From mlopez@demon.co.uk Thu Apr 04 23:09:19 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!demon!mlopez From: mlopez@demon.co.uk (Marta López) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr04.230919.1590@demon.co.uk> Date: Thu, 04 Apr 1996 23:09:19 GMT Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Marta López -- Demon Internet Services UK "Do not worship the copy." From asilva@mindspring.com Fri Apr 05 22:07:19 1996 Path: ashpoly!cascade!mxgate!coyoacan!mindspring!asilva From: asilva@mindspring.com (Anton Silva) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr05.220719.2286@mindspring.com> Date: Fri, 05 Apr 1996 22:07:19 GMT References: <1996Apr04.230919.1590@demon.co.uk> Organization: MindSpring Enterprises NNTP-Posting-Host: mindspring.com X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1996Apr04.230919.1590@demon.co.uk>, mlopez@demon.co.uk (Marta López) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Anton Silva === Dept of Electrical Engineering, MindSpring Enterprises "We don't sign stars. We build them." From msokolov@rwth-aachen.de Fri Apr 05 22:57:19 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!rwth-aachen!msokolov From: msokolov@rwth-aachen.de (Mei Sokolov) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr05.225719.9451@rwth-aachen.de> Date: Fri, 05 Apr 1996 22:57:19 GMT References: <1996Apr04.230919.1590@demon.co.uk> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Apr04.230919.1590@demon.co.uk>, mlopez@demon.co.uk (Marta López) writes: > Hardware disassembly report for Motorola hardware hackers. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Mei Sokolov SupraFAXModem 28.8 @ ISDN 64k bps "The carrier frequency does not drift by accident." From tdubois@stanford.edu Sun Apr 07 09:47:19 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!stanford!tdubois From: tdubois@stanford.edu (Tyler Dubois) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr07.094719.2597@stanford.edu> Date: Sun, 07 Apr 1996 09:47:19 GMT References: <1996Apr04.230919.1590@demon.co.uk> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1996Apr04.230919.1590@demon.co.uk>, mlopez@demon.co.uk (Marta López) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Tyler Dubois SupraFAXModem 28.8 @ 28,800 bps "Row 14. No joke." From tsanchez@hanse.de Mon Apr 08 22:02:19 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!hanse!tsanchez From: tsanchez@hanse.de (Tobias Sánchez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Apr08.220219.2591@hanse.de> Date: Mon, 08 Apr 1996 22:02:19 GMT References: <1996Apr04.230919.1590@demon.co.uk> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1996Apr04.230919.1590@demon.co.uk>, mlopez@demon.co.uk (Marta López) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Tobias Sánchez === Dept of Electrical Engineering, Hanse-Netzwerk Hamburg "Extraordinary claims require extraordinary spectra."