From bnilsson@mit.edu Sun Dec 03 09:03:02 1995 Path: ashpoly!cascade!bigsur!mit!bnilsson From: bnilsson@mit.edu (Bill Nilsson) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec03.090302.8947@mit.edu> Date: Sun, 03 Dec 1995 09:03:02 GMT Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Hardware disassembly report for Motorola hardware hackers. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- === Bill Nilsson === Dept of Electrical Engineering, Massachusetts Institute of Technology "The carrier frequency does not drift by accident." From aokonkwo@cam.ac.uk Sun Dec 03 15:57:02 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!cam!aokonkwo From: aokonkwo@cam.ac.uk (Amy Okonkwo) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec03.155702.9000@cam.ac.uk> Date: Sun, 03 Dec 1995 15:57:02 GMT References: <1995Dec03.090302.8947@mit.edu> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Dec03.090302.8947@mit.edu>, bnilsson@mit.edu (Bill Nilsson) writes: > Hardware disassembly report for Motorola hardware hackers. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Amy Okonkwo === Dept of Electrical Engineering, University of Cambridge Computer Laboratory "There are 14 nodes and only 10 countries. Count again." From smoreno@cern.ch Mon Dec 04 14:57:02 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!cern!smoreno From: smoreno@cern.ch (Steve Moreno) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec04.145702.6514@cern.ch> Date: Mon, 04 Dec 1995 14:57:02 GMT References: <1995Dec03.090302.8947@mit.edu> <1995Dec03.155702.9000@cam.ac.uk> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Dec03.155702.9000@cam.ac.uk>, aokonkwo@cam.ac.uk (Amy Okonkwo) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Steve Moreno SupraFAXModem 28.8 @ ISDN 64k bps "We don't sign stars. We build them." From rperez@mindspring.com Wed Dec 06 14:26:02 1995 Path: ashpoly!cascade!brgate!saturno!mindspring!rperez From: rperez@mindspring.com (Rodrigo Pérez) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec06.142602.2294@mindspring.com> Date: Wed, 06 Dec 1995 14:26:02 GMT References: <1995Dec03.090302.8947@mit.edu> <1995Dec03.155702.9000@cam.ac.uk> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: NewsWatcher 2.0b24 Lines: 11 In article <1995Dec03.155702.9000@cam.ac.uk>, aokonkwo@cam.ac.uk (Amy Okonkwo) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Rodrigo Pérez SupraFAXModem 28.8 @ ISDN 64k bps "We don't sign stars. We build them." From msato@kth.se Fri Dec 08 15:05:02 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!kth!msato From: msato@kth.se (Mathieu Sato) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec08.150502.1512@kth.se> Date: Fri, 08 Dec 1995 15:05:02 GMT References: <1995Dec03.090302.8947@mit.edu> <1995Dec03.155702.9000@cam.ac.uk> <1995Dec06.142602.2294@mindspring.com> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: Netscape 1.1N Lines: 12 In article <1995Dec06.142602.2294@mindspring.com>, rperez@mindspring.com (Rodrigo Pérez) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. > Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Mathieu Sato *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0