From mmartinez@illinois.edu Fri Jun 14 06:49:54 1996 Path: ashpoly!cascade!bigsur!illinois!mmartinez From: mmartinez@illinois.edu (Mateo Martínez) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun14.064954.3880@illinois.edu> Date: Fri, 14 Jun 1996 06:49:54 GMT Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- === Mateo Martínez === Dept of Electrical Engineering, University of Illinois Urbana-Champaign "A soul is not exclusive to biology." From emacdonald@unam.mx Sat Jun 15 17:18:54 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!unam!emacdonald From: emacdonald@unam.mx (Emi MacDonald) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun15.171854.2265@unam.mx> Date: Sat, 15 Jun 1996 17:18:54 GMT References: <1996Jun14.064954.3880@illinois.edu> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Jun14.064954.3880@illinois.edu>, mmartinez@illinois.edu (Mateo Martínez) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Emi MacDonald | emacdonald@unam.mx PGP Key fingerprint: 62C2 A9DD E970 79D2 "Keep the channels open." From pnilsson@tum.de Sun Jun 16 18:32:54 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!tum!pnilsson From: pnilsson@tum.de (Pavel Nilsson) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Jun16.183254.1420@tum.de> Date: Sun, 16 Jun 1996 18:32:54 GMT References: <1996Jun14.064954.3880@illinois.edu> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1996Jun14.064954.3880@illinois.edu>, mmartinez@illinois.edu (Mateo Martínez) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Pavel Nilsson "Measuring a record you own is listening, not piracy." PC-9821Ap2 (NEC) / FreeBSD 2.1