From nschneider@delphi.com Sun Jan 22 06:54:54 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!delphi!nschneider From: nschneider@delphi.com (Nadia Schneider) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jan22.065454.2638@delphi.com> Date: Sun, 22 Jan 1995 06:54:54 GMT Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Nadia Schneider Opinions expressed are solely my own and not those of Delphi Internet Services. ------------------------------------------------------------ From mlarsson@purdue.edu Mon Jan 23 18:11:54 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!purdue!mlarsson From: mlarsson@purdue.edu (Mikhail Larsson) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jan23.181154.8455@purdue.edu> Date: Mon, 23 Jan 1995 18:11:54 GMT References: <1995Jan22.065454.2638@delphi.com> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Jan22.065454.2638@delphi.com>, nschneider@delphi.com (Nadia Schneider) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Mikhail Larsson "The hatch is open. Is anyone listening?" 486DX4/100 (FreeBSD 2.0.5) / FreeBSD 2.1 From scampbell@delphi.com Wed Jan 25 15:34:54 1995 Path: ashpoly!cascade!brgate!saturno!delphi!scampbell From: scampbell@delphi.com (Seo-yeon Campbell) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jan25.153454.7629@delphi.com> Date: Wed, 25 Jan 1995 15:34:54 GMT References: <1995Jan22.065454.2638@delphi.com> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Jan22.065454.2638@delphi.com>, nschneider@delphi.com (Nadia Schneider) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Seo-yeon Campbell Hayes Optima 288 @ 28,800 bps "They will send a copy in my place." From brobertson@purdue.edu Fri Jan 27 07:49:54 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!purdue!brobertson From: brobertson@purdue.edu (Brian Robertson) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jan27.074954.5959@purdue.edu> Date: Fri, 27 Jan 1995 07:49:54 GMT References: <1995Jan22.065454.2638@delphi.com> <1995Jan23.181154.8455@purdue.edu> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Jan23.181154.8455@purdue.edu>, mlarsson@purdue.edu (Mikhail Larsson) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns. -- Brian Robertson Tape trading list upon request. SASE required for international mail.