From elee@cam.ac.uk Tue Feb 06 13:50:54 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!cam!elee From: elee@cam.ac.uk (Elaine Lee) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb06.135054.8717@cam.ac.uk> Date: Tue, 06 Feb 1996 13:50:54 GMT Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Elaine Lee | elee@cam.ac.uk PGP Key fingerprint: AF5B 0828 F93F D9AC "Keep the channels open." From gkang@ox.ac.uk Thu Feb 08 06:31:54 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!ox!gkang From: gkang@ox.ac.uk (Göran Kang) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Feb08.063154.3549@ox.ac.uk> Date: Thu, 08 Feb 1996 06:31:54 GMT References: <1996Feb06.135054.8717@cam.ac.uk> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1996Feb06.135054.8717@cam.ac.uk>, elee@cam.ac.uk (Elaine Lee) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Göran Kang "We don't sign stars. We build them." Acorn RiscPC 600 / FreeBSD 2.1