From alarsson@netcom.com Sat Jan 06 09:38:53 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!netcom!alarsson From: alarsson@netcom.com (Amy Larsson) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jan06.093853.3954@netcom.com> Date: Sat, 06 Jan 1996 09:38:53 GMT Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Amy Larsson Opinions expressed are solely my own and not those of NETCOM On-Line Communication Services. ------------------------------------------------------------ From amartinez@earthlink.net Sun Jan 07 01:31:53 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!earthlink!amartinez From: amartinez@earthlink.net (Amy Martínez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jan07.013153.8149@earthlink.net> Date: Sun, 07 Jan 1996 01:31:53 GMT References: <1996Jan06.093853.3954@netcom.com> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1996Jan06.093853.3954@netcom.com>, alarsson@netcom.com (Amy Larsson) writes: > Hardware disassembly report for Motorola hardware hackers. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Amy Martínez *PLONK* filter active for trolls. Atari Falcon 030 - NetBSD 1.0