From kmartinez@u-tokyo.ac.jp Sat Jan 21 09:38:15 1995
Path: ashpoly!cascade!transat!sunet!nordrelay!u-tokyo!kmartinez
From: kmartinez@u-tokyo.ac.jp (Kirsty Martínez)
Newsgroups: comp.sys.m68k
Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jan21.093815.6123@u-tokyo.ac.jp>
Date: Sat, 21 Jan 1995 09:38:15 GMT
Organization: University of Tokyo Department of Information Science
NNTP-Posting-Host: u-tokyo.ac.jp
X-Newsreader: NewsWatcher 2.0b24
Lines: 11

Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14.

The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.
This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet.

-- 
Kirsty Martínez
Opinions expressed are solely my own and not those of University of Tokyo Department of Information Science.
------------------------------------------------------------

From hgonzalez@pipeline.com Sat Jan 21 22:23:15 1995
Path: ashpoly!bigsur!pacrim!jpgate!kamome!pipeline!hgonzalez
From: hgonzalez@pipeline.com (Hana González)
Newsgroups: comp.sys.m68k
Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jan21.222315.9012@pipeline.com>
Date: Sat, 21 Jan 1995 22:23:15 GMT
References: <1995Jan21.093815.6123@u-tokyo.ac.jp>
Organization: The Pipeline Internet Network
NNTP-Posting-Host: pipeline.com
X-Newsreader: Netscape 1.1N
Lines: 10

In article <1995Jan21.093815.6123@u-tokyo.ac.jp>, kmartinez@u-tokyo.ac.jp (Kirsty Martínez) writes:
> Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14.
> The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Hana González | hgonzalez@pipeline.com
PGP Key fingerprint: 0D67 73C5 753D E021
"Keep the channels open."

From mpark@illinois.edu Sun Jan 22 13:09:15 1995
Path: ashpoly!bigsur!pacrim!krgate!eunha!illinois!mpark
From: mpark@illinois.edu (Morag Park)
Newsgroups: comp.sys.m68k
Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jan22.130915.6944@illinois.edu>
Date: Sun, 22 Jan 1995 13:09:15 GMT
References: <1995Jan21.093815.6123@u-tokyo.ac.jp> <1995Jan21.222315.9012@pipeline.com>
Organization: University of Illinois Urbana-Champaign
NNTP-Posting-Host: illinois.edu
X-Newsreader: Netscape 1.1N
Lines: 8

In article <1995Jan21.222315.9012@pipeline.com>, hgonzalez@pipeline.com (Hana González) writes:
> If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Morag Park -- University of Illinois Urbana-Champaign
"A soul is not exclusive to biology."