{"id":105364,"date":"2022-10-23T15:36:39","date_gmt":"2022-10-23T13:36:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov"},"modified":"2022-10-23T15:36:39","modified_gmt":"2022-10-23T13:36:47","slug":"predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","title":{"rendered":"Byl p\u0159edstaven Caliptra, otev\u0159en\u00fd IP blok pro vytv\u00e1\u0159en\u00ed d\u016fv\u011bryhodn\u00fdch \u010dip\u016f","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnosti Google, AMD, NVIDIA a Microsoft v r\u00e1mci spole\u010dn\u00e9ho projektu Caliptra vyvinuly otev\u0159en\u00fd blok n\u00e1vrhu mikroobvod\u016f (IP blok) pro integraci do \u010dip\u016f, kter\u00e9 umo\u017e\u0148uj\u00ed vytv\u00e1\u0159en\u00ed d\u016fv\u011bryhodn\u00fdch hardwarov\u00fdch komponent (RoT, Root of Trust). Caliptra je samostatn\u00e1 hardwarov\u00e1 jednotka se svou vlastn\u00ed pam\u011bt\u00ed, procesorem a implementac\u00ed kryptografick\u00fdch primit\u00edv\u016f, zaji\u0161\u0165uj\u00edc\u00ed ov\u011b\u0159ov\u00e1n\u00ed procesu zav\u00e1d\u011bn\u00ed, pou\u017e\u00edvan\u00fdch firmwar\u016f a konfigurac\u00ed za\u0159\u00edzen\u00ed ulo\u017een\u00fdch v nem\u011bnn\u00e9 pam\u011bti. <\/p>\n

Caliptra lze pou\u017e\u00edt pro integraci do r\u016fzn\u00fdch \u010dip\u016f nez\u00e1visl\u00e9 hardwarov\u00e9 jednotky, kter\u00e1 prov\u00e1d\u00ed kontrolu integrity a garantuje, \u017ee v za\u0159\u00edzen\u00ed jsou pou\u017eity ov\u011b\u0159en\u00e9 a autorizovan\u00e9 v\u00fdrobce firmwary. Caliptra m\u016f\u017ee v\u00fdznamn\u011b zjednodu\u0161it a sjednotit integraci vestav\u011bn\u00fdch hardwarov\u00fdch mechanism\u016f kryptografick\u00e9ho ov\u011b\u0159ov\u00e1n\u00ed do CPU, GPU, SoC, ASIC, s\u00ed\u0165ov\u00fdch adapt\u00e9r\u016f, SSD disk\u016f a dal\u0161\u00edho za\u0159\u00edzen\u00ed. <\/p>\n

Poskytovan\u00e9 prost\u0159edky kryptografick\u00e9ho ov\u011b\u0159ov\u00e1n\u00ed integrity a autenti\u010dnosti platformy ochr\u00e1n\u00ed hardwarov\u00e9 komponenty p\u0159ed zav\u00e1d\u011bn\u00edm \u0161kodliv\u00fdch zm\u011bn ve firmwaru a zajist\u00ed ochranu procesu zav\u00e1d\u011bn\u00ed a uchov\u00e1v\u00e1n\u00ed konfigurace, aby se zabr\u00e1nilo ohro\u017een\u00ed z\u00e1kladn\u00edho syst\u00e9mu v d\u016fsledku \u00fatok\u016f na hardwarov\u00e9 komponenty nebo vkl\u00e1d\u00e1n\u00ed \u0161kodliv\u00fdch zm\u011bn do dodavatelsk\u00fdch \u0159et\u011bzc\u016f \u010dip\u016f. V Caliptra je tak\u00e9 zahrnuta mo\u017enost ov\u011b\u0159ov\u00e1n\u00ed aktualizac\u00ed firmwaru a souvisej\u00edc\u00edch dat (RTU, Root of Trust for Update), detekce po\u0161kozen\u00ed firmwaru a kritick\u00fdch dat (RTD, Root of Trust for Detection), obnoven\u00ed po\u0161kozen\u00fdch firmwar\u016f a dat (RTRec, Root of Trust for Recovery). <\/p>\n

V\u00fdvoj Caliptra prob\u00edh\u00e1 v r\u00e1mci spole\u010dn\u00e9ho projektu Open Compute, kter\u00fd se zam\u011b\u0159uje na rozvoj otev\u0159en\u00fdch specifikac\u00ed hardwaru pro vybaven\u00ed datov\u00fdch center. Specifikace souvisej\u00edc\u00ed s Caliptra jsou distribuov\u00e1ny na z\u00e1klad\u011b Dohody Open Web Foundation Agreement (OWFa), kter\u00e1 byla navr\u017eena pro \u0161\u00ed\u0159en\u00ed otev\u0159en\u00fdch standard\u016f (podobn\u011b jako licen\u010dn\u00ed smlouvy pro specifikace). Pou\u017eit\u00ed OWFa umo\u017e\u0148uje vytv\u00e1\u0159et produkty a odvozen\u00e9 implementace na z\u00e1klad\u011b specifikace bez placen\u00ed licen\u010dn\u00edch poplatk\u016f a umo\u017e\u0148uje jak\u00fdmkoli organizac\u00edm \u00fa\u010dastnit se rozvoje specifikace. <\/p>\n

Z\u00e1kladn\u00ed implementace IP bloku je postavena na otev\u0159en\u00e9m procesoru RISC-V SWeRV EL2 a je vybavena 384 KB RAM (128 KB DCCM, 128 KB ICCM0 a 128 KB SRAM) a 32 KB ROM. Mezi podporovan\u00e9 kryptografick\u00e9 algoritmy pat\u0159\u00ed SHA256, SHA384, SHA512, ECC Secp384r1, HMAC-DRBG, HMAC SHA384, AES256-ECB, AES256-CBC a AES256-GCM.

\"Byl<\/center>
\"Byl<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, AMD, NVIDIA \u0438 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Caliptra \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0431\u043b\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c (IP-\u0431\u043b\u043e\u043a) \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u0447\u0438\u043f\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (RoT, Root of Trust). Caliptra \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u0431\u043b\u043e\u043a \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105365,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105364","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u0159edstaven Caliptra, otev\u0159en\u00fd IP blok pro vytvo\u0159en\u00ed d\u016fv\u011bryhodn\u00fdch \u010dip\u016f | ProHoster","description":"Spole\u010dnosti Google, AMD, NVIDIA a Microsoft v r\u00e1mci spole\u010dn\u00e9ho projektu Caliptra vyvinuly otev\u0159en\u00fd blok pro n\u00e1vrh \u010dip\u016f (IP blok) pro integraci do \u010dip\u016f zam\u011b\u0159en\u00fdch na vytv\u00e1\u0159en\u00ed d\u016fv\u011bryhodn\u00e9ho hardwaru.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d Caliptra, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 IP-\u0431\u043b\u043e\u043a \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0447\u0438\u043f\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, AMD, NVIDIA \u0438 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Caliptra \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0431\u043b\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c (IP-\u0431\u043b\u043e\u043a) \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u0447\u0438\u043f\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-23T13:36:47+00:00","article:modified_time":"2022-10-23T13:36:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/105364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=105364"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/105364\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/105365"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=105364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=105364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=105364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}