From cmuller@netcom.com Thu Jul 27 05:33:04 1995
Path: ashpoly!cascade!bigsur!netcom!cmuller
From: cmuller@netcom.com (Camila Müller)
Newsgroups: comp.sys.m68k
Subject: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jul27.053304.2539@netcom.com>
Date: Thu, 27 Jul 1995 05:33:04 GMT
Organization: NETCOM On-Line Communication Services
NNTP-Posting-Host: netcom.com
X-Newsreader: TIN [version 1.2 PL2]
Lines: 10

Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream.
Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF.

Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet.

-- 
Camila Müller
Tape trading list upon request. SASE required for international mail.

From rnovak@panix.com Fri Jul 28 06:55:04 1995
Path: ashpoly!cascade!bigsur!panix!rnovak
From: rnovak@panix.com (Raj Novak)
Newsgroups: comp.sys.m68k
Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jul28.065504.8584@panix.com>
Date: Fri, 28 Jul 1995 06:55:04 GMT
References: <1995Jul27.053304.2539@netcom.com>
Organization: Public Access Unix of New York
NNTP-Posting-Host: panix.com
X-Newsreader: TIN [version 1.2 PL2]
Lines: 9

In article <1995Jul27.053304.2539@netcom.com>, cmuller@netcom.com (Camila Müller) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
=== Raj Novak ===
Dept of Electrical Engineering, Public Access Unix of New York
"In theory there is no difference between theory and practice."

From llindqvist@panix.com Fri Jul 28 12:40:04 1995
Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!panix!llindqvist
From: llindqvist@panix.com (Lars Lindqvist)
Newsgroups: comp.sys.m68k
Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jul28.124004.2414@panix.com>
Date: Fri, 28 Jul 1995 12:40:04 GMT
References: <1995Jul27.053304.2539@netcom.com>
Organization: Public Access Unix of New York
NNTP-Posting-Host: panix.com
X-Newsreader: Netscape 1.1N
Lines: 11

In article <1995Jul27.053304.2539@netcom.com>, cmuller@netcom.com (Camila Müller) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin!

-- 
Lars Lindqvist | llindqvist@panix.com
PGP Key fingerprint: A0E4 4CA6 6CDA F6B1
"Keep the channels open."

From jsanchez@mindspring.com Sat Jul 29 21:33:04 1995
Path: ashpoly!cascade!transat!eunet-de!hansebox!mindspring!jsanchez
From: jsanchez@mindspring.com (Julien Sánchez)
Newsgroups: comp.sys.m68k
Subject: Re: WTB/WTT: Disassembling socket U14 firmware on the TWIN-68 board
Message-ID: <1995Jul29.213304.2986@mindspring.com>
Date: Sat, 29 Jul 1995 21:33:04 GMT
References: <1995Jul27.053304.2539@netcom.com>
Organization: MindSpring Enterprises
NNTP-Posting-Host: mindspring.com
X-Newsreader: Netscape 1.1N
Lines: 8

In article <1995Jul27.053304.2539@netcom.com>, cmuller@netcom.com (Camila Müller) writes:
> Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board.

If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack!

-- 
Julien Sánchez -- MindSpring Enterprises
"Tape doesn't lie at 02:14. Ears do."