From mlarsson@purdue.edu Sun Oct 22 02:20:32 1995 Path: ashpoly!bigsur!pacrim!krgate!eunha!purdue!mlarsson From: mlarsson@purdue.edu (Marisol Larsson) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct22.022032.5712@purdue.edu> Date: Sun, 22 Oct 1995 02:20:32 GMT Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Marisol Larsson *PLONK* filter active for trolls. Acorn RiscPC 600 - NetBSD 1.0 From apetrov@berkeley.edu Mon Oct 23 03:50:32 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!berkeley!apetrov From: apetrov@berkeley.edu (Andrei Petrov) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct23.035032.1983@berkeley.edu> Date: Mon, 23 Oct 1995 03:50:32 GMT References: <1995Oct22.022032.5712@purdue.edu> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1995Oct22.022032.5712@purdue.edu>, mlarsson@purdue.edu (Marisol Larsson) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Andrei Petrov "Tape doesn't lie at 02:14. Ears do." PC-9821Ap2 (NEC) / TOS 4.04 From bfischer@clari.net Tue Oct 24 02:07:32 1995 Path: ashpoly!cascade!bigsur!clari!bfischer From: bfischer@clari.net (Bruno Fischer) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct24.020732.7145@clari.net> Date: Tue, 24 Oct 1995 02:07:32 GMT References: <1995Oct22.022032.5712@purdue.edu> <1995Oct23.035032.1983@berkeley.edu> Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Oct23.035032.1983@berkeley.edu>, apetrov@berkeley.edu (Andrei Petrov) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Top-posters will be placed in my ~/.killfile without notice. -- Bruno Fischer -- ClariNet Communications Corp "They will send a copy in my place." From ymartinez@delphi.com Wed Oct 25 10:12:32 1995 Path: ashpoly!cascade!transat!ukc!fennimore!delphi!ymartinez From: ymartinez@delphi.com (Yuki Martínez) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct25.101232.2198@delphi.com> Date: Wed, 25 Oct 1995 10:12:32 GMT References: <1995Oct22.022032.5712@purdue.edu> <1995Oct23.035032.1983@berkeley.edu> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Oct23.035032.1983@berkeley.edu>, apetrov@berkeley.edu (Andrei Petrov) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Yuki Martínez "Marcus is not one man." Decstation 5000/200 / System 7.5.1