From rnovak@clari.net Sun Jan 09 15:06:00 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!clari!rnovak From: rnovak@clari.net (Renata Novak) Newsgroups: comp.sys.m68k Subject: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan09.150600.9064@clari.net> Date: Sun, 09 Jan 1994 15:06:00 GMT Organization: ClariNet Communications Corp NNTP-Posting-Host: clari.net X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Hardware disassembly report for Motorola hardware hackers. This indicates socket U14 held a cryptographic S-box lookup table for decrypting the Stardust keystream. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- Renata Novak Practical Peripherals 14.4 @ 9600 Telebit bps "The hatch is open. Is anyone listening?" From jsokolov@stanford.edu Mon Jan 10 23:54:00 1994 Path: ashpoly!cascade!brgate!saturno!stanford!jsokolov From: jsokolov@stanford.edu (Jens Sokolov) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan10.235400.2236@stanford.edu> Date: Mon, 10 Jan 1994 23:54:00 GMT References: <1994Jan09.150600.9064@clari.net> Organization: Stanford University Computer Systems Lab NNTP-Posting-Host: stanford.edu X-Newsreader: Netscape 1.1N Lines: 8 In article <1994Jan09.150600.9064@clari.net>, rnovak@clari.net (Renata Novak) writes: > Hardware disassembly report for Motorola hardware hackers. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Jens Sokolov Tape trading list upon request. SASE required for international mail. From gmoreno@pipeline.com Wed Jan 12 18:29:00 1994 Path: ashpoly!cascade!transat!eunet-fr!teletel!pipeline!gmoreno From: gmoreno@pipeline.com (Graham Moreno) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan12.182900.7324@pipeline.com> Date: Wed, 12 Jan 1994 18:29:00 GMT References: <1994Jan09.150600.9064@clari.net> <1994Jan10.235400.2236@stanford.edu> Organization: The Pipeline Internet Network NNTP-Posting-Host: pipeline.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1994Jan10.235400.2236@stanford.edu>, jsokolov@stanford.edu (Jens Sokolov) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. Using an S-box in a 27256 EPROM for single-cycle hardware substitution was standard military cipher practice in 1984. -- Graham Moreno Practical Peripherals 14.4 @ 19,200 bps "Row 14. No joke." From jsantos@berkeley.edu Thu Jan 13 05:51:00 1994 Path: ashpoly!cascade!transat!sunet!nordrelay!berkeley!jsantos From: jsantos@berkeley.edu (Ji-woo Santos) Newsgroups: comp.sys.m68k Subject: Re: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1994Jan13.055100.3636@berkeley.edu> Date: Thu, 13 Jan 1994 05:51:00 GMT References: <1994Jan09.150600.9064@clari.net> <1994Jan10.235400.2236@stanford.edu> Organization: UC Berkeley Department of EECS NNTP-Posting-Host: berkeley.edu X-Newsreader: NewsWatcher 2.0b24 Lines: 8 In article <1994Jan10.235400.2236@stanford.edu>, jsokolov@stanford.edu (Jens Sokolov) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Ji-woo Santos Tape trading list upon request. SASE required for international mail.