From imacdonald@demon.co.uk Mon Aug 14 12:13:05 1995
Path: ashpoly!cascade!transat!eunet-de!hansebox!demon!imacdonald
From: imacdonald@demon.co.uk (Ines MacDonald)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Aug14.121305.7339@demon.co.uk>
Date: Mon, 14 Aug 1995 12:13:05 GMT
Organization: Demon Internet Services UK
NNTP-Posting-Host: demon.co.uk
X-Newsreader: NewsWatcher 2.0b24
Lines: 10

Hardware disassembly report for Motorola hardware hackers.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Ines MacDonald
Tape trading list upon request. SASE required for international mail.

From beriksson@u-tokyo.ac.jp Tue Aug 15 05:56:05 1995
Path: ashpoly!cascade!brgate!saturno!u-tokyo!beriksson
From: beriksson@u-tokyo.ac.jp (Bastien Eriksson)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Aug15.055605.6926@u-tokyo.ac.jp>
Date: Tue, 15 Aug 1995 05:56:05 GMT
References: <1995Aug14.121305.7339@demon.co.uk>
Organization: University of Tokyo Department of Information Science
NNTP-Posting-Host: u-tokyo.ac.jp
X-Newsreader: Netscape 1.1N
Lines: 8

In article <1995Aug14.121305.7339@demon.co.uk>, imacdonald@demon.co.uk (Ines MacDonald) writes:
> Hardware disassembly report for Motorola hardware hackers.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Bastien Eriksson
Tape trading list upon request. SASE required for international mail.