From llindqvist@demon.co.uk Sun Feb 13 07:13:26 1994 Path: ashpoly!cascade!brgate!saturno!demon!llindqvist From: llindqvist@demon.co.uk (Lisa Lindqvist) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb13.071326.5018@demon.co.uk> Date: Sun, 13 Feb 1994 07:13:26 GMT Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Lisa Lindqvist Opinions expressed are solely my own and not those of Demon Internet Services UK. ------------------------------------------------------------ From btanaka@stanford.edu Sun Feb 13 22:38:26 1994 Path: ashpoly!cascade!transat!ukc!fennimore!stanford!btanaka From: btanaka@stanford.edu (Bastien Tanaka) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb13.223826.7375@stanford.edu> Date: Sun, 13 Feb 1994 22:38:26 GMT References: <1994Feb13.071326.5018@demon.co.uk> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1994Feb13.071326.5018@demon.co.uk>, llindqvist@demon.co.uk (Lisa Lindqvist) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Bastien Tanaka Opinions expressed are solely my own and not those of Stanford University Computer Systems Lab. ------------------------------------------------------------ From jlaurent@inria.fr Wed Feb 16 01:41:26 1994 Path: ashpoly!cascade!transat!ukc!fennimore!inria!jlaurent From: jlaurent@inria.fr (Jen Laurent) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb16.014126.7384@inria.fr> Date: Wed, 16 Feb 1994 01:41:26 GMT References: <1994Feb13.071326.5018@demon.co.uk> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: Netscape 1.1N Lines: 12 In article <1994Feb13.071326.5018@demon.co.uk>, llindqvist@demon.co.uk (Lisa Lindqvist) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Jen Laurent Opinions expressed are solely my own and not those of INRIA Rocquencourt. ------------------------------------------------------------ From lcampbell@pacbell.net Thu Feb 17 08:51:26 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!pacbell!lcampbell From: lcampbell@pacbell.net (Lisa Campbell) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Feb17.085126.8208@pacbell.net> Date: Thu, 17 Feb 1994 08:51:26 GMT References: <1994Feb13.071326.5018@demon.co.uk> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1994Feb13.071326.5018@demon.co.uk>, llindqvist@demon.co.uk (Lisa Lindqvist) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Lisa Campbell | lcampbell@pacbell.net PGP Key fingerprint: 17B5 1E46 0E9F 47A5 "Keep the channels open."