From msuzuki@kth.se Sat Jan 07 05:12:16 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!kth!msuzuki From: msuzuki@kth.se (Mathieu Suzuki) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jan07.051216.2245@kth.se> Date: Sat, 07 Jan 1995 05:12:16 GMT Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Mathieu Suzuki Opinions expressed are solely my own and not those of Royal Institute of Technology, Stockholm. ------------------------------------------------------------ From dsokolov@unam.mx Sun Jan 08 10:12:16 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!unam!dsokolov From: dsokolov@unam.mx (Dmitri Sokolov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jan08.101216.4200@unam.mx> Date: Sun, 08 Jan 1995 10:12:16 GMT References: <1995Jan07.051216.2245@kth.se> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Jan07.051216.2245@kth.se>, msuzuki@kth.se (Mathieu Suzuki) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Dmitri Sokolov Zyxel U-1496E @ 28,800 bps "When every node is whole, the channel opens."