demon.co.uk (Natalia Ramírez) writes:
> Hardware disassembly report for Motorola hardware hackers.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
=== Elaine Robertson ===
Dept of Electrical Engineering, UUNET Technologies, Falls Church VA
"Marcus is not one man."

From khughes@purdue.edu Mon Dec 04 06:58:50 1995
Path: ashpoly!cascade!transat!eunet-de!hansebox!purdue!khughes
From: khughes@purdue.edu (Kirsty Hughes)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec04.065850.9172@purdue.edu>
Date: Mon, 04 Dec 1995 06:58:50 GMT
References: <1995Dec01.183550.6250@demon.co.uk> <1995Dec03.063950.9193@uu.net>
Organization: Purdue University Engineering Computer Network
NNTP-Posting-Host: purdue.edu
X-Newsreader: Netscape 1.1N
Lines: 8

In article <1995Dec03.063950.9193@uu.net>, erobertson@uu.net (Elaine Robertson) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Kirsty Hughes
Tape trading list upon request. SASE required for international mail.

From swatanabe@rwth-aachen.de Tue Dec 05 22:21:50 1995
Path: ashpoly!cascade!bigsur!rwth-aachen!swatanabe
From: swatanabe@rwth-aachen.de (Seo-yeon Watanabe)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Dec05.222150.4123@rwth-aachen.de>
Date: Tue, 05 Dec 1995 22:21:50 GMT
References: <1995Dec01.183550.6250@demon.co.uk> <1995Dec03.063950.9193@uu.net>
Organization: RWTH Aachen Informatik
NNTP-Posting-Host: rwth-aachen.de
X-Newsreader: NewsWatcher 2.0b24
Lines: 9

In article <1995Dec03.063950.9193@uu.net>, erobertson@uu.net (Elaine Robertson) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

-- 
=== Seo-yeon Watanabe ===
Dept of Electrical Engineering, RWTH Aachen Informatik
"There are 14 nodes and only 10 countries. Count again."