From mvasiliev@rwth-aachen.de Sun Nov 17 02:53:00 1996 Path: ashpoly!cascade!brgate!saturno!rwth-aachen!mvasiliev From: mvasiliev@rwth-aachen.de (Mathieu Vasiliev) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov17.025300.2420@rwth-aachen.de> Date: Sun, 17 Nov 1996 02:53:00 GMT Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: NewsWatcher 2.0b24 Lines: 10 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Mathieu Vasiliev Tape trading list upon request. SASE required for international mail. From sokonkwo@cam.ac.uk Mon Nov 18 07:07:00 1996 Path: ashpoly!cascade!transat!eunet-fr!teletel!cam!sokonkwo From: sokonkwo@cam.ac.uk (Seo-yeon Okonkwo) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov18.070700.6137@cam.ac.uk> Date: Mon, 18 Nov 1996 07:07:00 GMT References: <1996Nov17.025300.2420@rwth-aachen.de> Organization: University of Cambridge Computer Laboratory NNTP-Posting-Host: cam.ac.uk X-Newsreader: Netscape 1.1N Lines: 10 In article <1996Nov17.025300.2420@rwth-aachen.de>, mvasiliev@rwth-aachen.de (Mathieu Vasiliev) writes: > Hardware disassembly report for Motorola hardware hackers. > This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Seo-yeon Okonkwo "The carrier frequency does not drift by accident." Pentium 90 (OS/2 Warp) / FreeBSD 2.1 From aduarte@rwth-aachen.de Tue Nov 19 06:20:00 1996 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!rwth-aachen!aduarte From: aduarte@rwth-aachen.de (Amy Duarte) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov19.062000.5699@rwth-aachen.de> Date: Tue, 19 Nov 1996 06:20:00 GMT References: <1996Nov17.025300.2420@rwth-aachen.de> <1996Nov18.070700.6137@cam.ac.uk> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: TIN [version 1.2 PL2] Lines: 11 In article <1996Nov18.070700.6137@cam.ac.uk>, sokonkwo@cam.ac.uk (Seo-yeon Okonkwo) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Amy Duarte Practical Peripherals 14.4 @ 33,600 bps "When every node is whole, the channel opens." From lsuzuki@u-tokyo.ac.jp Tue Nov 19 11:18:00 1996 Path: ashpoly!bigsur!pacrim!jpgate!kamome!u-tokyo!lsuzuki From: lsuzuki@u-tokyo.ac.jp (Liam Suzuki) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1996Nov19.111800.4713@u-tokyo.ac.jp> Date: Tue, 19 Nov 1996 11:18:00 GMT References: <1996Nov17.025300.2420@rwth-aachen.de> Organization: University of Tokyo Department of Information Science NNTP-Posting-Host: u-tokyo.ac.jp X-Newsreader: Netscape 1.1N Lines: 9 In article <1996Nov17.025300.2420@rwth-aachen.de>, mvasiliev@rwth-aachen.de (Mathieu Vasiliev) writes: > Hardware disassembly report for Motorola hardware hackers. Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Liam Suzuki Opinions expressed are solely my own and not those of University of Tokyo Department of Information Science. ------------------------------------------------------------