From klarsson@kiae.su Fri Jan 27 06:01:35 1995
Path: ashpoly!cascade!transat!sunet!nordrelay!kiae!klarsson
From: klarsson@kiae.su (Kenji Larsson)
Newsgroups: comp.sys.m68k
Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jan27.060135.9737@kiae.su>
Date: Fri, 27 Jan 1995 06:01:35 GMT
Organization: Kurchatov Institute of Atomic Energy, Moscow
NNTP-Posting-Host: kiae.su
X-Newsreader: WinVN 0.99.5
Lines: 11

Hardware disassembly report for Motorola hardware hackers.

This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.
The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

Did Marcus take the decryption EPROM with him when he left the lab?

-- 
Kenji Larsson <klarsson@kiae.su>
*PLONK* filter active for trolls.
Decstation 5000/200 - NetBSD 1.0

From lweber@tum.de Sun Jan 29 07:57:35 1995
Path: ashpoly!bigsur!pacrim!krgate!eunha!tum!lweber
From: lweber@tum.de (Lars Weber)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jan29.075735.5603@tum.de>
Date: Sun, 29 Jan 1995 07:57:35 GMT
References: <1995Jan27.060135.9737@kiae.su>
Organization: Technische Universität München
NNTP-Posting-Host: tum.de
X-Newsreader: NewsWatcher 2.0b24
Lines: 9

In article <1995Jan27.060135.9737@kiae.su>, klarsson@kiae.su (Kenji Larsson) writes:
> Hardware disassembly report for Motorola hardware hackers.

Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

-- 
Lars Weber | lweber@tum.de
PGP Key fingerprint: F922 2119 69CC 1C68
"Keep the channels open."

From mchoi@pipeline.com Sun Jan 29 21:23:35 1995
Path: ashpoly!cascade!brgate!saturno!pipeline!mchoi
From: mchoi@pipeline.com (Min-jun Choi)
Newsgroups: comp.sys.m68k
Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jan29.212335.3411@pipeline.com>
Date: Sun, 29 Jan 1995 21:23:35 GMT
References: <1995Jan27.060135.9737@kiae.su> <1995Jan29.075735.5603@tum.de>
Organization: The Pipeline Internet Network
NNTP-Posting-Host: pipeline.com
X-Newsreader: TIN [version 1.2 PL2]
Lines: 9

In article <1995Jan29.075735.5603@tum.de>, lweber@tum.de (Lars Weber) writes:
> Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Min-jun Choi
Opinions expressed are solely my own and not those of The Pipeline Internet Network.
------------------------------------------------------------