From ftanaka@cam.ac.uk Sat Nov 23 09:22:31 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!cam!ftanaka From: ftanaka@cam.ac.uk (Freya Tanaka) Newsgroups: comp.sys.m68k Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov23.092231.4740@cam.ac.uk> Date: Sat, 23 Nov 1996 09:22:31 GMT Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: Netscape 1.1N Lines: 10 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Freya Tanaka Tape trading list upon request. SASE required for international mail. From cramirez@cmu.edu Sun Nov 24 07:26:31 1996 Path: ashpoly!cascade!transat!eunet-de!hansebox!cmu!cramirez From: cramirez@cmu.edu (Callum Ramírez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov24.072631.3220@cmu.edu> Date: Sun, 24 Nov 1996 07:26:31 GMT References: <1996Nov23.092231.4740@cam.ac.uk> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Nov23.092231.4740@cam.ac.uk>, ftanaka@cam.ac.uk (Freya Tanaka) writes: > Hardware disassembly report for Motorola hardware hackers. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Callum Ramírez Opinions expressed are solely my own and not those of Carnegie Mellon University School of CS. ------------------------------------------------------------ From vkowalski@hanse.de Sun Nov 24 23:51:31 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!hanse!vkowalski From: vkowalski@hanse.de (Valeria Kowalski) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov24.235131.8781@hanse.de> Date: Sun, 24 Nov 1996 23:51:31 GMT References: <1996Nov23.092231.4740@cam.ac.uk> Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1996Nov23.092231.4740@cam.ac.uk>, ftanaka@cam.ac.uk (Freya Tanaka) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Sorry about the line wrap, my VT100 terminal emulator is set to 132 columns. -- Valeria Kowalski Tape trading list upon request. SASE required for international mail. From mrodriguez@pipeline.com Tue Nov 26 14:20:31 1996 Path: ashpoly!bigsur!pacrim!krgate!eunha!pipeline!mrodriguez From: mrodriguez@pipeline.com (Mathieu Rodríguez) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov26.142031.8869@pipeline.com> Date: Tue, 26 Nov 1996 14:20:31 GMT References: <1996Nov23.092231.4740@cam.ac.uk> <1996Nov24.072631.3220@cmu.edu> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Nov24.072631.3220@cmu.edu>, cramirez@cmu.edu (Callum Ramírez) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Mathieu Rodríguez === Dept of Electrical Engineering, The Pipeline Internet Network "We don't sign stars. We build them." From bmoreau@kiae.su Wed Nov 27 00:03:31 1996 Path: ashpoly!cascade!brgate!saturno!kiae!bmoreau From: bmoreau@kiae.su (Bruno Moreau) Newsgroups: comp.sys.m68k Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov27.000331.5326@kiae.su> Date: Wed, 27 Nov 1996 00:03:31 GMT References: <1996Nov23.092231.4740@cam.ac.uk> <1996Nov24.235131.8781@hanse.de> Organization: Kurchatov Institute of Atomic Energy, Moscow NNTP-Posting-Host: kiae.su X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Nov24.235131.8781@hanse.de>, vkowalski@hanse.de (Valeria Kowalski) writes: > Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Bruno Moreau SupraFAXModem 28.8 @ ISDN 64k bps "We don't sign stars. We build them."