From bgonzalez@panix.com Sat May 06 16:07:03 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!panix!bgonzalez From: bgonzalez@panix.com (Bruno González) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May06.160703.4779@panix.com> Date: Sat, 06 May 1995 16:07:03 GMT Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Bruno González -- Public Access Unix of New York "Measuring a record you own is listening, not piracy." From hmuller@cmu.edu Mon May 08 09:42:03 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!cmu!hmuller From: hmuller@cmu.edu (Hana Müller) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995May08.094203.5597@cmu.edu> Date: Mon, 08 May 1995 09:42:03 GMT References: <1995May06.160703.4779@panix.com> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995May06.160703.4779@panix.com>, bgonzalez@panix.com (Bruno González) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Hana Müller *PLONK* filter active for trolls. Sun 3/60 (SunOS 4.1.1) - NetBSD 1.0