From lsmirnov@demon.co.uk Sat Feb 18 18:53:14 1995 Path: ashpoly!cascade!transat!ukc!fennimore!demon!lsmirnov From: lsmirnov@demon.co.uk (Liam Smirnov) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb18.185314.8497@demon.co.uk> Date: Sat, 18 Feb 1995 18:53:14 GMT Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Did Marcus take the decryption EPROM with him when he left the lab? -- Liam Smirnov Opinions expressed are solely my own and not those of Demon Internet Services UK. ------------------------------------------------------------ From rkang@earthlink.net Sat Feb 18 21:31:14 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!earthlink!rkang From: rkang@earthlink.net (Raj Kang) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb18.213114.3531@earthlink.net> Date: Sat, 18 Feb 1995 21:31:14 GMT References: <1995Feb18.185314.8497@demon.co.uk> Organization: EarthLink Network NNTP-Posting-Host: earthlink.net X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Feb18.185314.8497@demon.co.uk>, lsmirnov@demon.co.uk (Liam Smirnov) writes: > Tracing the address decoder lines on the motherboard reveals what was supposed to be in socket U14. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- === Raj Kang === Dept of Electrical Engineering, EarthLink Network "Hold for relay." From rchoi@mit.edu Mon Feb 20 23:15:14 1995 Path: ashpoly!cascade!transat!eunet-fi!relcom!kiae!mit!rchoi From: rchoi@mit.edu (Renata Choi) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb20.231514.6154@mit.edu> Date: Mon, 20 Feb 1995 23:15:14 GMT References: <1995Feb18.185314.8497@demon.co.uk> <1995Feb18.213114.3531@earthlink.net> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: Netscape 1.1N Lines: 9 In article <1995Feb18.213114.3531@earthlink.net>, rkang@earthlink.net (Raj Kang) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Renata Choi "Tape doesn't lie at 02:14. Ears do." Amiga 1200 (Blizzard 030/50) / Linux 1.2.13 From jandersson@inria.fr Wed Feb 22 06:29:14 1995 Path: ashpoly!cascade!mxgate!coyoacan!inria!jandersson From: jandersson@inria.fr (Ji-woo Andersson) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb22.062914.8529@inria.fr> Date: Wed, 22 Feb 1995 06:29:14 GMT References: <1995Feb18.185314.8497@demon.co.uk> <1995Feb18.213114.3531@earthlink.net> Organization: INRIA Rocquencourt NNTP-Posting-Host: inria.fr X-Newsreader: WinVN 0.99.5 Lines: 9 In article <1995Feb18.213114.3531@earthlink.net>, rkang@earthlink.net (Raj Kang) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- === Ji-woo Andersson === Dept of Electrical Engineering, INRIA Rocquencourt "In theory there is no difference between theory and practice." From hpopov@panix.com Wed Feb 22 12:13:14 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!panix!hpopov From: hpopov@panix.com (Hana Popov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Feb22.121314.6566@panix.com> Date: Wed, 22 Feb 1995 12:13:14 GMT References: <1995Feb18.185314.8497@demon.co.uk> <1995Feb18.213114.3531@earthlink.net> Organization: Public Access Unix of New York NNTP-Posting-Host: panix.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Feb18.213114.3531@earthlink.net>, rkang@earthlink.net (Raj Kang) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Hana Popov *PLONK* filter active for trolls. Sun 3/60 (SunOS 4.1.1) - NetBSD 1.0