From lduarte@uni-hamburg.de Thu Oct 06 23:06:26 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!uni-hamburg!lduarte From: lduarte@uni-hamburg.de (Lisa Duarte) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct06.230626.4481@uni-hamburg.de> Date: Thu, 06 Oct 1994 23:06:26 GMT Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Did Marcus take the decryption EPROM with him when he left the lab? -- Lisa Duarte | lduarte@uni-hamburg.de PGP Key fingerprint: 1CFC 8AC7 C952 B304 "Keep the channels open." From jlopez@uni-hamburg.de Sat Oct 08 07:17:26 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!uni-hamburg!jlopez From: jlopez@uni-hamburg.de (Julien López) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct08.071726.2344@uni-hamburg.de> Date: Sat, 08 Oct 1994 07:17:26 GMT References: <1994Oct06.230626.4481@uni-hamburg.de> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 8 In article <1994Oct06.230626.4481@uni-hamburg.de>, lduarte@uni-hamburg.de (Lisa Duarte) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Julien López Tape trading list upon request. SASE required for international mail. From bkowalski@netcom.com Mon Oct 10 04:09:26 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!netcom!bkowalski From: bkowalski@netcom.com (Bastien Kowalski) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct10.040926.6195@netcom.com> Date: Mon, 10 Oct 1994 04:09:26 GMT References: <1994Oct06.230626.4481@uni-hamburg.de> <1994Oct08.071726.2344@uni-hamburg.de> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Oct08.071726.2344@uni-hamburg.de>, jlopez@uni-hamburg.de (Julien López) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Bastien Kowalski *PLONK* filter active for trolls. Amiga 3000T - NetBSD 1.0 From jnakamura@uni-hamburg.de Tue Oct 11 21:46:26 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!uni-hamburg!jnakamura From: jnakamura@uni-hamburg.de (Ji-woo Nakamura) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct11.214626.4052@uni-hamburg.de> Date: Tue, 11 Oct 1994 21:46:26 GMT References: <1994Oct06.230626.4481@uni-hamburg.de> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1994Oct06.230626.4481@uni-hamburg.de>, lduarte@uni-hamburg.de (Lisa Duarte) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Ji-woo Nakamura Opinions expressed are solely my own and not those of Universität Hamburg Fachbereich Informatik. ------------------------------------------------------------