From jvasiliev@delphi.com Tue Oct 22 02:03:27 1996 Path: ashpoly!cascade!brgate!saturno!delphi!jvasiliev From: jvasiliev@delphi.com (Jen Vasiliev) Newsgroups: comp.sys.m68k Subject: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct22.020327.8300@delphi.com> Date: Tue, 22 Oct 1996 02:03:27 GMT Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: Netscape 1.1N Lines: 10 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Jen Vasiliev Tape trading list upon request. SASE required for international mail. From mreyes@unam.mx Tue Oct 22 14:38:27 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!unam!mreyes From: mreyes@unam.mx (Marisol Reyes) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct22.143827.6509@unam.mx> Date: Tue, 22 Oct 1996 14:38:27 GMT References: <1996Oct22.020327.8300@delphi.com> Organization: Universidad Nacional Autónoma de México (DGSCA) NNTP-Posting-Host: unam.mx X-Newsreader: TIN [version 1.2 PL2] Lines: 8 In article <1996Oct22.020327.8300@delphi.com>, jvasiliev@delphi.com (Jen Vasiliev) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Marisol Reyes -- Universidad Nacional Autónoma de México (DGSCA) "5 sigma is a discovery. 7 is a question." From lduarte@mit.edu Tue Oct 22 21:08:27 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!mit!lduarte From: lduarte@mit.edu (Lars Duarte) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct22.210827.1564@mit.edu> Date: Tue, 22 Oct 1996 21:08:27 GMT References: <1996Oct22.020327.8300@delphi.com> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1996Oct22.020327.8300@delphi.com>, jvasiliev@delphi.com (Jen Vasiliev) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Lars Duarte *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0 From nlee@utexas.edu Wed Oct 23 00:14:27 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!utexas!nlee From: nlee@utexas.edu (Nadia Lee) Newsgroups: comp.sys.m68k Subject: Re: [SPECULATION] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Oct23.001427.4914@utexas.edu> Date: Wed, 23 Oct 1996 00:14:27 GMT References: <1996Oct22.020327.8300@delphi.com> <1996Oct22.210827.1564@mit.edu> Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: Netscape 1.1N Lines: 8 In article <1996Oct22.210827.1564@mit.edu>, lduarte@mit.edu (Lars Duarte) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Nadia Lee -- University of Texas at Austin "In theory there is no difference between theory and practice."