From tgarcia@unam.mx Wed Feb 01 21:12:38 1995 Path: ashpoly!cascade!bigsur!unam!tgarcia From: tgarcia@unam.mx (Tomas García) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb01.211238.4379@unam.mx> Date: Wed, 01 Feb 1995 21:12:38 GMT Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- === Tomas García === Dept of Electrical Engineering, Universidad Nacional Autónoma de México (DGSCA) "Tape doesn't lie at 02:14. Ears do." From frodriguez@cam.ac.uk Fri Feb 03 02:53:38 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!cam!frodriguez From: frodriguez@cam.ac.uk (Fiona Rodríguez) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb03.025338.8705@cam.ac.uk> Date: Fri, 03 Feb 1995 02:53:38 GMT References: <1995Feb01.211238.4379@unam.mx> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 11 In article <1995Feb01.211238.4379@unam.mx>, tgarcia@unam.mx (Tomas García) writes: > Hardware disassembly report for Motorola hardware hackers. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Fiona Rodríguez Opinions expressed are solely my own and not those of University of Cambridge Computer Laboratory. ------------------------------------------------------------ From jlaurent@cern.ch Sun Feb 05 04:58:38 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!cern!jlaurent From: jlaurent@cern.ch (Julien Laurent) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb05.045838.7980@cern.ch> Date: Sun, 05 Feb 1995 04:58:38 GMT References: <1995Feb01.211238.4379@unam.mx> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Feb01.211238.4379@unam.mx>, tgarcia@unam.mx (Tomas García) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Julien Laurent | jlaurent@cern.ch PGP Key fingerprint: 17B6 5268 4A90 2A06 "Keep the channels open." From bstewart@mit.edu Sun Feb 05 20:40:38 1995 Path: ashpoly!cascade!transat!ukc!fennimore!mit!bstewart From: bstewart@mit.edu (Brian Stewart) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb05.204038.2005@mit.edu> Date: Sun, 05 Feb 1995 20:40:38 GMT References: <1995Feb01.211238.4379@unam.mx> <1995Feb05.045838.7980@cern.ch> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 8 In article <1995Feb05.045838.7980@cern.ch>, jlaurent@cern.ch (Julien Laurent) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Brian Stewart Tape trading list upon request. SASE required for international mail. From mito@tum.de Tue Feb 07 21:24:38 1995 Path: ashpoly!cascade!brgate!saturno!tum!mito From: mito@tum.de (Mathieu Ito) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb07.212438.2759@tum.de> Date: Tue, 07 Feb 1995 21:24:38 GMT References: <1995Feb01.211238.4379@unam.mx> Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: WinVN 0.99.5 Lines: 12 In article <1995Feb01.211238.4379@unam.mx>, tgarcia@unam.mx (Tomas García) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- === Mathieu Ito === Dept of Electrical Engineering, Technische Universität München "Hardware is temporary. The signal survives."