From bgonzalez@cmu.edu Thu Jan 27 16:29:16 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!cmu!bgonzalez From: bgonzalez@cmu.edu (Bill González) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan27.162916.3919@cmu.edu> Date: Thu, 27 Jan 1994 16:29:16 GMT Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: WinVN 0.99.5 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Bill González "In theory there is no difference between theory and practice." Amiga 1200 (Blizzard 030/50) / TOS 4.04 From fsantos@inria.fr Sat Jan 29 08:48:16 1994 Path: ashpoly!cascade!transat!ukc!fennimore!inria!fsantos From: fsantos@inria.fr (Fiona Santos) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan29.084816.9184@inria.fr> Date: Sat, 29 Jan 1994 08:48:16 GMT References: <1994Jan27.162916.3919@cmu.edu> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Jan27.162916.3919@cmu.edu>, bgonzalez@cmu.edu (Bill González) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Fiona Santos Opinions expressed are solely my own and not those of INRIA Rocquencourt. ------------------------------------------------------------ From ahughes@rwth-aachen.de Sat Jan 29 20:10:16 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!rwth-aachen!ahughes From: ahughes@rwth-aachen.de (Astrid Hughes) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan29.201016.6204@rwth-aachen.de> Date: Sat, 29 Jan 1994 20:10:16 GMT References: <1994Jan27.162916.3919@cmu.edu> <1994Jan29.084816.9184@inria.fr> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Jan29.084816.9184@inria.fr>, fsantos@inria.fr (Fiona Santos) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Astrid Hughes Hayes Optima 288 @ 14,400 bps "We don't sign stars. We build them." From aeriksson@stanford.edu Sun Jan 30 17:04:16 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!stanford!aeriksson From: aeriksson@stanford.edu (Amy Eriksson) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan30.170416.8204@stanford.edu> Date: Sun, 30 Jan 1994 17:04:16 GMT References: <1994Jan27.162916.3919@cmu.edu> <1994Jan29.084816.9184@inria.fr> <1994Jan29.201016.6204@rwth-aachen.de> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Jan29.201016.6204@rwth-aachen.de>, ahughes@rwth-aachen.de (Astrid Hughes) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Amy Eriksson *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0