From bsouza@utexas.edu Thu May 26 08:40:40 1994 Path: ashpoly!bigsur!pacrim!krgate!eunha!utexas!bsouza From: bsouza@utexas.edu (Brian Souza) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May26.084040.7395@utexas.edu> Date: Thu, 26 May 1994 08:40:40 GMT Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: Netscape 1.1N Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Brian Souza | bsouza@utexas.edu PGP Key fingerprint: 24CD 06F8 2137 5F3A "Keep the channels open." From mito@hanse.de Thu May 26 11:13:40 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!hanse!mito From: mito@hanse.de (Mikhail Ito) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May26.111340.5768@hanse.de> Date: Thu, 26 May 1994 11:13:40 GMT References: <1994May26.084040.7395@utexas.edu> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1994May26.084040.7395@utexas.edu>, bsouza@utexas.edu (Brian Souza) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! PGP Public key available via finger or upon request. -- Mikhail Ito Opinions expressed are solely my own and not those of Hanse-Netzwerk Hamburg. ------------------------------------------------------------ From rhughes@netcom.com Fri May 27 18:38:40 1994 Path: ashpoly!cascade!brgate!saturno!netcom!rhughes From: rhughes@netcom.com (Rodrigo Hughes) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May27.183840.7267@netcom.com> Date: Fri, 27 May 1994 18:38:40 GMT References: <1994May26.084040.7395@utexas.edu> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1994May26.084040.7395@utexas.edu>, bsouza@utexas.edu (Brian Souza) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- === Rodrigo Hughes === Dept of Electrical Engineering, NETCOM On-Line Communication Services "We don't sign stars. We build them." From ffournier@cern.ch Sun May 29 16:51:40 1994 Path: ashpoly!cascade!bigsur!cern!ffournier From: ffournier@cern.ch (Fiona Fournier) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May29.165140.7023@cern.ch> Date: Sun, 29 May 1994 16:51:40 GMT References: <1994May26.084040.7395@utexas.edu> <1994May27.183840.7267@netcom.com> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994May27.183840.7267@netcom.com>, rhughes@netcom.com (Rodrigo Hughes) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Fiona Fournier *PLONK* filter active for trolls. Atari Falcon 030 - NetBSD 1.0 From bgarcia@ox.ac.uk Mon May 30 12:08:40 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!ox!bgarcia From: bgarcia@ox.ac.uk (Brian García) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994May30.120840.4386@ox.ac.uk> Date: Mon, 30 May 1994 12:08:40 GMT References: <1994May26.084040.7395@utexas.edu> <1994May27.183840.7267@netcom.com> <1994May29.165140.7023@cern.ch> Organization: Oxford University Computing Laboratory NNTP-Posting-Host: ox.ac.uk X-Newsreader: Netscape 1.1N Lines: 9 In article <1994May29.165140.7023@cern.ch>, ffournier@cern.ch (Fiona Fournier) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Brian García "Row 14. No joke." PC-9821Ap2 (NEC) / SunOS 4.1.4