From dkuznetsov@berkeley.edu Mon Feb 20 12:34:33 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!berkeley!dkuznetsov From: dkuznetsov@berkeley.edu (Dong-hyun Kuznetsov) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb20.123433.1543@berkeley.edu> Date: Mon, 20 Feb 1995 12:34:33 GMT Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: WinVN 0.99.5 Lines: 11 Hardware disassembly report for Motorola hardware hackers. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Dong-hyun Kuznetsov Practical Peripherals 14.4 @ ISDN 64k bps "They will send a copy in my place." From rwatanabe@purdue.edu Mon Feb 20 15:00:33 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!purdue!rwatanabe From: rwatanabe@purdue.edu (Rodrigo Watanabe) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb20.150033.2908@purdue.edu> Date: Mon, 20 Feb 1995 15:00:33 GMT References: <1995Feb20.123433.1543@berkeley.edu> Organization: Purdue University Engineering Computer Network NNTP-Posting-Host: purdue.edu X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1995Feb20.123433.1543@berkeley.edu>, dkuznetsov@berkeley.edu (Dong-hyun Kuznetsov) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Netscape 1.1 crashes when loading large preformatted text. Stick to rn or tin! -- Rodrigo Watanabe Tape trading list upon request. SASE required for international mail. From sstewart@inria.fr Mon Feb 20 19:29:33 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!inria!sstewart From: sstewart@inria.fr (Seo-yeon Stewart) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb20.192933.4456@inria.fr> Date: Mon, 20 Feb 1995 19:29:33 GMT References: <1995Feb20.123433.1543@berkeley.edu> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: TIN [version 1.2 PL2] Lines: 12 In article <1995Feb20.123433.1543@berkeley.edu>, dkuznetsov@berkeley.edu (Dong-hyun Kuznetsov) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. If you are posting from AOL, please read RFC 1036 before posting again. -- Seo-yeon Stewart | sstewart@inria.fr PGP Key fingerprint: 4648 B45E A423 46A6 "Keep the channels open." From istewart@mit.edu Tue Feb 21 15:44:33 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!mit!istewart From: istewart@mit.edu (Ines Stewart) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb21.154433.5094@mit.edu> Date: Tue, 21 Feb 1995 15:44:33 GMT References: <1995Feb20.123433.1543@berkeley.edu> <1995Feb20.192933.4456@inria.fr> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Feb20.192933.4456@inria.fr>, sstewart@inria.fr (Seo-yeon Stewart) writes: > Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. > If you are posting from AOL, please read RFC 1036 before posting again. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Ines Stewart "There are 14 nodes and only 10 countries. Count again." Amiga 1200 (Blizzard 030/50) / NEXTSTEP 3.3 From aoliveira@panix.com Wed Feb 22 04:34:33 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!panix!aoliveira From: aoliveira@panix.com (Aiko Oliveira) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb22.043433.3205@panix.com> Date: Wed, 22 Feb 1995 04:34:33 GMT References: <1995Feb20.123433.1543@berkeley.edu> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: WinVN 0.99.5 Lines: 10 In article <1995Feb20.123433.1543@berkeley.edu>, dkuznetsov@berkeley.edu (Dong-hyun Kuznetsov) writes: > Hardware disassembly report for Motorola hardware hackers. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Aiko Oliveira *PLONK* filter active for trolls. Amiga 3000T - NetBSD 1.0