From mreyes@pipeline.com Sat Feb 11 12:11:22 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!pipeline!mreyes From: mreyes@pipeline.com (Marisol Reyes) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb11.121122.3046@pipeline.com> Date: Sat, 11 Feb 1995 12:11:22 GMT Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: WinVN 0.99.5 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Did Marcus take the decryption EPROM with him when he left the lab? -- === Marisol Reyes === Dept of Electrical Engineering, The Pipeline Internet Network "In theory there is no difference between theory and practice." From skuznetsov@uni-hamburg.de Sat Feb 11 17:34:22 1995 Path: ashpoly!cascade!transat!ukc!fennimore!uni-hamburg!skuznetsov From: skuznetsov@uni-hamburg.de (Sergei Kuznetsov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb11.173422.4058@uni-hamburg.de> Date: Sat, 11 Feb 1995 17:34:22 GMT References: <1995Feb11.121122.3046@pipeline.com> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Feb11.121122.3046@pipeline.com>, mreyes@pipeline.com (Marisol Reyes) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Sergei Kuznetsov SupraFAXModem 28.8 @ 9600 Telebit bps "Marcus is not one man." From ypetrov@cmu.edu Sun Feb 12 15:40:22 1995 Path: ashpoly!cascade!mxgate!coyoacan!cmu!ypetrov From: ypetrov@cmu.edu (Yuki Petrov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb12.154022.9839@cmu.edu> Date: Sun, 12 Feb 1995 15:40:22 GMT References: <1995Feb11.121122.3046@pipeline.com> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: WinVN 0.99.5 Lines: 8 In article <1995Feb11.121122.3046@pipeline.com>, mreyes@pipeline.com (Marisol Reyes) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Yuki Petrov -- Carnegie Mellon University School of CS "A soul is not exclusive to biology."