From knakamura@netcom.com Tue Dec 13 02:10:37 1994 Path: ashpoly!cascade!bigsur!netcom!knakamura From: knakamura@netcom.com (Karen Nakamura) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Dec13.021037.2632@netcom.com> Date: Tue, 13 Dec 1994 02:10:37 GMT Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Karen Nakamura *PLONK* filter active for trolls. NeXTstation Turbo Color - NetBSD 1.0 From khughes@pipeline.com Tue Dec 13 20:47:37 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!pipeline!khughes From: khughes@pipeline.com (Karen Hughes) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Dec13.204737.1139@pipeline.com> Date: Tue, 13 Dec 1994 20:47:37 GMT References: <1994Dec13.021037.2632@netcom.com> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: Netscape 1.1N Lines: 10 In article <1994Dec13.021037.2632@netcom.com>, knakamura@netcom.com (Karen Nakamura) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Karen Hughes US Robotics Courier V.34 @ 14,400 bps "When every node is whole, the channel opens." From epetrov@inria.fr Wed Dec 14 09:13:37 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!inria!epetrov From: epetrov@inria.fr (Élodie Petrov) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Dec14.091337.6352@inria.fr> Date: Wed, 14 Dec 1994 09:13:37 GMT References: <1994Dec13.021037.2632@netcom.com> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Dec13.021037.2632@netcom.com>, knakamura@netcom.com (Karen Nakamura) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Élodie Petrov -- INRIA Rocquencourt "Measuring a record you own is listening, not piracy."