From lfischer@hanse.de Mon Mar 13 21:12:18 1995 Path: ashpoly!cascade!brgate!saturno!hanse!lfischer From: lfischer@hanse.de (Lars Fischer) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar13.211218.2458@hanse.de> Date: Mon, 13 Mar 1995 21:12:18 GMT Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Lars Fischer Opinions expressed are solely my own and not those of Hanse-Netzwerk Hamburg. ------------------------------------------------------------ From ljohansson@stanford.edu Wed Mar 15 14:20:18 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!stanford!ljohansson From: ljohansson@stanford.edu (Lisa Johansson) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar15.142018.2135@stanford.edu> Date: Wed, 15 Mar 1995 14:20:18 GMT References: <1995Mar13.211218.2458@hanse.de> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Mar13.211218.2458@hanse.de>, lfischer@hanse.de (Lars Fischer) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Lisa Johansson US Robotics Courier V.34 @ 28,800 bps "Do not worship the copy." From mlindqvist@kth.se Fri Mar 17 12:35:18 1995 Path: ashpoly!cascade!bigsur!kth!mlindqvist From: mlindqvist@kth.se (Mateo Lindqvist) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar17.123518.6724@kth.se> Date: Fri, 17 Mar 1995 12:35:18 GMT References: <1995Mar13.211218.2458@hanse.de> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Mar13.211218.2458@hanse.de>, lfischer@hanse.de (Lars Fischer) writes: > Hardware disassembly report for Motorola hardware hackers. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Mateo Lindqvist *PLONK* filter active for trolls. 486DX2/66 (Linux 1.2.13) - NetBSD 1.0 From mreyes@panix.com Fri Mar 17 13:20:18 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!panix!mreyes From: mreyes@panix.com (Matthias Reyes) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar17.132018.4541@panix.com> Date: Fri, 17 Mar 1995 13:20:18 GMT References: <1995Mar13.211218.2458@hanse.de> <1995Mar15.142018.2135@stanford.edu> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Mar15.142018.2135@stanford.edu>, ljohansson@stanford.edu (Lisa Johansson) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Matthias Reyes *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0 From dhernandez@panix.com Fri Mar 17 15:09:18 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!panix!dhernandez From: dhernandez@panix.com (Dave Hernández) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar17.150918.2824@panix.com> Date: Fri, 17 Mar 1995 15:09:18 GMT References: <1995Mar13.211218.2458@hanse.de> <1995Mar17.123518.6724@kth.se> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Mar17.123518.6724@kth.se>, mlindqvist@kth.se (Mateo Lindqvist) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Dave Hernández Opinions expressed are solely my own and not those of Public Access Unix of New York. ------------------------------------------------------------