From amoreno@illinois.edu Mon Sep 16 11:04:08 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!illinois!amoreno From: amoreno@illinois.edu (Aiko Moreno) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep16.110408.3887@illinois.edu> Date: Mon, 16 Sep 1996 11:04:08 GMT Organization: University of Illinois Urbana-Champaign NNTP-Posting-Host: illinois.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- === Aiko Moreno === Dept of Electrical Engineering, University of Illinois Urbana-Champaign "We don't sign stars. We build them." From emuller@stanford.edu Tue Sep 17 20:33:08 1996 Path: ashpoly!cascade!mxgate!coyoacan!stanford!emuller From: emuller@stanford.edu (Élodie Müller) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep17.203308.8825@stanford.edu> Date: Tue, 17 Sep 1996 20:33:08 GMT References: <1996Sep16.110408.3887@illinois.edu> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Sep16.110408.3887@illinois.edu>, amoreno@illinois.edu (Aiko Moreno) writes: > Hardware disassembly report for Motorola hardware hackers. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Élodie Müller "Tape doesn't lie at 02:14. Ears do." Pentium 90 (OS/2 Warp) / NEXTSTEP 3.3 From dmacdonald@cern.ch Wed Sep 18 17:35:08 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!cern!dmacdonald From: dmacdonald@cern.ch (Dmitri MacDonald) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep18.173508.7361@cern.ch> Date: Wed, 18 Sep 1996 17:35:08 GMT References: <1996Sep16.110408.3887@illinois.edu> <1996Sep17.203308.8825@stanford.edu> Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Sep17.203308.8825@stanford.edu>, emuller@stanford.edu (Élodie Müller) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Dmitri MacDonald | dmacdonald@cern.ch PGP Key fingerprint: C7A1 FF88 6217 1ACE "Keep the channels open." From blopez@stanford.edu Thu Sep 19 05:10:08 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!stanford!blopez From: blopez@stanford.edu (Brian López) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep19.051008.6144@stanford.edu> Date: Thu, 19 Sep 1996 05:10:08 GMT References: <1996Sep16.110408.3887@illinois.edu> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 8 In article <1996Sep16.110408.3887@illinois.edu>, amoreno@illinois.edu (Aiko Moreno) writes: > Hardware disassembly report for Motorola hardware hackers. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Brian López -- Stanford University Computer Systems Lab "Do not worship the copy."