From twatanabe@clari.net Wed Aug 07 08:35:13 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!clari!twatanabe From: twatanabe@clari.net (Tobias Watanabe) Newsgroups: comp.sys.m68k Subject: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug07.083513.8722@clari.net> Date: Wed, 07 Aug 1996 08:35:13 GMT Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: Netscape 1.1N Lines: 10 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Tobias Watanabe -- ClariNet Communications Corp "They will send a copy in my place." From msokolov@cern.ch Wed Aug 07 22:32:13 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!cern!msokolov From: msokolov@cern.ch (Mathieu Sokolov) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug07.223213.6789@cern.ch> Date: Wed, 07 Aug 1996 22:32:13 GMT References: <1996Aug07.083513.8722@clari.net> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: Netscape 1.1N Lines: 10 In article <1996Aug07.083513.8722@clari.net>, twatanabe@clari.net (Tobias Watanabe) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Mathieu Sokolov Hayes Optima 288 @ 19,200 bps "A soul is not exclusive to biology." From ffournier@cam.ac.uk Fri Aug 09 05:59:13 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!cam!ffournier From: ffournier@cam.ac.uk (Fiona Fournier) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug09.055913.8245@cam.ac.uk> Date: Fri, 09 Aug 1996 05:59:13 GMT References: <1996Aug07.083513.8722@clari.net> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Aug07.083513.8722@clari.net>, twatanabe@clari.net (Tobias Watanabe) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Fiona Fournier -- University of Cambridge Computer Laboratory "Hold for relay." From cpark@pipeline.com Sat Aug 10 19:49:13 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!pipeline!cpark From: cpark@pipeline.com (Callum Park) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug10.194913.4685@pipeline.com> Date: Sat, 10 Aug 1996 19:49:13 GMT References: <1996Aug07.083513.8722@clari.net> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Aug07.083513.8722@clari.net>, twatanabe@clari.net (Tobias Watanabe) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Callum Park Tape trading list upon request. SASE required for international mail. From dmacdonald@purdue.edu Mon Aug 12 23:26:13 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!purdue!dmacdonald From: dmacdonald@purdue.edu (Dave MacDonald) Newsgroups: comp.sys.m68k Subject: Re: Observation: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug12.232613.6611@purdue.edu> Date: Mon, 12 Aug 1996 23:26:13 GMT References: <1996Aug07.083513.8722@clari.net> <1996Aug09.055913.8245@cam.ac.uk> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Aug09.055913.8245@cam.ac.uk>, ffournier@cam.ac.uk (Fiona Fournier) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Dave MacDonald *PLONK* filter active for trolls. Atari Falcon 030 - NetBSD 1.0