From framirez@tum.de Tue Apr 05 17:01:56 1994 Path: ashpoly!cascade!transat!ukc!fennimore!tum!framirez From: framirez@tum.de (Freya Ramírez) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr05.170156.4745@tum.de> Date: Tue, 05 Apr 1994 17:01:56 GMT Organization: Technische Universität München NNTP-Posting-Host: tum.de X-Newsreader: Netscape 1.1N Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Freya Ramírez *PLONK* filter active for trolls. Acorn RiscPC 600 - NetBSD 1.0 From aoliveira@cmu.edu Thu Apr 07 11:51:56 1994 Path: ashpoly!cascade!mxgate!coyoacan!cmu!aoliveira From: aoliveira@cmu.edu (Astrid Oliveira) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr07.115156.1040@cmu.edu> Date: Thu, 07 Apr 1994 11:51:56 GMT References: <1994Apr05.170156.4745@tum.de> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Apr05.170156.4745@tum.de>, framirez@tum.de (Freya Ramírez) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Astrid Oliveira Opinions expressed are solely my own and not those of Carnegie Mellon University School of CS. ------------------------------------------------------------ From csantos@netcom.com Fri Apr 08 00:07:56 1994 Path: ashpoly!cascade!transat!ukc!fennimore!netcom!csantos From: csantos@netcom.com (Callum Santos) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr08.000756.3084@netcom.com> Date: Fri, 08 Apr 1994 00:07:56 GMT References: <1994Apr05.170156.4745@tum.de> <1994Apr07.115156.1040@cmu.edu> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1994Apr07.115156.1040@cmu.edu>, aoliveira@cmu.edu (Astrid Oliveira) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Callum Santos Practical Peripherals 14.4 @ 9600 Telebit bps "There are 14 nodes and only 10 countries. Count again." From asantos@titech.ac.jp Sun Apr 10 00:57:56 1994 Path: ashpoly!bigsur!pacrim!jpgate!kamome!titech!asantos From: asantos@titech.ac.jp (Astrid Santos) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Apr10.005756.5991@titech.ac.jp> Date: Sun, 10 Apr 1994 00:57:56 GMT References: <1994Apr05.170156.4745@tum.de> <1994Apr07.115156.1040@cmu.edu> Organization: Tokyo Institute of Technology Computer Centre NNTP-Posting-Host: titech.ac.jp X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1994Apr07.115156.1040@cmu.edu>, aoliveira@cmu.edu (Astrid Oliveira) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- === Astrid Santos === Dept of Electrical Engineering, Tokyo Institute of Technology Computer Centre "When every node is whole, the channel opens."