From amartinez@clari.net Sun Jan 08 22:14:06 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!clari!amartinez From: amartinez@clari.net (Anton Martínez) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jan08.221406.9672@clari.net> Date: Sun, 08 Jan 1995 22:14:06 GMT Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: Netscape 1.1N Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Anton Martínez *PLONK* filter active for trolls. Sun 3/60 (SunOS 4.1.1) - NetBSD 1.0 From rtanaka@kth.se Tue Jan 10 14:44:06 1995 Path: ashpoly!cascade!transat!ukc!fennimore!kth!rtanaka From: rtanaka@kth.se (Raj Tanaka) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jan10.144406.9720@kth.se> Date: Tue, 10 Jan 1995 14:44:06 GMT References: <1995Jan08.221406.9672@clari.net> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Jan08.221406.9672@clari.net>, amartinez@clari.net (Anton Martínez) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Raj Tanaka "Do not worship the copy." 486DX2/66 (Linux 1.2.13) / SunOS 4.1.4