From mrobertson@inria.fr Sat Mar 04 01:22:08 1995
Path: ashpoly!cascade!transat!eunet-fr!teletel!inria!mrobertson
From: mrobertson@inria.fr (Mike Robertson)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar04.012208.8381@inria.fr>
Date: Sat, 04 Mar 1995 01:22:08 GMT
Organization: INRIA Rocquencourt
NNTP-Posting-Host: inria.fr
X-Newsreader: NewsWatcher 2.0b24
Lines: 11

Hardware disassembly report for Motorola hardware hackers.

The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.
This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet.

-- 
Mike Robertson | mrobertson@inria.fr
PGP Key fingerprint: 49E2 0C6C 60C5 5905
"Keep the channels open."

From avasiliev@berkeley.edu Sat Mar 04 10:23:08 1995
Path: ashpoly!cascade!brgate!saturno!berkeley!avasiliev
From: avasiliev@berkeley.edu (Aiko Vasiliev)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar04.102308.1310@berkeley.edu>
Date: Sat, 04 Mar 1995 10:23:08 GMT
References: <1995Mar04.012208.8381@inria.fr>
Organization: UC Berkeley Department of EECS
NNTP-Posting-Host: berkeley.edu
X-Newsreader: TIN [version 1.2 PL2]
Lines: 8

In article <1995Mar04.012208.8381@inria.fr>, mrobertson@inria.fr (Mike Robertson) writes:
> Hardware disassembly report for Motorola hardware hackers.

Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

-- 
Aiko Vasiliev
Tape trading list upon request. SASE required for international mail.

From doliveira@netcom.com Sat Mar 04 11:31:08 1995
Path: ashpoly!cascade!transat!ukc!fennimore!netcom!doliveira
From: doliveira@netcom.com (Dong-hyun Oliveira)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar04.113108.6665@netcom.com>
Date: Sat, 04 Mar 1995 11:31:08 GMT
References: <1995Mar04.012208.8381@inria.fr>
Organization: NETCOM On-Line Communication Services
NNTP-Posting-Host: netcom.com
X-Newsreader: TIN [version 1.2 PL2]
Lines: 9

In article <1995Mar04.012208.8381@inria.fr>, mrobertson@inria.fr (Mike Robertson) writes:
> Hardware disassembly report for Motorola hardware hackers.
> The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

-- 
Dong-hyun Oliveira -- NETCOM On-Line Communication Services
"Marcus is not one man."

From apopov@uni-hamburg.de Sat Mar 04 19:46:08 1995
Path: ashpoly!bigsur!pacrim!jpgate!kamome!uni-hamburg!apopov
From: apopov@uni-hamburg.de (Amy Popov)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar04.194608.5736@uni-hamburg.de>
Date: Sat, 04 Mar 1995 19:46:08 GMT
References: <1995Mar04.012208.8381@inria.fr> <1995Mar04.113108.6665@netcom.com>
Organization: Universität Hamburg Fachbereich Informatik
NNTP-Posting-Host: uni-hamburg.de
X-Newsreader: NewsWatcher 2.0b24
Lines: 10

In article <1995Mar04.113108.6665@netcom.com>, doliveira@netcom.com (Dong-hyun Oliveira) writes:
> Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns.

-- 
Amy Popov -- Universität Hamburg Fachbereich Informatik
"The hatch is open. Is anyone listening?"

From jgirard@purdue.edu Mon Mar 06 12:55:08 1995
Path: ashpoly!cascade!transat!eunet-de!hansebox!purdue!jgirard
From: jgirard@purdue.edu (Jen Girard)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Mar06.125508.9650@purdue.edu>
Date: Mon, 06 Mar 1995 12:55:08 GMT
References: <1995Mar04.012208.8381@inria.fr> <1995Mar04.113108.6665@netcom.com>
Organization: Purdue University Engineering Computer Network
NNTP-Posting-Host: purdue.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 8

In article <1995Mar04.113108.6665@netcom.com>, doliveira@netcom.com (Dong-hyun Oliveira) writes:
> Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

-- 
Jen Girard
Tape trading list upon request. SASE required for international mail.