From rrobertson@u-tokyo.ac.jp Sat Mar 02 10:22:56 1996
Path: ashpoly!cascade!transat!ukc!fennimore!u-tokyo!rrobertson
From: rrobertson@u-tokyo.ac.jp (Raj Robertson)
Newsgroups: comp.sys.m68k
Subject: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Mar02.102256.2719@u-tokyo.ac.jp>
Date: Sat, 02 Mar 1996 10:22:56 GMT
Organization: University of Tokyo Department of Information Science
NNTP-Posting-Host: u-tokyo.ac.jp
X-Newsreader: Netscape 1.1N
Lines: 11

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.
Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14.

Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'?

-- 
Raj Robertson
Opinions expressed are solely my own and not those of University of Tokyo Department of Information Science.
------------------------------------------------------------

From ktanaka@pipeline.com Sat Mar 02 22:16:56 1996
Path: ashpoly!cascade!transat!sunet!nordrelay!pipeline!ktanaka
From: ktanaka@pipeline.com (Kirsty Tanaka)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Mar02.221656.1207@pipeline.com>
Date: Sat, 02 Mar 1996 22:16:56 GMT
References: <1996Mar02.102256.2719@u-tokyo.ac.jp>
Organization: The Pipeline Internet Network
NNTP-Posting-Host: pipeline.com
X-Newsreader: TIN [version 1.2 PL2]
Lines: 9

In article <1996Mar02.102256.2719@u-tokyo.ac.jp>, rrobertson@u-tokyo.ac.jp (Raj Robertson) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys.

-- 
Kirsty Tanaka | ktanaka@pipeline.com
PGP Key fingerprint: 9E3E F03B 0561 5667
"Keep the channels open."

From jkang@illinois.edu Mon Mar 04 10:45:56 1996
Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!illinois!jkang
From: jkang@illinois.edu (Ji-woo Kang)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Mar04.104556.6739@illinois.edu>
Date: Mon, 04 Mar 1996 10:45:56 GMT
References: <1996Mar02.102256.2719@u-tokyo.ac.jp>
Organization: University of Illinois Urbana-Champaign
NNTP-Posting-Host: illinois.edu
X-Newsreader: TIN [version 1.2 PL2]
Lines: 9

In article <1996Mar02.102256.2719@u-tokyo.ac.jp>, rrobertson@u-tokyo.ac.jp (Raj Robertson) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.
> This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Ji-woo Kang -- University of Illinois Urbana-Champaign
"Marcus is not one man."

From mgarcia@berkeley.edu Tue Mar 05 14:32:56 1996
Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!berkeley!mgarcia
From: mgarcia@berkeley.edu (Min-jun García)
Newsgroups: comp.sys.m68k
Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1996Mar05.143256.3231@berkeley.edu>
Date: Tue, 05 Mar 1996 14:32:56 GMT
References: <1996Mar02.102256.2719@u-tokyo.ac.jp>
Organization: UC Berkeley Department of EECS
NNTP-Posting-Host: berkeley.edu
X-Newsreader: NewsWatcher 2.0b24
Lines: 8

In article <1996Mar02.102256.2719@u-tokyo.ac.jp>, rrobertson@u-tokyo.ac.jp (Raj Robertson) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Min-jun García -- UC Berkeley Department of EECS
"Row 14. No joke."