From mkim@kth.se Thu Oct 27 13:51:07 1994 Path: ashpoly!cascade!mxgate!coyoacan!kth!mkim From: mkim@kth.se (Marisol Kim) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct27.135107.7431@kth.se> Date: Thu, 27 Oct 1994 13:51:07 GMT Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: Netscape 1.1N Lines: 10 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Marisol Kim Tape trading list upon request. SASE required for international mail. From egirard@cam.ac.uk Thu Oct 27 15:41:07 1994 Path: ashpoly!cascade!bigsur!cam!egirard From: egirard@cam.ac.uk (Elaine Girard) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct27.154107.5179@cam.ac.uk> Date: Thu, 27 Oct 1994 15:41:07 GMT References: <1994Oct27.135107.7431@kth.se> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1994Oct27.135107.7431@kth.se>, mkim@kth.se (Marisol Kim) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If you are posting from AOL, please read RFC 1036 before posting again. -- Elaine Girard *PLONK* filter active for trolls. Pentium 90 (OS/2 Warp) - NetBSD 1.0 From kcampbell@inria.fr Thu Oct 27 22:10:07 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!inria!kcampbell From: kcampbell@inria.fr (Katrin Campbell) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct27.221007.2908@inria.fr> Date: Thu, 27 Oct 1994 22:10:07 GMT References: <1994Oct27.135107.7431@kth.se> <1994Oct27.154107.5179@cam.ac.uk> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: TIN [version 1.2 PL2] Lines: 9 In article <1994Oct27.154107.5179@cam.ac.uk>, egirard@cam.ac.uk (Elaine Girard) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. > If you are posting from AOL, please read RFC 1036 before posting again. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Katrin Campbell -- INRIA Rocquencourt "Row 14. No joke." From nbrennan@clari.net Sun Oct 30 00:31:07 1994 Path: ashpoly!cascade!mxgate!coyoacan!clari!nbrennan From: nbrennan@clari.net (Nadia Brennan) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Oct30.003107.5286@clari.net> Date: Sun, 30 Oct 1994 00:31:07 GMT References: <1994Oct27.135107.7431@kth.se> <1994Oct27.154107.5179@cam.ac.uk> <1994Oct27.221007.2908@inria.fr> Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: Netscape 1.1N Lines: 11 In article <1994Oct27.221007.2908@inria.fr>, kcampbell@inria.fr (Katrin Campbell) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. If you are posting from AOL, please read RFC 1036 before posting again. -- Nadia Brennan | nbrennan@clari.net PGP Key fingerprint: 4CC8 E472 5C43 AB9B "Keep the channels open."