From lgarcia@inria.fr Sun Jun 04 01:07:54 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!inria!lgarcia From: lgarcia@inria.fr (Lisa García) Newsgroups: comp.sys.m68k Subject: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun04.010754.7092@inria.fr> Date: Sun, 04 Jun 1995 01:07:54 GMT Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- === Lisa García === Dept of Electrical Engineering, INRIA Rocquencourt "Hold for relay." From msanchez@kiae.su Sun Jun 04 02:07:54 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!kiae!msanchez From: msanchez@kiae.su (Mikhail Sánchez) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun04.020754.8071@kiae.su> Date: Sun, 04 Jun 1995 02:07:54 GMT References: <1995Jun04.010754.7092@inria.fr> Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1995Jun04.010754.7092@inria.fr>, lgarcia@inria.fr (Lisa García) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Mikhail Sánchez | msanchez@kiae.su PGP Key fingerprint: AA31 D7B7 7D98 8CDC "Keep the channels open." From ysouza@kiae.su Mon Jun 05 03:23:54 1995 Path: ashpoly!cascade!brgate!saturno!kiae!ysouza From: ysouza@kiae.su (Yuki Souza) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun05.032354.4801@kiae.su> Date: Mon, 05 Jun 1995 03:23:54 GMT References: <1995Jun04.010754.7092@inria.fr> Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: Netscape 1.1N Lines: 10 In article <1995Jun04.010754.7092@inria.fr>, lgarcia@inria.fr (Lisa García) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Yuki Souza *PLONK* filter active for trolls. Acorn RiscPC 600 - NetBSD 1.0 From bhernandez@pacbell.net Tue Jun 06 20:39:54 1995 Path: ashpoly!cascade!transat!ukc!fennimore!pacbell!bhernandez From: bhernandez@pacbell.net (Bruno Hernández) Newsgroups: comp.sys.m68k Subject: Re: Question: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun06.203954.9290@pacbell.net> Date: Tue, 06 Jun 1995 20:39:54 GMT References: <1995Jun04.010754.7092@inria.fr> <1995Jun04.020754.8071@kiae.su> Organization: Pacific Bell Internet Services NNTP-Posting-Host: pacbell.net X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Jun04.020754.8071@kiae.su>, msanchez@kiae.su (Mikhail Sánchez) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. > Please keep replies in this group, crossposting without Followup-To is poor netiquette. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- === Bruno Hernández === Dept of Electrical Engineering, Pacific Bell Internet Services "Do not worship the copy."