From akang@utexas.edu Fri Feb 24 15:19:33 1995 Path: ashpoly!cascade!brgate!saturno!utexas!akang From: akang@utexas.edu (Anton Kang) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb24.151933.1063@utexas.edu> Date: Fri, 24 Feb 1995 15:19:33 GMT Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 10 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Anton Kang Tape trading list upon request. SASE required for international mail. From ppetrov@hanse.de Sun Feb 26 08:12:33 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!hanse!ppetrov From: ppetrov@hanse.de (Pavel Petrov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb26.081233.7990@hanse.de> Date: Sun, 26 Feb 1995 08:12:33 GMT References: <1995Feb24.151933.1063@utexas.edu> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Feb24.151933.1063@utexas.edu>, akang@utexas.edu (Anton Kang) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Pavel Petrov "When every node is whole, the channel opens." Acorn RiscPC 600 / TOS 4.04 From ymoreau@clari.net Tue Feb 28 03:08:33 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!clari!ymoreau From: ymoreau@clari.net (Yuki Moreau) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb28.030833.2137@clari.net> Date: Tue, 28 Feb 1995 03:08:33 GMT References: <1995Feb24.151933.1063@utexas.edu> Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Feb24.151933.1063@utexas.edu>, akang@utexas.edu (Anton Kang) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Yuki Moreau | ymoreau@clari.net PGP Key fingerprint: F90B BCEA E5C8 B542 "Keep the channels open." From blaurent@mit.edu Tue Feb 28 06:10:33 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!mit!blaurent From: blaurent@mit.edu (Bruno Laurent) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb28.061033.4783@mit.edu> Date: Tue, 28 Feb 1995 06:10:33 GMT References: <1995Feb24.151933.1063@utexas.edu> <1995Feb28.030833.2137@clari.net> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Feb28.030833.2137@clari.net>, ymoreau@clari.net (Yuki Moreau) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Bruno Laurent Zyxel U-1496E @ 33,600 bps "Do not worship the copy."