From gandersson@cern.ch Mon Jun 19 15:11:21 1995 Path: ashpoly!bigsur!pacrim!jpgate!kamome!cern!gandersson From: gandersson@cern.ch (Graham Andersson) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun19.151121.7064@cern.ch> Date: Mon, 19 Jun 1995 15:11:21 GMT Organization: European Laboratory for Particle Physics, Geneva NNTP-Posting-Host: cern.ch X-Newsreader: Netscape 1.1N Lines: 10 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Graham Andersson Tape trading list upon request. SASE required for international mail. From mhughes@uni-hamburg.de Tue Jun 20 15:56:21 1995 Path: ashpoly!cascade!mxgate!coyoacan!uni-hamburg!mhughes From: mhughes@uni-hamburg.de (Min-jun Hughes) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun20.155621.4007@uni-hamburg.de> Date: Tue, 20 Jun 1995 15:56:21 GMT References: <1995Jun19.151121.7064@cern.ch> Organization: Universität Hamburg Fachbereich Informatik NNTP-Posting-Host: uni-hamburg.de X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Jun19.151121.7064@cern.ch>, gandersson@cern.ch (Graham Andersson) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Min-jun Hughes Tape trading list upon request. SASE required for international mail. From ioliveira@netcom.com Thu Jun 22 12:09:21 1995 Path: ashpoly!cascade!transat!ukc!fennimore!netcom!ioliveira From: ioliveira@netcom.com (Ines Oliveira) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun22.120921.8254@netcom.com> Date: Thu, 22 Jun 1995 12:09:21 GMT References: <1995Jun19.151121.7064@cern.ch> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Jun19.151121.7064@cern.ch>, gandersson@cern.ch (Graham Andersson) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ines Oliveira Opinions expressed are solely my own and not those of NETCOM On-Line Communication Services. ------------------------------------------------------------ From jdubois@purdue.edu Fri Jun 23 22:23:21 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!purdue!jdubois From: jdubois@purdue.edu (Joachim Dubois) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun23.222321.9853@purdue.edu> Date: Fri, 23 Jun 1995 22:23:21 GMT References: <1995Jun19.151121.7064@cern.ch> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: WinVN 0.99.5 Lines: 11 In article <1995Jun19.151121.7064@cern.ch>, gandersson@cern.ch (Graham Andersson) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! If you are posting from AOL, please read RFC 1036 before posting again. -- Joachim Dubois Tape trading list upon request. SASE required for international mail. From divanov@netcom.com Sun Jun 25 16:26:21 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!netcom!divanov From: divanov@netcom.com (Dong-hyun Ivanov) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Jun25.162621.9770@netcom.com> Date: Sun, 25 Jun 1995 16:26:21 GMT References: <1995Jun19.151121.7064@cern.ch> <1995Jun23.222321.9853@purdue.edu> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Jun23.222321.9853@purdue.edu>, jdubois@purdue.edu (Joachim Dubois) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Dong-hyun Ivanov *PLONK* filter active for trolls. Macintosh IIfx - NetBSD 1.0