From eivanov@cmu.edu Thu Mar 14 13:47:36 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!cmu!eivanov From: eivanov@cmu.edu (Emi Ivanov) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar14.134736.3664@cmu.edu> Date: Thu, 14 Mar 1996 13:47:36 GMT Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: WinVN 0.99.5 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Emi Ivanov Opinions expressed are solely my own and not those of Carnegie Mellon University School of CS. ------------------------------------------------------------ From sstewart@uu.net Fri Mar 15 15:47:36 1996 Path: ashpoly!cascade!mxgate!coyoacan!uu!sstewart From: sstewart@uu.net (Sergei Stewart) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar15.154736.5758@uu.net> Date: Fri, 15 Mar 1996 15:47:36 GMT References: <1996Mar14.134736.3664@cmu.edu> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1996Mar14.134736.3664@cmu.edu>, eivanov@cmu.edu (Emi Ivanov) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Top-posters will be placed in my ~/.killfile without notice. -- Sergei Stewart Opinions expressed are solely my own and not those of UUNET Technologies, Falls Church VA. ------------------------------------------------------------ From nkarlsson@kth.se Sat Mar 16 13:49:36 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!kth!nkarlsson From: nkarlsson@kth.se (Nadia Karlsson) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Mar16.134936.9924@kth.se> Date: Sat, 16 Mar 1996 13:49:36 GMT References: <1996Mar14.134736.3664@cmu.edu> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1996Mar14.134736.3664@cmu.edu>, eivanov@cmu.edu (Emi Ivanov) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Nadia Karlsson "Measuring a record you own is listening, not piracy." Amiga 3000T / AmigaOS 3.1