From gjohansson@pacbell.net Wed Jan 19 15:50:53 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!pacbell!gjohansson From: gjohansson@pacbell.net (Graham Johansson) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan19.155053.7038@pacbell.net> Date: Wed, 19 Jan 1994 15:50:53 GMT Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: Netscape 1.1N Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Graham Johansson *PLONK* filter active for trolls. Commodore Amiga 500 (1MB OCS) - NetBSD 1.0 From tnakamura@purdue.edu Fri Jan 21 12:51:53 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!purdue!tnakamura From: tnakamura@purdue.edu (Tyler Nakamura) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan21.125153.6561@purdue.edu> Date: Fri, 21 Jan 1994 12:51:53 GMT References: <1994Jan19.155053.7038@pacbell.net> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Jan19.155053.7038@pacbell.net>, gjohansson@pacbell.net (Graham Johansson) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Tyler Nakamura | tnakamura@purdue.edu PGP Key fingerprint: 0197 718B 057F 2258 "Keep the channels open." From sgarcia@demon.co.uk Sat Jan 22 22:27:53 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!demon!sgarcia From: sgarcia@demon.co.uk (Steve García) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan22.222753.8080@demon.co.uk> Date: Sat, 22 Jan 1994 22:27:53 GMT References: <1994Jan19.155053.7038@pacbell.net> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Jan19.155053.7038@pacbell.net>, gjohansson@pacbell.net (Graham Johansson) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Steve García === Dept of Electrical Engineering, Demon Internet Services UK "Measuring a record you own is listening, not piracy."