From jokonkwo@u-tokyo.ac.jp Tue Apr 18 16:01:07 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!u-tokyo!jokonkwo From: jokonkwo@u-tokyo.ac.jp (Julien Okonkwo) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr18.160107.2164@u-tokyo.ac.jp> Date: Tue, 18 Apr 1995 16:01:07 GMT Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Julien Okonkwo Tape trading list upon request. SASE required for international mail. From jkim@ox.ac.uk Wed Apr 19 21:35:07 1995 Path: ashpoly!cascade!brgate!saturno!ox!jkim From: jkim@ox.ac.uk (Ji-woo Kim) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr19.213507.4628@ox.ac.uk> Date: Wed, 19 Apr 1995 21:35:07 GMT References: <1995Apr18.160107.2164@u-tokyo.ac.jp> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Apr18.160107.2164@u-tokyo.ac.jp>, jokonkwo@u-tokyo.ac.jp (Julien Okonkwo) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ji-woo Kim -- Oxford University Computing Laboratory "Extraordinary claims require extraordinary spectra." From hokonkwo@cmu.edu Fri Apr 21 15:15:07 1995 Path: ashpoly!cascade!brgate!saturno!cmu!hokonkwo From: hokonkwo@cmu.edu (Hana Okonkwo) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr21.151507.3407@cmu.edu> Date: Fri, 21 Apr 1995 15:15:07 GMT References: <1995Apr18.160107.2164@u-tokyo.ac.jp> <1995Apr19.213507.4628@ox.ac.uk> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: WinVN 0.99.5 Lines: 8 In article <1995Apr19.213507.4628@ox.ac.uk>, jkim@ox.ac.uk (Ji-woo Kim) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Hana Okonkwo -- Carnegie Mellon University School of CS "A soul is not exclusive to biology." From sgirard@cern.ch Sun Apr 23 04:23:07 1995 Path: ashpoly!cascade!bigsur!cern!sgirard From: sgirard@cern.ch (Sergei Girard) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr23.042307.8580@cern.ch> Date: Sun, 23 Apr 1995 04:23:07 GMT References: <1995Apr18.160107.2164@u-tokyo.ac.jp> <1995Apr19.213507.4628@ox.ac.uk> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: NewsWatcher 2.0b24 Lines: 11 In article <1995Apr19.213507.4628@ox.ac.uk>, jkim@ox.ac.uk (Ji-woo Kim) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Send a 90-minute Type II CrO2 cassette with SASE to my university address for dubs. -- Sergei Girard "Tape doesn't lie at 02:14. Ears do." Atari TT030 / System 7.5.1 From bfournier@hanse.de Tue Apr 25 02:32:07 1995 Path: ashpoly!cascade!brgate!saturno!hanse!bfournier From: bfournier@hanse.de (Brian Fournier) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Apr25.023207.2784@hanse.de> Date: Tue, 25 Apr 1995 02:32:07 GMT References: <1995Apr18.160107.2164@u-tokyo.ac.jp> <1995Apr19.213507.4628@ox.ac.uk> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Apr19.213507.4628@ox.ac.uk>, jkim@ox.ac.uk (Ji-woo Kim) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Brian Fournier === Dept of Electrical Engineering, Hanse-Netzwerk Hamburg "Tape doesn't lie at 02:14. Ears do."