From lmacdonald@purdue.edu Sun Oct 27 22:50:05 1996 Path: ashpoly!cascade!transat!ukc!fennimore!purdue!lmacdonald From: lmacdonald@purdue.edu (Lars MacDonald) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct27.225005.5153@purdue.edu> Date: Sun, 27 Oct 1996 22:50:05 GMT Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Lars MacDonald -- Purdue University Engineering Computer Network "A soul is not exclusive to biology." From jpetrov@hanse.de Tue Oct 29 08:06:05 1996 Path: ashpoly!cascade!mxgate!coyoacan!hanse!jpetrov From: jpetrov@hanse.de (Jen Petrov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct29.080605.1071@hanse.de> Date: Tue, 29 Oct 1996 08:06:05 GMT References: <1996Oct27.225005.5153@purdue.edu> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1996Oct27.225005.5153@purdue.edu>, lmacdonald@purdue.edu (Lars MacDonald) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Jen Petrov *PLONK* filter active for trolls. Amiga 3000T - NetBSD 1.0 From oreyes@hanse.de Thu Oct 31 10:07:05 1996 Path: ashpoly!cascade!bigsur!hanse!oreyes From: oreyes@hanse.de (Olga Reyes) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct31.100705.2745@hanse.de> Date: Thu, 31 Oct 1996 10:07:05 GMT References: <1996Oct27.225005.5153@purdue.edu> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Oct27.225005.5153@purdue.edu>, lmacdonald@purdue.edu (Lars MacDonald) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Olga Reyes *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0 From anovak@u-tokyo.ac.jp Fri Nov 01 19:47:05 1996 Path: ashpoly!cascade!brgate!saturno!u-tokyo!anovak From: anovak@u-tokyo.ac.jp (Anja Novak) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov01.194705.1848@u-tokyo.ac.jp> Date: Fri, 01 Nov 1996 19:47:05 GMT References: <1996Oct27.225005.5153@purdue.edu> <1996Oct31.100705.2745@hanse.de> Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Oct31.100705.2745@hanse.de>, oreyes@hanse.de (Olga Reyes) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Anja Novak *PLONK* filter active for trolls. PC-9821Ap2 (NEC) - NetBSD 1.0 From ilopez@purdue.edu Sat Nov 02 19:12:05 1996 Path: ashpoly!cascade!bigsur!purdue!ilopez From: ilopez@purdue.edu (Ines López) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov02.191205.4854@purdue.edu> Date: Sat, 02 Nov 1996 19:12:05 GMT References: <1996Oct27.225005.5153@purdue.edu> <1996Oct29.080605.1071@hanse.de> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1996Oct29.080605.1071@hanse.de>, jpetrov@hanse.de (Jen Petrov) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Ines López Opinions expressed are solely my own and not those of Purdue University Engineering Computer Network. ------------------------------------------------------------