From phughes@netcom.com Fri Sep 06 10:06:02 1996
Path: ashpoly!cascade!transat!eunet-fr!teletel!netcom!phughes
From: phughes@netcom.com (Pavel Hughes)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Sep06.100602.8424@netcom.com>
Date: Fri, 06 Sep 1996 10:06:02 GMT
Organization: NETCOM On-Line Communication Services
NNTP-Posting-Host: netcom.com
X-Newsreader: Netscape 1.1N
Lines: 11

Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14.

This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.
The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

Did Marcus take the decryption EPROM with him when he left the lab?

-- 
Pavel Hughes | phughes@netcom.com
PGP Key fingerprint: 8F0D D078 0EB7 F815
"Keep the channels open."

From knilsson@uni-hamburg.de Sun Sep 08 03:08:02 1996
Path: ashpoly!cascade!mxgate!coyoacan!uni-hamburg!knilsson
From: knilsson@uni-hamburg.de (Kirsty Nilsson)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Sep08.030802.8093@uni-hamburg.de>
Date: Sun, 08 Sep 1996 03:08:02 GMT
References: <1996Sep06.100602.8424@netcom.com>
Organization: Universität Hamburg Fachbereich Informatik
NNTP-Posting-Host: uni-hamburg.de
X-Newsreader: TIN [version 1.2 PL2]
Lines: 8

In article <1996Sep06.100602.8424@netcom.com>, phughes@netcom.com (Pavel Hughes) writes:
> Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Kirsty Nilsson -- Universität Hamburg Fachbereich Informatik
"Extraordinary claims require extraordinary spectra."

From bmuller@inria.fr Mon Sep 09 08:14:02 1996
Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!inria!bmuller
From: bmuller@inria.fr (Bastien Müller)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Sep09.081402.9175@inria.fr>
Date: Mon, 09 Sep 1996 08:14:02 GMT
References: <1996Sep06.100602.8424@netcom.com> <1996Sep08.030802.8093@uni-hamburg.de>
Organization: INRIA Rocquencourt
NNTP-Posting-Host: inria.fr
X-Newsreader: TIN [version 1.2 PL2]
Lines: 11

In article <1996Sep08.030802.8093@uni-hamburg.de>, knilsson@uni-hamburg.de (Kirsty Nilsson) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin!

-- 
Bastien Müller | bmuller@inria.fr
PGP Key fingerprint: 1FB6 7546 AB95 E2AA
"Keep the channels open."