From jgirard@utexas.edu Fri Sep 06 07:00:16 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!utexas!jgirard From: jgirard@utexas.edu (Jens Girard) Newsgroups: comp.sys.m68k Subject: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep06.070016.4145@utexas.edu> Date: Fri, 06 Sep 1996 07:00:16 GMT Organization: University of Texas at Austin NNTP-Posting-Host: utexas.edu X-Newsreader: Netscape 1.1N Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Jens Girard "They will send a copy in my place." Amiga 1200 (Blizzard 030/50) / FreeBSD 2.1 From kkuznetsov@clari.net Fri Sep 06 09:04:16 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!clari!kkuznetsov From: kkuznetsov@clari.net (Katrin Kuznetsov) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep06.090416.9902@clari.net> Date: Fri, 06 Sep 1996 09:04:16 GMT References: <1996Sep06.070016.4145@utexas.edu> Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Sep06.070016.4145@utexas.edu>, jgirard@utexas.edu (Jens Girard) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Katrin Kuznetsov Opinions expressed are solely my own and not those of ClariNet Communications Corp. ------------------------------------------------------------ From cmoreno@cmu.edu Sat Sep 07 03:30:16 1996 Path: ashpoly!cascade!transat!sunet!nordrelay!cmu!cmoreno From: cmoreno@cmu.edu (Camila Moreno) Newsgroups: comp.sys.m68k Subject: Re: Data: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Sep07.033016.2738@cmu.edu> Date: Sat, 07 Sep 1996 03:30:16 GMT References: <1996Sep06.070016.4145@utexas.edu> <1996Sep06.090416.9902@clari.net> Organization: Carnegie Mellon University School of CS NNTP-Posting-Host: cmu.edu X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1996Sep06.090416.9902@clari.net>, kkuznetsov@clari.net (Katrin Kuznetsov) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Camila Moreno === Dept of Electrical Engineering, Carnegie Mellon University School of CS "They will send a copy in my place."