From dgarcia@cmu.edu Sat Aug 19 20:38:05 1995 Path: ashpoly!cascade!bigsur!cmu!dgarcia From: dgarcia@cmu.edu (Diego García) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug19.203805.8705@cmu.edu> Date: Sat, 19 Aug 1995 20:38:05 GMT Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Diego García | dgarcia@cmu.edu PGP Key fingerprint: 1E86 56AF D21C FC54 "Keep the channels open." From kandersson@clari.net Sun Aug 20 07:31:05 1995 Path: ashpoly!cascade!brgate!saturno!clari!kandersson From: kandersson@clari.net (Karen Andersson) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug20.073105.4273@clari.net> Date: Sun, 20 Aug 1995 07:31:05 GMT References: <1995Aug19.203805.8705@cmu.edu> Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Aug19.203805.8705@cmu.edu>, dgarcia@cmu.edu (Diego García) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Unsubscribe me from this list! (Wait, this is Usenet, never mind). -- Karen Andersson Tape trading list upon request. SASE required for international mail. From jivanov@cern.ch Sun Aug 20 23:08:05 1995 Path: ashpoly!cascade!brgate!saturno!cern!jivanov From: jivanov@cern.ch (Julien Ivanov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug20.230805.2618@cern.ch> Date: Sun, 20 Aug 1995 23:08:05 GMT References: <1995Aug19.203805.8705@cmu.edu> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Aug19.203805.8705@cmu.edu>, dgarcia@cmu.edu (Diego García) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Julien Ivanov "The carrier frequency does not drift by accident." Atari Falcon 030 / SunOS 4.1.4 From ppetrov@pacbell.net Mon Aug 21 08:21:05 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!pacbell!ppetrov From: ppetrov@pacbell.net (Pavel Petrov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug21.082105.4285@pacbell.net> Date: Mon, 21 Aug 1995 08:21:05 GMT References: <1995Aug19.203805.8705@cmu.edu> <1995Aug20.073105.4273@clari.net> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Aug20.073105.4273@clari.net>, kandersson@clari.net (Karen Andersson) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Pavel Petrov *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0 From gmoreau@ox.ac.uk Tue Aug 22 01:13:05 1995 Path: ashpoly!cascade!transat!ukc!fennimore!ox!gmoreau From: gmoreau@ox.ac.uk (Göran Moreau) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug22.011305.1808@ox.ac.uk> Date: Tue, 22 Aug 1995 01:13:05 GMT References: <1995Aug19.203805.8705@cmu.edu> <1995Aug20.073105.4273@clari.net> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Aug20.073105.4273@clari.net>, kandersson@clari.net (Karen Andersson) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Göran Moreau "The hatch is open. Is anyone listening?" Atari TT030 / NEXTSTEP 3.3