From ksouza@unam.mx Mon Apr 03 05:54:13 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!unam!ksouza From: ksouza@unam.mx (Katrin Souza) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr03.055413.2963@unam.mx> Date: Mon, 03 Apr 1995 05:54:13 GMT Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: WinVN 0.99.5 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- === Katrin Souza === Dept of Electrical Engineering, Universidad Nacional Autónoma de México (DGSCA) "Do not worship the copy." From nnovak@cam.ac.uk Wed Apr 05 02:06:13 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!cam!nnovak From: nnovak@cam.ac.uk (Nadine Novak) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr05.020613.5776@cam.ac.uk> Date: Wed, 05 Apr 1995 02:06:13 GMT References: <1995Apr03.055413.2963@unam.mx> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 8 In article <1995Apr03.055413.2963@unam.mx>, ksouza@unam.mx (Katrin Souza) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Nadine Novak Tape trading list upon request. SASE required for international mail. From hweber@purdue.edu Thu Apr 06 05:28:13 1995 Path: ashpoly!cascade!mxgate!coyoacan!purdue!hweber From: hweber@purdue.edu (Heather Weber) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr06.052813.3590@purdue.edu> Date: Thu, 06 Apr 1995 05:28:13 GMT References: <1995Apr03.055413.2963@unam.mx> <1995Apr05.020613.5776@cam.ac.uk> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Apr05.020613.5776@cam.ac.uk>, nnovak@cam.ac.uk (Nadine Novak) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Heather Weber *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0 From alarsson@panix.com Fri Apr 07 07:03:13 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!panix!alarsson From: alarsson@panix.com (Andrei Larsson) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr07.070313.1304@panix.com> Date: Fri, 07 Apr 1995 07:03:13 GMT References: <1995Apr03.055413.2963@unam.mx> <1995Apr05.020613.5776@cam.ac.uk> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Apr05.020613.5776@cam.ac.uk>, nnovak@cam.ac.uk (Nadine Novak) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Andrei Larsson Opinions expressed are solely my own and not those of Public Access Unix of New York. ------------------------------------------------------------ From slopez@kth.se Sun Apr 09 09:32:13 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!kth!slopez From: slopez@kth.se (Sven López) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr09.093213.5378@kth.se> Date: Sun, 09 Apr 1995 09:32:13 GMT References: <1995Apr03.055413.2963@unam.mx> <1995Apr05.020613.5776@cam.ac.uk> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Apr05.020613.5776@cam.ac.uk>, nnovak@cam.ac.uk (Nadine Novak) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- === Sven López === Dept of Electrical Engineering, Royal Institute of Technology, Stockholm "Measuring a record you own is listening, not piracy."