From ekowalski@ox.ac.uk Thu Jun 01 00:10:23 1995 Path: ashpoly!cascade!bigsur!ox!ekowalski From: ekowalski@ox.ac.uk (Élodie Kowalski) Newsgroups: comp.sys.m68k Subject: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun01.001023.3157@ox.ac.uk> Date: Thu, 01 Jun 1995 00:10:23 GMT Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: Netscape 1.1N Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Élodie Kowalski US Robotics Courier V.34 @ 19,200 bps "Do not worship the copy." From aduarte@cam.ac.uk Sat Jun 03 01:42:23 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!cam!aduarte From: aduarte@cam.ac.uk (Anja Duarte) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun03.014223.6342@cam.ac.uk> Date: Sat, 03 Jun 1995 01:42:23 GMT References: <1995Jun01.001023.3157@ox.ac.uk> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Jun01.001023.3157@ox.ac.uk>, ekowalski@ox.ac.uk (Élodie Kowalski) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Anja Duarte "When every node is whole, the channel opens." 486DX4/100 (FreeBSD 2.0.5) / System 7.5.1 From ssmirnov@mindspring.com Sun Jun 04 09:49:23 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!mindspring!ssmirnov From: ssmirnov@mindspring.com (Sven Smirnov) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun04.094923.6657@mindspring.com> Date: Sun, 04 Jun 1995 09:49:23 GMT References: <1995Jun01.001023.3157@ox.ac.uk> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Jun01.001023.3157@ox.ac.uk>, ekowalski@ox.ac.uk (Élodie Kowalski) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Sven Smirnov === Dept of Electrical Engineering, MindSpring Enterprises "Measuring a record you own is listening, not piracy."