From hkowalski@pacbell.net Fri Jul 08 17:29:21 1994 Path: ashpoly!cascade!mxgate!coyoacan!pacbell!hkowalski From: hkowalski@pacbell.net (Hugo Kowalski) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jul08.172921.8027@pacbell.net> Date: Fri, 08 Jul 1994 17:29:21 GMT Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: WinVN 0.99.5 Lines: 10 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Hugo Kowalski Tape trading list upon request. SASE required for international mail. From jfournier@mit.edu Sun Jul 10 08:10:21 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!mit!jfournier From: jfournier@mit.edu (Joachim Fournier) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jul10.081021.3687@mit.edu> Date: Sun, 10 Jul 1994 08:10:21 GMT References: <1994Jul08.172921.8027@pacbell.net> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1994Jul08.172921.8027@pacbell.net>, hkowalski@pacbell.net (Hugo Kowalski) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Joachim Fournier *PLONK* filter active for trolls. Atari TT030 - NetBSD 1.0 From mkowalski@titech.ac.jp Tue Jul 12 10:29:21 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!titech!mkowalski From: mkowalski@titech.ac.jp (Mateo Kowalski) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jul12.102921.8546@titech.ac.jp> Date: Tue, 12 Jul 1994 10:29:21 GMT References: <1994Jul08.172921.8027@pacbell.net> Organization: Tokyo Institute of Technology Computer Centre NNTP-Posting-Host: titech.ac.jp X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1994Jul08.172921.8027@pacbell.net>, hkowalski@pacbell.net (Hugo Kowalski) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Mateo Kowalski === Dept of Electrical Engineering, Tokyo Institute of Technology Computer Centre "Tape doesn't lie at 02:14. Ears do."