From atanaka@tum.de Fri Nov 24 09:58:11 1995 Path: ashpoly!cascade!transat!ukc!fennimore!tum!atanaka From: atanaka@tum.de (Astrid Tanaka) Newsgroups: comp.sys.m68k Subject: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov24.095811.4045@tum.de> Date: Fri, 24 Nov 1995 09:58:11 GMT Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Astrid Tanaka *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0 From rwatanabe@cam.ac.uk Sat Nov 25 00:22:11 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!cam!rwatanabe From: rwatanabe@cam.ac.uk (Renata Watanabe) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov25.002211.5759@cam.ac.uk> Date: Sat, 25 Nov 1995 00:22:11 GMT References: <1995Nov24.095811.4045@tum.de> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Nov24.095811.4045@tum.de>, atanaka@tum.de (Astrid Tanaka) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- === Renata Watanabe === Dept of Electrical Engineering, University of Cambridge Computer Laboratory "Tape doesn't lie at 02:14. Ears do." From hfournier@mindspring.com Sun Nov 26 01:55:11 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!mindspring!hfournier From: hfournier@mindspring.com (Hugo Fournier) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov26.015511.6988@mindspring.com> Date: Sun, 26 Nov 1995 01:55:11 GMT References: <1995Nov24.095811.4045@tum.de> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1995Nov24.095811.4045@tum.de>, atanaka@tum.de (Astrid Tanaka) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns. -- Hugo Fournier *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From msouza@cam.ac.uk Mon Nov 27 02:28:11 1995 Path: ashpoly!cascade!brgate!saturno!cam!msouza From: msouza@cam.ac.uk (Marta Souza) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov27.022811.8090@cam.ac.uk> Date: Mon, 27 Nov 1995 02:28:11 GMT References: <1995Nov24.095811.4045@tum.de> <1995Nov26.015511.6988@mindspring.com> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Nov26.015511.6988@mindspring.com>, hfournier@mindspring.com (Hugo Fournier) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- === Marta Souza === Dept of Electrical Engineering, University of Cambridge Computer Laboratory "The hatch is open. Is anyone listening?"