From lkowalski@rwth-aachen.de Wed Mar 20 09:37:52 1996
Path: ashpoly!cascade!transat!eunet-fr!teletel!rwth-aachen!lkowalski
From: lkowalski@rwth-aachen.de (Lucia Kowalski)
Newsgroups: comp.sys.m68k
Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Mar20.093752.4406@rwth-aachen.de>
Date: Wed, 20 Mar 1996 09:37:52 GMT
Organization: RWTH Aachen Informatik
NNTP-Posting-Host: rwth-aachen.de
X-Newsreader: NewsWatcher 2.0b24
Lines: 10

Hardware disassembly report for Motorola hardware hackers.

Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.
This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Lucia Kowalski
Tape trading list upon request. SASE required for international mail.

From kstewart@hanse.de Fri Mar 22 09:33:52 1996
Path: ashpoly!cascade!transat!eunet-de!hansebox!hanse!kstewart
From: kstewart@hanse.de (Kenji Stewart)
Newsgroups: comp.sys.m68k
Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Mar22.093352.6813@hanse.de>
Date: Fri, 22 Mar 1996 09:33:52 GMT
References: <1996Mar20.093752.4406@rwth-aachen.de>
Organization: Hanse-Netzwerk Hamburg
NNTP-Posting-Host: hanse.de
X-Newsreader: WinVN 0.99.5
Lines: 9

In article <1996Mar20.093752.4406@rwth-aachen.de>, lkowalski@rwth-aachen.de (Lucia Kowalski) writes:
> Hardware disassembly report for Motorola hardware hackers.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Kenji Stewart | kstewart@hanse.de
PGP Key fingerprint: F56E 715C 09BC 9CE1
"Keep the channels open."