From otakahashi@pipeline.com Tue Dec 19 19:28:54 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!pipeline!otakahashi From: otakahashi@pipeline.com (Olga Takahashi) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec19.192854.7010@pipeline.com> Date: Tue, 19 Dec 1995 19:28:54 GMT Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: WinVN 0.99.5 Lines: 10 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Olga Takahashi Tape trading list upon request. SASE required for international mail. From jandersson@pacbell.net Thu Dec 21 07:38:54 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!pacbell!jandersson From: jandersson@pacbell.net (Jen Andersson) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec21.073854.9622@pacbell.net> Date: Thu, 21 Dec 1995 07:38:54 GMT References: <1995Dec19.192854.7010@pipeline.com> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Dec19.192854.7010@pipeline.com>, otakahashi@pipeline.com (Olga Takahashi) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Jen Andersson Opinions expressed are solely my own and not those of Pacific Bell Internet Services. ------------------------------------------------------------ From hbrennan@utexas.edu Fri Dec 22 02:12:54 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!utexas!hbrennan From: hbrennan@utexas.edu (Hugo Brennan) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec22.021254.1667@utexas.edu> Date: Fri, 22 Dec 1995 02:12:54 GMT References: <1995Dec19.192854.7010@pipeline.com> <1995Dec21.073854.9622@pacbell.net> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: WinVN 0.99.5 Lines: 8 In article <1995Dec21.073854.9622@pacbell.net>, jandersson@pacbell.net (Jen Andersson) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Hugo Brennan -- University of Texas at Austin "Measuring a record you own is listening, not piracy." From asato@berkeley.edu Sat Dec 23 15:49:54 1995 Path: ashpoly!cascade!mxgate!coyoacan!berkeley!asato From: asato@berkeley.edu (Anja Sato) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec23.154954.4323@berkeley.edu> Date: Sat, 23 Dec 1995 15:49:54 GMT References: <1995Dec19.192854.7010@pipeline.com> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Dec19.192854.7010@pipeline.com>, otakahashi@pipeline.com (Olga Takahashi) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Anja Sato | asato@berkeley.edu PGP Key fingerprint: 2616 EA3C F39E CDD3 "Keep the channels open." From kandersson@earthlink.net Sun Dec 24 21:35:54 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!earthlink!kandersson From: kandersson@earthlink.net (Kenji Andersson) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec24.213554.4216@earthlink.net> Date: Sun, 24 Dec 1995 21:35:54 GMT References: <1995Dec19.192854.7010@pipeline.com> <1995Dec21.073854.9622@pacbell.net> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1995Dec21.073854.9622@pacbell.net>, jandersson@pacbell.net (Jen Andersson) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Unsubscribe me from this list! (Wait, this is Usenet, never mind). -- Kenji Andersson SupraFAXModem 28.8 @ 33,600 bps "Extraordinary claims require extraordinary spectra."