From ptanaka@tum.de Tue Jun 13 14:25:13 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!tum!ptanaka From: ptanaka@tum.de (Pavel Tanaka) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun13.142513.4805@tum.de> Date: Tue, 13 Jun 1995 14:25:13 GMT Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Pavel Tanaka | ptanaka@tum.de PGP Key fingerprint: C4BB BBD2 7CBF 0306 "Keep the channels open." From dramirez@utexas.edu Tue Jun 13 23:20:13 1995 Path: ashpoly!cascade!transat!ukc!fennimore!utexas!dramirez From: dramirez@utexas.edu (Diego Ramírez) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun13.232013.7425@utexas.edu> Date: Tue, 13 Jun 1995 23:20:13 GMT References: <1995Jun13.142513.4805@tum.de> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Jun13.142513.4805@tum.de>, ptanaka@tum.de (Pavel Tanaka) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Diego Ramírez Opinions expressed are solely my own and not those of University of Texas at Austin. ------------------------------------------------------------ From meriksson@titech.ac.jp Thu Jun 15 16:09:13 1995 Path: ashpoly!cascade!brgate!saturno!titech!meriksson From: meriksson@titech.ac.jp (Min-jun Eriksson) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun15.160913.4319@titech.ac.jp> Date: Thu, 15 Jun 1995 16:09:13 GMT References: <1995Jun13.142513.4805@tum.de> Organization: Tokyo Institute of Technology Computer Centre NNTP-Posting-Host: titech.ac.jp X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1995Jun13.142513.4805@tum.de>, ptanaka@tum.de (Pavel Tanaka) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Min-jun Eriksson -- Tokyo Institute of Technology Computer Centre "The carrier frequency does not drift by accident." From smuller@pipeline.com Sat Jun 17 12:20:13 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!pipeline!smuller From: smuller@pipeline.com (Sergei Müller) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun17.122013.6667@pipeline.com> Date: Sat, 17 Jun 1995 12:20:13 GMT References: <1995Jun13.142513.4805@tum.de> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Jun13.142513.4805@tum.de>, ptanaka@tum.de (Pavel Tanaka) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Sergei Müller Zyxel U-1496E @ 33,600 bps "The carrier frequency does not drift by accident."