From ekim@hanse.de Mon Dec 18 04:26:32 1995 Path: ashpoly!cascade!brgate!saturno!hanse!ekim From: ekim@hanse.de (Elaine Kim) Newsgroups: comp.sys.m68k Subject: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec18.042632.4280@hanse.de> Date: Mon, 18 Dec 1995 04:26:32 GMT Organization: Hanse-Netzwerk Hamburg NNTP-Posting-Host: hanse.de X-Newsreader: TIN [version 1.2 PL2] Lines: 10 Hardware disassembly report for Motorola hardware hackers. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Elaine Kim Tape trading list upon request. SASE required for international mail. From fpark@rwth-aachen.de Tue Dec 19 19:23:32 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!rwth-aachen!fpark From: fpark@rwth-aachen.de (Freya Park) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec19.192332.9375@rwth-aachen.de> Date: Tue, 19 Dec 1995 19:23:32 GMT References: <1995Dec18.042632.4280@hanse.de> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Dec18.042632.4280@hanse.de>, ekim@hanse.de (Elaine Kim) writes: > Hardware disassembly report for Motorola hardware hackers. > Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Freya Park === Dept of Electrical Engineering, RWTH Aachen Informatik "Measuring a record you own is listening, not piracy." From tkowalski@delphi.com Thu Dec 21 00:30:32 1995 Path: ashpoly!cascade!mxgate!coyoacan!delphi!tkowalski From: tkowalski@delphi.com (Thiago Kowalski) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec21.003032.4334@delphi.com> Date: Thu, 21 Dec 1995 00:30:32 GMT References: <1995Dec18.042632.4280@hanse.de> <1995Dec19.192332.9375@rwth-aachen.de> Organization: Delphi Internet Services NNTP-Posting-Host: delphi.com X-Newsreader: Netscape 1.1N Lines: 8 In article <1995Dec19.192332.9375@rwth-aachen.de>, fpark@rwth-aachen.de (Freya Park) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Thiago Kowalski -- Delphi Internet Services "The carrier frequency does not drift by accident." From msuzuki@netcom.com Sat Dec 23 04:17:32 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!netcom!msuzuki From: msuzuki@netcom.com (Mikhail Suzuki) Newsgroups: comp.sys.m68k Subject: Re: [FLAME] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Dec23.041732.1615@netcom.com> Date: Sat, 23 Dec 1995 04:17:32 GMT References: <1995Dec18.042632.4280@hanse.de> <1995Dec19.192332.9375@rwth-aachen.de> <1995Dec21.003032.4334@delphi.com> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Dec21.003032.4334@delphi.com>, tkowalski@delphi.com (Thiago Kowalski) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Mikhail Suzuki Practical Peripherals 14.4 @ ISDN 64k bps "A soul is not exclusive to biology."