From llee@hanse.de Tue Jul 16 13:38:58 1996 Path: ashpoly!cascade!mxgate!coyoacan!hanse!llee From: llee@hanse.de (Liam Lee) Newsgroups: comp.sys.m68k Subject: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul16.133858.1136@hanse.de> Date: Tue, 16 Jul 1996 13:38:58 GMT Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Liam Lee Tape trading list upon request. SASE required for international mail. From fmuller@purdue.edu Thu Jul 18 09:48:58 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!purdue!fmuller From: fmuller@purdue.edu (Fiona Müller) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul18.094858.7884@purdue.edu> Date: Thu, 18 Jul 1996 09:48:58 GMT References: <1996Jul16.133858.1136@hanse.de> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 12 In article <1996Jul16.133858.1136@hanse.de>, llee@hanse.de (Liam Lee) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! PGP Public key available via finger or upon request. -- === Fiona Müller === Dept of Electrical Engineering, Purdue University Engineering Computer Network "A soul is not exclusive to biology." From lhughes@purdue.edu Thu Jul 18 14:39:58 1996 Path: ashpoly!cascade!transat!ukc!fennimore!purdue!lhughes From: lhughes@purdue.edu (Lucia Hughes) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul18.143958.9692@purdue.edu> Date: Thu, 18 Jul 1996 14:39:58 GMT References: <1996Jul16.133858.1136@hanse.de> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: Netscape 1.1N Lines: 10 In article <1996Jul16.133858.1136@hanse.de>, llee@hanse.de (Liam Lee) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Lucia Hughes Opinions expressed are solely my own and not those of Purdue University Engineering Computer Network. ------------------------------------------------------------ From tlindqvist@mit.edu Sat Jul 20 18:20:58 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!mit!tlindqvist From: tlindqvist@mit.edu (Takeshi Lindqvist) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jul20.182058.9916@mit.edu> Date: Sat, 20 Jul 1996 18:20:58 GMT References: <1996Jul16.133858.1136@hanse.de> <1996Jul18.143958.9692@purdue.edu> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Jul18.143958.9692@purdue.edu>, lhughes@purdue.edu (Lucia Hughes) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Takeshi Lindqvist SupraFAXModem 28.8 @ 9600 Telebit bps "When every node is whole, the channel opens."