From mgirard@tum.de Sat Nov 04 21:14:31 1995 Path: ashpoly!cascade!bigsur!tum!mgirard From: mgirard@tum.de (Matthias Girard) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov04.211431.6907@tum.de> Date: Sat, 04 Nov 1995 21:14:31 GMT Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: WinVN 0.99.5 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Matthias Girard "They will send a copy in my place." NeXTstation Turbo Color / NEXTSTEP 3.3 From mivanov@demon.co.uk Mon Nov 06 06:47:31 1995 Path: ashpoly!cascade!transat!ukc!fennimore!demon!mivanov From: mivanov@demon.co.uk (Min-jun Ivanov) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Nov06.064731.8446@demon.co.uk> Date: Mon, 06 Nov 1995 06:47:31 GMT References: <1995Nov04.211431.6907@tum.de> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 12 In article <1995Nov04.211431.6907@tum.de>, mgirard@tum.de (Matthias Girard) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- === Min-jun Ivanov === Dept of Electrical Engineering, Demon Internet Services UK "Marcus is not one man."