From ekang@kth.se Mon Feb 26 04:39:44 1996 Path: ashpoly!cascade!bigsur!kth!ekang From: ekang@kth.se (Elaine Kang) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb26.043944.4801@kth.se> Date: Mon, 26 Feb 1996 04:39:44 GMT Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: Netscape 1.1N Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Elaine Kang Opinions expressed are solely my own and not those of Royal Institute of Technology, Stockholm. ------------------------------------------------------------ From dpopov@ox.ac.uk Mon Feb 26 14:08:44 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!ox!dpopov From: dpopov@ox.ac.uk (Dmitri Popov) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb26.140844.8873@ox.ac.uk> Date: Mon, 26 Feb 1996 14:08:44 GMT References: <1996Feb26.043944.4801@kth.se> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1996Feb26.043944.4801@kth.se>, ekang@kth.se (Elaine Kang) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Dmitri Popov SupraFAXModem 28.8 @ 28,800 bps "Tape doesn't lie at 02:14. Ears do."