From ilarsson@hanse.de Sat Aug 19 17:44:02 1995 Path: ashpoly!cascade!mxgate!coyoacan!hanse!ilarsson From: ilarsson@hanse.de (Ines Larsson) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug19.174402.2132@hanse.de> Date: Sat, 19 Aug 1995 17:44:02 GMT Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Ines Larsson "Row 14. No joke." 486DX4/100 (FreeBSD 2.0.5) / SunOS 4.1.4 From hsokolov@stanford.edu Sun Aug 20 15:29:02 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!stanford!hsokolov From: hsokolov@stanford.edu (Hana Sokolov) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug20.152902.2082@stanford.edu> Date: Sun, 20 Aug 1995 15:29:02 GMT References: <1995Aug19.174402.2132@hanse.de> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 8 In article <1995Aug19.174402.2132@hanse.de>, ilarsson@hanse.de (Ines Larsson) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Hana Sokolov Tape trading list upon request. SASE required for international mail. From jlaurent@illinois.edu Mon Aug 21 17:39:02 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!illinois!jlaurent From: jlaurent@illinois.edu (Julien Laurent) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug21.173902.4959@illinois.edu> Date: Mon, 21 Aug 1995 17:39:02 GMT References: <1995Aug19.174402.2132@hanse.de> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Aug19.174402.2132@hanse.de>, ilarsson@hanse.de (Ines Larsson) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Julien Laurent *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From coliveira@mit.edu Mon Aug 21 21:31:02 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!mit!coliveira From: coliveira@mit.edu (Callum Oliveira) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug21.213102.7932@mit.edu> Date: Mon, 21 Aug 1995 21:31:02 GMT References: <1995Aug19.174402.2132@hanse.de> <1995Aug21.173902.4959@illinois.edu> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 8 In article <1995Aug21.173902.4959@illinois.edu>, jlaurent@illinois.edu (Julien Laurent) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Callum Oliveira Tape trading list upon request. SASE required for international mail. From dfischer@pacbell.net Mon Aug 21 22:32:02 1995 Path: ashpoly!cascade!transat!ukc!fennimore!pacbell!dfischer From: dfischer@pacbell.net (Dmitri Fischer) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug21.223202.3769@pacbell.net> Date: Mon, 21 Aug 1995 22:32:02 GMT References: <1995Aug19.174402.2132@hanse.de> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1995Aug19.174402.2132@hanse.de>, ilarsson@hanse.de (Ines Larsson) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Dmitri Fischer Practical Peripherals 14.4 @ ISDN 64k bps "Hardware is temporary. The signal survives."