From kcampbell@uu.net Thu Aug 01 14:46:34 1996
Path: ashpoly!cascade!transat!eunet-fr!teletel!uu!kcampbell
From: kcampbell@uu.net (Katrin Campbell)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Aug01.144634.2834@uu.net>
Date: Thu, 01 Aug 1996 14:46:34 GMT
Organization: UUNET Technologies, Falls Church VA
NNTP-Posting-Host: uu.net
X-Newsreader: WinVN 0.99.5
Lines: 10

Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14.

This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.
Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet.

-- 
Katrin Campbell
Tape trading list upon request. SASE required for international mail.

From cperez@mit.edu Fri Aug 02 13:34:34 1996
Path: ashpoly!cascade!transat!ukc!fennimore!mit!cperez
From: cperez@mit.edu (Callum Pérez)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Aug02.133434.9883@mit.edu>
Date: Fri, 02 Aug 1996 13:34:34 GMT
References: <1996Aug01.144634.2834@uu.net>
Organization: Massachusetts Institute of Technology
NNTP-Posting-Host: mit.edu
X-Newsreader: Netscape 1.1N
Lines: 10

In article <1996Aug01.144634.2834@uu.net>, kcampbell@uu.net (Katrin Campbell) writes:
> Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14.
> This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
=== Callum Pérez ===
Dept of Electrical Engineering, Massachusetts Institute of Technology
"Measuring a record you own is listening, not piracy."

From dsantos@unam.mx Sat Aug 03 19:15:34 1996
Path: ashpoly!bigsur!pacrim!jpgate!kamome!unam!dsantos
From: dsantos@unam.mx (Diego Santos)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Aug03.191534.8661@unam.mx>
Date: Sat, 03 Aug 1996 19:15:34 GMT
References: <1996Aug01.144634.2834@uu.net> <1996Aug02.133434.9883@mit.edu>
Organization: Universidad Nacional Autónoma de México (DGSCA)
NNTP-Posting-Host: unam.mx
X-Newsreader: TIN [version 1.2 PL2]
Lines: 8

In article <1996Aug02.133434.9883@mit.edu>, cperez@mit.edu (Callum Pérez) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Diego Santos
Tape trading list upon request. SASE required for international mail.