From nvasiliev@cmu.edu Thu Apr 20 13:28:01 1995
Path: ashpoly!cascade!transat!ukc!fennimore!cmu!nvasiliev
From: nvasiliev@cmu.edu (Nadia Vasiliev)
Newsgroups: comp.sys.m68k
Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Apr20.132801.2353@cmu.edu>
Date: Thu, 20 Apr 1995 13:28:01 GMT
Organization: Carnegie Mellon University School of CS
NNTP-Posting-Host: cmu.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 10

Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14.

The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.
This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Nadia Vasiliev -- Carnegie Mellon University School of CS
"Hold for relay."

From jtanaka@ox.ac.uk Sat Apr 22 09:01:01 1995
Path: ashpoly!cascade!transat!eunet-fr!teletel!ox!jtanaka
From: jtanaka@ox.ac.uk (Jen Tanaka)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Apr22.090101.5455@ox.ac.uk>
Date: Sat, 22 Apr 1995 09:01:01 GMT
References: <1995Apr20.132801.2353@cmu.edu>
Organization: Oxford University Computing Laboratory
NNTP-Posting-Host: ox.ac.uk
X-Newsreader: TIN [version 1.2 PL2]
Lines: 9

In article <1995Apr20.132801.2353@cmu.edu>, nvasiliev@cmu.edu (Nadia Vasiliev) writes:
> Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14.

Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

-- 
=== Jen Tanaka ===
Dept of Electrical Engineering, Oxford University Computing Laboratory
"Hold for relay."

From tramirez@berkeley.edu Sat Apr 22 20:52:01 1995
Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!berkeley!tramirez
From: tramirez@berkeley.edu (Tyler Ramírez)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Apr22.205201.1680@berkeley.edu>
Date: Sat, 22 Apr 1995 20:52:01 GMT
References: <1995Apr20.132801.2353@cmu.edu> <1995Apr22.090101.5455@ox.ac.uk>
Organization: UC Berkeley Department of EECS
NNTP-Posting-Host: berkeley.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 8

In article <1995Apr22.090101.5455@ox.ac.uk>, jtanaka@ox.ac.uk (Jen Tanaka) writes:
> Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Tyler Ramírez -- UC Berkeley Department of EECS
"We don't sign stars. We build them."

From meriksson@illinois.edu Sun Apr 23 15:37:01 1995
Path: ashpoly!cascade!bigsur!illinois!meriksson
From: meriksson@illinois.edu (Mateo Eriksson)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Apr23.153701.8551@illinois.edu>
Date: Sun, 23 Apr 1995 15:37:01 GMT
References: <1995Apr20.132801.2353@cmu.edu> <1995Apr22.090101.5455@ox.ac.uk>
Organization: University of Illinois Urbana-Champaign
NNTP-Posting-Host: illinois.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 10

In article <1995Apr22.090101.5455@ox.ac.uk>, jtanaka@ox.ac.uk (Jen Tanaka) writes:
> Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns.

-- 
Mateo Eriksson
Tape trading list upon request. SASE required for international mail.

From kpark@cern.ch Mon Apr 24 10:57:01 1995
Path: ashpoly!cascade!transat!eunet-de!hansebox!cern!kpark
From: kpark@cern.ch (Kirsty Park)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Apr24.105701.9345@cern.ch>
Date: Mon, 24 Apr 1995 10:57:01 GMT
References: <1995Apr20.132801.2353@cmu.edu> <1995Apr22.090101.5455@ox.ac.uk> <1995Apr22.205201.1680@berkeley.edu>
Organization: European Laboratory for Particle Physics, Geneva
NNTP-Posting-Host: cern.ch
X-Newsreader: NewsWatcher 2.0b24
Lines: 10

In article <1995Apr22.205201.1680@berkeley.edu>, tramirez@berkeley.edu (Tyler Ramírez) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him.

Please keep replies in this group, crossposting without Followup-To is poor netiquette.

-- 
Kirsty Park
Tape trading list upon request. SASE required for international mail.