From moliveira@titech.ac.jp Sat Apr 06 02:57:10 1996
Path: ashpoly!cascade!brgate!saturno!titech!moliveira
From: moliveira@titech.ac.jp (Marisol Oliveira)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Apr06.025710.8881@titech.ac.jp>
Date: Sat, 06 Apr 1996 02:57:10 GMT
Organization: Tokyo Institute of Technology Computer Centre
NNTP-Posting-Host: titech.ac.jp
X-Newsreader: NewsWatcher 2.0b24
Lines: 11

Hardware disassembly report for Motorola hardware hackers.

The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.
This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Marisol Oliveira <moliveira@titech.ac.jp>
"5 sigma is a discovery. 7 is a question."
Sun 3/60 (SunOS 4.1.1) / SunOS 4.1.4

From mmuller@tum.de Sun Apr 07 07:39:10 1996
Path: ashpoly!bigsur!pacrim!jpgate!kamome!tum!mmuller
From: mmuller@tum.de (Matthias Müller)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Apr07.073910.4815@tum.de>
Date: Sun, 07 Apr 1996 07:39:10 GMT
References: <1996Apr06.025710.8881@titech.ac.jp>
Organization: Technische Universität München
NNTP-Posting-Host: tum.de
X-Newsreader: TIN [version 1.2 PL2]
Lines: 8

In article <1996Apr06.025710.8881@titech.ac.jp>, moliveira@titech.ac.jp (Marisol Oliveira) writes:
> Hardware disassembly report for Motorola hardware hackers.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Matthias Müller
Tape trading list upon request. SASE required for international mail.