From areyes@purdue.edu Sat Sep 24 23:52:07 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!purdue!areyes From: areyes@purdue.edu (Andrei Reyes) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep24.235207.3295@purdue.edu> Date: Sat, 24 Sep 1994 23:52:07 GMT Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 11 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Andrei Reyes | areyes@purdue.edu PGP Key fingerprint: 8B97 224B 222A BD5D "Keep the channels open." From flindqvist@earthlink.net Sun Sep 25 04:59:07 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!earthlink!flindqvist From: flindqvist@earthlink.net (Freya Lindqvist) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep25.045907.7134@earthlink.net> Date: Sun, 25 Sep 1994 04:59:07 GMT References: <1994Sep24.235207.3295@purdue.edu> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: Netscape 1.1N Lines: 9 In article <1994Sep24.235207.3295@purdue.edu>, areyes@purdue.edu (Andrei Reyes) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Freya Lindqvist Practical Peripherals 14.4 @ 33,600 bps "Measuring a record you own is listening, not piracy." From agonzalez@uni-hamburg.de Sun Sep 25 06:10:07 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!uni-hamburg!agonzalez From: agonzalez@uni-hamburg.de (Andrei González) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep25.061007.1727@uni-hamburg.de> Date: Sun, 25 Sep 1994 06:10:07 GMT References: <1994Sep24.235207.3295@purdue.edu> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 9 In article <1994Sep24.235207.3295@purdue.edu>, areyes@purdue.edu (Andrei Reyes) writes: > Hardware disassembly report for Motorola hardware hackers. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Andrei González Opinions expressed are solely my own and not those of Universität Hamburg Fachbereich Informatik. ------------------------------------------------------------ From mmartinez@stanford.edu Sun Sep 25 18:54:07 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!stanford!mmartinez From: mmartinez@stanford.edu (Marisol Martínez) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Sep25.185407.8440@stanford.edu> Date: Sun, 25 Sep 1994 18:54:07 GMT References: <1994Sep24.235207.3295@purdue.edu> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Sep24.235207.3295@purdue.edu>, areyes@purdue.edu (Andrei Reyes) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Marisol Martínez Zyxel U-1496E @ 33,600 bps "The hatch is open. Is anyone listening?"