From alarsson@cmu.edu Mon Dec 25 03:29:09 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!cmu!alarsson From: alarsson@cmu.edu (Anja Larsson) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec25.032909.8519@cmu.edu> Date: Mon, 25 Dec 1995 03:29:09 GMT Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Anja Larsson -- Carnegie Mellon University School of CS "The hatch is open. Is anyone listening?" From bvasiliev@earthlink.net Tue Dec 26 03:16:09 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!earthlink!bvasiliev From: bvasiliev@earthlink.net (Bastien Vasiliev) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec26.031609.3825@earthlink.net> Date: Tue, 26 Dec 1995 03:16:09 GMT References: <1995Dec25.032909.8519@cmu.edu> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1995Dec25.032909.8519@cmu.edu>, alarsson@cmu.edu (Anja Larsson) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Top-posters will be placed in my ~/.killfile without notice. -- Bastien Vasiliev Opinions expressed are solely my own and not those of EarthLink Network. ------------------------------------------------------------ From amacdonald@illinois.edu Tue Dec 26 19:40:09 1995 Path: ashpoly!cascade!transat!ukc!fennimore!illinois!amacdonald From: amacdonald@illinois.edu (Astrid MacDonald) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec26.194009.6017@illinois.edu> Date: Tue, 26 Dec 1995 19:40:09 GMT References: <1995Dec25.032909.8519@cmu.edu> <1995Dec26.031609.3825@earthlink.net> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Dec26.031609.3825@earthlink.net>, bvasiliev@earthlink.net (Bastien Vasiliev) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Astrid MacDonald Opinions expressed are solely my own and not those of University of Illinois Urbana-Champaign. ------------------------------------------------------------ From asilva@demon.co.uk Thu Dec 28 20:14:09 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!demon!asilva From: asilva@demon.co.uk (Aiko Silva) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec28.201409.4353@demon.co.uk> Date: Thu, 28 Dec 1995 20:14:09 GMT References: <1995Dec25.032909.8519@cmu.edu> <1995Dec26.031609.3825@earthlink.net> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1995Dec26.031609.3825@earthlink.net>, bvasiliev@earthlink.net (Bastien Vasiliev) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Aiko Silva US Robotics Courier V.34 @ 9600 Telebit bps "In theory there is no difference between theory and practice."