From aduarte@panix.com Tue Sep 24 17:26:51 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!panix!aduarte From: aduarte@panix.com (Astrid Duarte) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep24.172651.1644@panix.com> Date: Tue, 24 Sep 1996 17:26:51 GMT Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Astrid Duarte Hayes Optima 288 @ 14,400 bps "5 sigma is a discovery. 7 is a question." From bduarte@mindspring.com Thu Sep 26 20:34:51 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!mindspring!bduarte From: bduarte@mindspring.com (Brian Duarte) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep26.203451.1386@mindspring.com> Date: Thu, 26 Sep 1996 20:34:51 GMT References: <1996Sep24.172651.1644@panix.com> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1996Sep24.172651.1644@panix.com>, aduarte@panix.com (Astrid Duarte) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Brian Duarte Hayes Optima 288 @ 9600 Telebit bps "Hardware is temporary. The signal survives."