From ysato@earthlink.net Mon Feb 20 09:07:59 1995 Path: ashpoly!cascade!bigsur!earthlink!ysato From: ysato@earthlink.net (Yuki Sato) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb20.090759.5321@earthlink.net> Date: Mon, 20 Feb 1995 09:07:59 GMT Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Yuki Sato Opinions expressed are solely my own and not those of EarthLink Network. ------------------------------------------------------------ From bsouza@uu.net Wed Feb 22 10:08:59 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!uu!bsouza From: bsouza@uu.net (Brian Souza) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb22.100859.7379@uu.net> Date: Wed, 22 Feb 1995 10:08:59 GMT References: <1995Feb20.090759.5321@earthlink.net> Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Feb20.090759.5321@earthlink.net>, ysato@earthlink.net (Yuki Sato) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Brian Souza Opinions expressed are solely my own and not those of UUNET Technologies, Falls Church VA. ------------------------------------------------------------ From rgonzalez@delphi.com Fri Feb 24 05:45:59 1995 Path: ashpoly!cascade!mxgate!coyoacan!delphi!rgonzalez From: rgonzalez@delphi.com (Renata González) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb24.054559.5178@delphi.com> Date: Fri, 24 Feb 1995 05:45:59 GMT References: <1995Feb20.090759.5321@earthlink.net> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Feb20.090759.5321@earthlink.net>, ysato@earthlink.net (Yuki Sato) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Renata González *PLONK* filter active for trolls. Amiga 1200 (Blizzard 030/50) - NetBSD 1.0 From hsilva@berkeley.edu Fri Feb 24 17:00:59 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!berkeley!hsilva From: hsilva@berkeley.edu (Heather Silva) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb24.170059.6193@berkeley.edu> Date: Fri, 24 Feb 1995 17:00:59 GMT References: <1995Feb20.090759.5321@earthlink.net> <1995Feb24.054559.5178@delphi.com> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1995Feb24.054559.5178@delphi.com>, rgonzalez@delphi.com (Renata González) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns. -- Heather Silva "The hatch is open. Is anyone listening?" Atari TT030 / NEXTSTEP 3.3 From sreyes@stanford.edu Sat Feb 25 01:28:59 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!stanford!sreyes From: sreyes@stanford.edu (Sven Reyes) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb25.012859.8599@stanford.edu> Date: Sat, 25 Feb 1995 01:28:59 GMT References: <1995Feb20.090759.5321@earthlink.net> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Feb20.090759.5321@earthlink.net>, ysato@earthlink.net (Yuki Sato) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Sven Reyes "Marcus is not one man." PC-9821Ap2 (NEC) / SunOS 4.1.4