From tsanchez@uu.net Tue Nov 15 18:26:37 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!uu!tsanchez From: tsanchez@uu.net (Thiago Sánchez) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Nov15.182637.1323@uu.net> Date: Tue, 15 Nov 1994 18:26:37 GMT Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Thiago Sánchez Opinions expressed are solely my own and not those of UUNET Technologies, Falls Church VA. ------------------------------------------------------------ From mgonzalez@mit.edu Wed Nov 16 11:26:37 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!mit!mgonzalez From: mgonzalez@mit.edu (Min-jun González) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Nov16.112637.5486@mit.edu> Date: Wed, 16 Nov 1994 11:26:37 GMT References: <1994Nov15.182637.1323@uu.net> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1994Nov15.182637.1323@uu.net>, tsanchez@uu.net (Thiago Sánchez) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Min-jun González "In theory there is no difference between theory and practice." Commodore Amiga 500 (1MB OCS) / TOS 4.04 From fandersson@titech.ac.jp Fri Nov 18 08:46:37 1994 Path: ashpoly!cascade!transat!eunet-de!hansebox!titech!fandersson From: fandersson@titech.ac.jp (Fiona Andersson) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Nov18.084637.3733@titech.ac.jp> Date: Fri, 18 Nov 1994 08:46:37 GMT References: <1994Nov15.182637.1323@uu.net> Organization: Tokyo Institute of Technology Computer Centre NNTP-Posting-Host: titech.ac.jp X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1994Nov15.182637.1323@uu.net>, tsanchez@uu.net (Thiago Sánchez) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Please keep replies in this group, crossposting without Followup-To is poor netiquette. -- Fiona Andersson Opinions expressed are solely my own and not those of Tokyo Institute of Technology Computer Centre. ------------------------------------------------------------ From rmuller@pipeline.com Sat Nov 19 10:44:37 1994 Path: ashpoly!cascade!bigsur!pipeline!rmuller From: rmuller@pipeline.com (Rodrigo Müller) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Nov19.104437.9733@pipeline.com> Date: Sat, 19 Nov 1994 10:44:37 GMT References: <1994Nov15.182637.1323@uu.net> <1994Nov16.112637.5486@mit.edu> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Nov16.112637.5486@mit.edu>, mgonzalez@mit.edu (Min-jun González) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Rodrigo Müller SupraFAXModem 28.8 @ 14,400 bps "The carrier frequency does not drift by accident."