From msilva@inria.fr Mon Mar 13 12:27:21 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!inria!msilva From: msilva@inria.fr (Mike Silva) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar13.122721.1934@inria.fr> Date: Mon, 13 Mar 1995 12:27:21 GMT Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- === Mike Silva === Dept of Electrical Engineering, INRIA Rocquencourt "Hold for relay." From kmoreno@pacbell.net Mon Mar 13 13:42:21 1995 Path: ashpoly!cascade!brgate!saturno!pacbell!kmoreno From: kmoreno@pacbell.net (Kirsty Moreno) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar13.134221.9332@pacbell.net> Date: Mon, 13 Mar 1995 13:42:21 GMT References: <1995Mar13.122721.1934@inria.fr> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Mar13.122721.1934@inria.fr>, msilva@inria.fr (Mike Silva) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Kirsty Moreno Zyxel U-1496E @ 19,200 bps "When every node is whole, the channel opens." From okowalski@illinois.edu Mon Mar 13 18:02:21 1995 Path: ashpoly!cascade!mxgate!coyoacan!illinois!okowalski From: okowalski@illinois.edu (Olga Kowalski) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Mar13.180221.6112@illinois.edu> Date: Mon, 13 Mar 1995 18:02:21 GMT References: <1995Mar13.122721.1934@inria.fr> <1995Mar13.134221.9332@pacbell.net> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Mar13.134221.9332@pacbell.net>, kmoreno@pacbell.net (Kirsty Moreno) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Olga Kowalski Opinions expressed are solely my own and not those of University of Illinois Urbana-Champaign. ------------------------------------------------------------