From hgirard@cmu.edu Fri Aug 16 18:33:40 1996 Path: ashpoly!cascade!brgate!saturno!cmu!hgirard From: hgirard@cmu.edu (Hana Girard) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug16.183340.5057@cmu.edu> Date: Fri, 16 Aug 1996 18:33:40 GMT Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Hana Girard "Tape doesn't lie at 02:14. Ears do." Decstation 5000/200 / AmigaOS 3.1 From mtanaka@berkeley.edu Sat Aug 17 01:24:40 1996 Path: ashpoly!cascade!mxgate!coyoacan!berkeley!mtanaka From: mtanaka@berkeley.edu (Marta Tanaka) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug17.012440.2987@berkeley.edu> Date: Sat, 17 Aug 1996 01:24:40 GMT References: <1996Aug16.183340.5057@cmu.edu> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Aug16.183340.5057@cmu.edu>, hgirard@cmu.edu (Hana Girard) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Marta Tanaka -- UC Berkeley Department of EECS "Hold for relay." From asokolov@demon.co.uk Sat Aug 17 06:46:40 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!demon!asokolov From: asokolov@demon.co.uk (Aiko Sokolov) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug17.064640.8241@demon.co.uk> Date: Sat, 17 Aug 1996 06:46:40 GMT References: <1996Aug16.183340.5057@cmu.edu> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Aug16.183340.5057@cmu.edu>, hgirard@cmu.edu (Hana Girard) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Aiko Sokolov Tape trading list upon request. SASE required for international mail. From ahughes@hanse.de Sat Aug 17 16:39:40 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!hanse!ahughes From: ahughes@hanse.de (Anton Hughes) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Aug17.163940.9411@hanse.de> Date: Sat, 17 Aug 1996 16:39:40 GMT References: <1996Aug16.183340.5057@cmu.edu> <1996Aug17.012440.2987@berkeley.edu> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1996Aug17.012440.2987@berkeley.edu>, mtanaka@berkeley.edu (Marta Tanaka) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Anton Hughes *PLONK* filter active for trolls. Sun 3/60 (SunOS 4.1.1) - NetBSD 1.0