From jduarte@kiae.su Thu May 26 08:54:11 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!kiae!jduarte From: jduarte@kiae.su (Julien Duarte) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May26.085411.4633@kiae.su> Date: Thu, 26 May 1994 08:54:11 GMT Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: Netscape 1.1N Lines: 10 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Julien Duarte -- Kurchatov Institute of Atomic Energy, Moscow "A soul is not exclusive to biology." From mnakamura@cmu.edu Fri May 27 18:20:11 1994 Path: ashpoly!cascade!mxgate!coyoacan!cmu!mnakamura From: mnakamura@cmu.edu (Mei Nakamura) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May27.182011.1548@cmu.edu> Date: Fri, 27 May 1994 18:20:11 GMT References: <1994May26.085411.4633@kiae.su> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1994May26.085411.4633@kiae.su>, jduarte@kiae.su (Julien Duarte) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Mei Nakamura === Dept of Electrical Engineering, Carnegie Mellon University School of CS "The carrier frequency does not drift by accident." From jokonkwo@illinois.edu Sat May 28 19:52:11 1994 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!illinois!jokonkwo From: jokonkwo@illinois.edu (Ji-woo Okonkwo) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May28.195211.9759@illinois.edu> Date: Sat, 28 May 1994 19:52:11 GMT References: <1994May26.085411.4633@kiae.su> <1994May27.182011.1548@cmu.edu> Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1994May27.182011.1548@cmu.edu>, mnakamura@cmu.edu (Mei Nakamura) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Ji-woo Okonkwo US Robotics Courier V.34 @ 9600 Telebit bps "When every node is whole, the channel opens."