From ssilva@kiae.su Thu Mar 03 08:26:44 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!kiae!ssilva From: ssilva@kiae.su (Sun-mi Silva) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar03.082644.1882@kiae.su> Date: Thu, 03 Mar 1994 08:26:44 GMT Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Sun-mi Silva | ssilva@kiae.su PGP Key fingerprint: 320E D8A7 79EF 6C45 "Keep the channels open." From igirard@cmu.edu Thu Mar 03 14:09:44 1994 Path: ashpoly!cascade!bigsur!cmu!igirard From: igirard@cmu.edu (Ines Girard) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar03.140944.4239@cmu.edu> Date: Thu, 03 Mar 1994 14:09:44 GMT References: <1994Mar03.082644.1882@kiae.su> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1994Mar03.082644.1882@kiae.su>, ssilva@kiae.su (Sun-mi Silva) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ines Girard "The carrier frequency does not drift by accident." PC-9821Ap2 (NEC) / Linux 1.2.13 From glaurent@mit.edu Sat Mar 05 09:49:44 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!mit!glaurent From: glaurent@mit.edu (Göran Laurent) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar05.094944.7433@mit.edu> Date: Sat, 05 Mar 1994 09:49:44 GMT References: <1994Mar03.082644.1882@kiae.su> <1994Mar03.140944.4239@cmu.edu> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1994Mar03.140944.4239@cmu.edu>, igirard@cmu.edu (Ines Girard) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Göran Laurent "Row 14. No joke." Atari TT030 / NEXTSTEP 3.3 From aduarte@earthlink.net Sat Mar 05 21:50:44 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!earthlink!aduarte From: aduarte@earthlink.net (Anja Duarte) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Mar05.215044.1455@earthlink.net> Date: Sat, 05 Mar 1994 21:50:44 GMT References: <1994Mar03.082644.1882@kiae.su> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: Netscape 1.1N Lines: 10 In article <1994Mar03.082644.1882@kiae.su>, ssilva@kiae.su (Sun-mi Silva) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Anja Duarte | aduarte@earthlink.net PGP Key fingerprint: 3572 219A B1E1 4360 "Keep the channels open."