From lsouza@delphi.com Wed Aug 16 15:04:35 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!delphi!lsouza From: lsouza@delphi.com (Lucia Souza) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug16.150435.7362@delphi.com> Date: Wed, 16 Aug 1995 15:04:35 GMT Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Lucia Souza Opinions expressed are solely my own and not those of Delphi Internet Services. ------------------------------------------------------------ From cmartinez@kth.se Wed Aug 16 18:55:35 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!kth!cmartinez From: cmartinez@kth.se (Camila Martínez) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug16.185535.5813@kth.se> Date: Wed, 16 Aug 1995 18:55:35 GMT References: <1995Aug16.150435.7362@delphi.com> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Aug16.150435.7362@delphi.com>, lsouza@delphi.com (Lucia Souza) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Camila Martínez Tape trading list upon request. SASE required for international mail. From gmacdonald@uni-hamburg.de Thu Aug 17 06:52:35 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!uni-hamburg!gmacdonald From: gmacdonald@uni-hamburg.de (Graham MacDonald) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug17.065235.9760@uni-hamburg.de> Date: Thu, 17 Aug 1995 06:52:35 GMT References: <1995Aug16.150435.7362@delphi.com> <1995Aug16.185535.5813@kth.se> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Aug16.185535.5813@kth.se>, cmartinez@kth.se (Camila Martínez) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Graham MacDonald *PLONK* filter active for trolls. Atari Falcon 030 - NetBSD 1.0 From mlee@u-tokyo.ac.jp Sat Aug 19 02:10:35 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!u-tokyo!mlee From: mlee@u-tokyo.ac.jp (Mikhail Lee) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug19.021035.9052@u-tokyo.ac.jp> Date: Sat, 19 Aug 1995 02:10:35 GMT References: <1995Aug16.150435.7362@delphi.com> <1995Aug16.185535.5813@kth.se> <1995Aug17.065235.9760@uni-hamburg.de> Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Aug17.065235.9760@uni-hamburg.de>, gmacdonald@uni-hamburg.de (Graham MacDonald) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Mikhail Lee "Hold for relay." PC-9821Ap2 (NEC) / System 7.5.1