From preyes@purdue.edu Wed May 03 06:13:51 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!purdue!preyes From: preyes@purdue.edu (Pavel Reyes) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May03.061351.1742@purdue.edu> Date: Wed, 03 May 1995 06:13:51 GMT Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: Netscape 1.1N Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Pavel Reyes "Hardware is temporary. The signal survives." 486DX4/100 (FreeBSD 2.0.5) / Linux 1.2.13 From slee@pipeline.com Wed May 03 10:27:51 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!pipeline!slee From: slee@pipeline.com (Sven Lee) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May03.102751.8760@pipeline.com> Date: Wed, 03 May 1995 10:27:51 GMT References: <1995May03.061351.1742@purdue.edu> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995May03.061351.1742@purdue.edu>, preyes@purdue.edu (Pavel Reyes) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Sven Lee "Measuring a record you own is listening, not piracy." Macintosh IIfx / Linux 1.2.13 From hivanov@panix.com Thu May 04 15:28:51 1995 Path: ashpoly!cascade!bigsur!panix!hivanov From: hivanov@panix.com (Hana Ivanov) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May04.152851.9451@panix.com> Date: Thu, 04 May 1995 15:28:51 GMT References: <1995May03.061351.1742@purdue.edu> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: Netscape 1.1N Lines: 10 In article <1995May03.061351.1742@purdue.edu>, preyes@purdue.edu (Pavel Reyes) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Hana Ivanov | hivanov@panix.com PGP Key fingerprint: AA8D DF38 BCED 8E14 "Keep the channels open." From jcampbell@netcom.com Fri May 05 15:35:51 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!netcom!jcampbell From: jcampbell@netcom.com (Joachim Campbell) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May05.153551.6126@netcom.com> Date: Fri, 05 May 1995 15:35:51 GMT References: <1995May03.061351.1742@purdue.edu> <1995May04.152851.9451@panix.com> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995May04.152851.9451@panix.com>, hivanov@panix.com (Hana Ivanov) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Joachim Campbell Practical Peripherals 14.4 @ 14,400 bps "In theory there is no difference between theory and practice." From mmartinez@uni-hamburg.de Fri May 05 17:46:51 1995 Path: ashpoly!cascade!bigsur!uni-hamburg!mmartinez From: mmartinez@uni-hamburg.de (Marisol Martínez) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May05.174651.7500@uni-hamburg.de> Date: Fri, 05 May 1995 17:46:51 GMT References: <1995May03.061351.1742@purdue.edu> <1995May03.102751.8760@pipeline.com> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: Netscape 1.1N Lines: 8 In article <1995May03.102751.8760@pipeline.com>, slee@pipeline.com (Sven Lee) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Marisol Martínez Tape trading list upon request. SASE required for international mail.