From nnakamura@berkeley.edu Thu Feb 09 01:09:14 1995
Path: ashpoly!cascade!mxgate!coyoacan!berkeley!nnakamura
From: nnakamura@berkeley.edu (Nadine Nakamura)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Feb09.010914.5152@berkeley.edu>
Date: Thu, 09 Feb 1995 01:09:14 GMT
Organization: UC Berkeley Department of EECS
NNTP-Posting-Host: berkeley.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 10

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.
This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet.

-- 
Nadine Nakamura -- UC Berkeley Department of EECS
"Row 14. No joke."

From mrobertson@rwth-aachen.de Fri Feb 10 21:19:14 1995
Path: ashpoly!cascade!mxgate!coyoacan!rwth-aachen!mrobertson
From: mrobertson@rwth-aachen.de (Mateo Robertson)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Feb10.211914.7829@rwth-aachen.de>
Date: Fri, 10 Feb 1995 21:19:14 GMT
References: <1995Feb09.010914.5152@berkeley.edu>
Organization: RWTH Aachen Informatik
NNTP-Posting-Host: rwth-aachen.de
X-Newsreader: Netscape 1.1N
Lines: 9

In article <1995Feb09.010914.5152@berkeley.edu>, nnakamura@berkeley.edu (Nadine Nakamura) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.
> Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Mateo Robertson
Tape trading list upon request. SASE required for international mail.