{"id":113631,"date":"2024-02-16T04:02:41","date_gmt":"2024-02-16T02:02:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlen-pervyj-chip-na-baze-otkrytoj-platformy-opentitan"},"modified":"2024-02-16T04:02:41","modified_gmt":"2024-02-16T02:02:42","slug":"predstavlen-pervyj-chip-na-baze-otkrytoj-platformy-opentitan","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlen-pervyj-chip-na-baze-otkrytoj-platformy-opentitan","title":{"rendered":"P\u0159edstaven prvn\u00ed \u010dip na z\u00e1klad\u011b otev\u0159en\u00e9 platformy OpenTitan","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nekommerc\u030cni\u0301 organizace lowRISC, ktera\u0301 dohl\u00ed\u017e\u00ed na v\u00fdvoj otev\u0159en\u00e9ho mikroprocesoru na b\u00e1zi architektury RISC-V, ozn\u00e1mila dostupnost prvn\u00edho \u010dipu p\u0159ipraven\u00e9ho na komer\u010dn\u00ed v\u00fdrobu, postaven\u00e9ho na otev\u0159en\u00e9 platform\u011b OpenTitan, kter\u00e1 je rozv\u00edjena jako nez\u00e1visl\u00fd spole\u010dn\u00fd projekt. P\u016fvodn\u011b byl projekt zalo\u017een firmou Google, ale po p\u0159ed\u00e1n\u00ed organizaci lowRISC se k jeho v\u00fdvoji p\u0159ipojily firmy jako Western Digital, Seagate, Nuvoton Technology, Winbond, Rivos, zeroRISC a G+D Mobile Security. Souvisej\u00edc\u00ed k\u00f3d a specifikace hardwarov\u00fdch komponent\u016f byly zve\u0159ejn\u011bny pod licenc\u00ed Apache 2.0. <\/p>\n

Na rozd\u00edl od st\u00e1vaj\u00edc\u00edch implementac\u00ed Root of Trust se OpenTitan vyv\u00edj\u00ed podle konceptu \"bezpe\u010dnost prost\u0159ednictv\u00edm transparentnosti\", co\u017e zahrnuje dostupnost k\u00f3du a sch\u00e9mat, a tak\u00e9 zcela otev\u0159en\u00fd proces v\u00fdvoje, kter\u00fd nen\u00ed v\u00e1z\u00e1n na konkr\u00e9tn\u00ed dodavatele a v\u00fdrobce \u010dip\u016f. Z\u00e1kladem \u0159e\u0161en\u00ed pou\u017eit\u00fdch v OpenTitan jsou technologie ji\u017e vyu\u017e\u00edvan\u00e9 v kryptografick\u00fdch USB tokenech Google Titan a v TPM \u010dipech pro zaji\u0161t\u011bn\u00ed ov\u011b\u0159en\u00e9ho zav\u00e1d\u011bn\u00ed, kter\u00e9 se instaluj\u00ed na serverech<\/a> infrastruktu\u0159e Google, stejn\u011b jako na za\u0159\u00edzen\u00edch Chromebook a Pixel. <\/p>\n

OpenTitan je platforma pro vytv\u00e1\u0159en\u00ed d\u016fv\u011bryhodn\u00fdch hardwarov\u00fdch komponent\u016f (RoT, Root of Trust), kter\u00e1 m\u016f\u017ee b\u00fdt pou\u017eita tam, kde je t\u0159eba zaru\u010dit celistvost hardwarov\u00fdch a softwarov\u00fdch prvk\u016f syst\u00e9mu, co\u017e zaji\u0161\u0165uje, \u017ee kritick\u00e9 \u010d\u00e1sti syst\u00e9mu nebyly zfal\u0161ov\u00e1ny a vych\u00e1zej\u00ed z ov\u011b\u0159en\u00e9ho a autorizovan\u00e9ho v\u00fdrobce k\u00f3du. Projekt poskytuje hotov\u00fd, prov\u011b\u0159en\u00fd a spolehliv\u00fd r\u00e1mec, kter\u00fd zvy\u0161uje d\u016fv\u011bru v vytv\u00e1\u0159en\u00e9 \u0159e\u0161en\u00ed a sni\u017euje n\u00e1klady na v\u00fdvoj specializovan\u00fdch \u010dip\u016f pro zaji\u0161t\u011bn\u00ed bezpe\u010dnosti. <\/p>\n

\u010cipy na b\u00e1zi OpenTitan mohou b\u00fdt vyu\u017e\u00edv\u00e1ny v serverov\u00fdch z\u00e1kladn\u00edch desk\u00e1ch, s\u00ed\u0165ov\u00fdch kart\u00e1ch, spot\u0159ebitelsk\u00fdch za\u0159\u00edzen\u00edch, routerech a za\u0159\u00edzen\u00edch Internetu v\u011bc\u00ed pro ov\u011b\u0159ov\u00e1n\u00ed firmware a na\u010d\u00edtac\u00edch komponent, stejn\u011b jako pro generov\u00e1n\u00ed kryptograficky unik\u00e1tn\u00edch identifik\u00e1tor\u016f syst\u00e9mu (ochrana proti podvr\u017een\u00ed za\u0159\u00edzen\u00ed), ochranu kryptografick\u00fdch kl\u00ed\u010d\u016f (izolace kl\u00ed\u010d\u016f v p\u0159\u00edpad\u011b fyzick\u00e9ho p\u0159\u00edstupu \u00fato\u010dn\u00edka k za\u0159\u00edzen\u00ed), poskytov\u00e1n\u00ed slu\u017eeb souvisej\u00edc\u00edch s bezpe\u010dnost\u00ed a veden\u00ed izolovan\u00e9ho auditu, kter\u00fd nelze upravit nebo smazat. <\/p>\n

OpenTitan zahrnuje r\u016fzn\u00e9 logick\u00e9 bloky, kter\u00e9 jsou v RoT \u010dipech \u017e\u00e1dan\u00e9, jako je otev\u0159en\u00fd mikropo\u010d\u00edta\u010d na b\u00e1zi architektury RISC-V (RV32IMCB Ibex), kryptografick\u00e9 koprocesory, hardwarov\u00fd gener\u00e1tor n\u00e1hodn\u00fdch \u010d\u00edsel, spr\u00e1vce kl\u00ed\u010d\u016f s podporou DICE, mechanismus bezpe\u010dn\u00e9ho ukl\u00e1d\u00e1n\u00ed dat v trval\u00e9 a opera\u010dn\u00ed pam\u011bti, technologie ochrany, bloky vstupu\/v\u00fdstupu, prost\u0159edky pro bezpe\u010dn\u00e9 zav\u00e1d\u011bn\u00ed atd. Za\u0159\u00edzen\u00ed tak\u00e9 poskytuje bloky s implementac\u00ed standardn\u00edch \u0161ifrovac\u00edch algoritm\u016f, jako jsou AES a HMAC-SHA256, a akceler\u00e1tor matematick\u00fdch operac\u00ed, kter\u00e9 se pou\u017e\u00edvaj\u00ed v algoritmech pro pr\u00e1ci s digit\u00e1ln\u00edmi podpisy na b\u00e1zi ve\u0159ejn\u00fdch kl\u00ed\u010d\u016f, jako je RSA a algoritmy na b\u00e1zi eliptick\u00fdch k\u0159ivek.

\"P\u0159edstaven<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f lowRISC, \u043a\u0443\u0440\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b RISC-V, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0433\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043a \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0443 \u0447\u0438\u043f\u0430, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0431\u0430\u0437\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b OpenTitan, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0435\u043a\u0442 \u0431\u044b\u043b \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google, \u043d\u043e \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 lowRISC \u043a \u0435\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0438\u0441\u044c \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Western Digital, Seagate, Nuvoton Technology, Winbond, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113632,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113631","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Byl p\u0159edstaven prvn\u00ed \u010dip na b\u00e1zi otev\u0159en\u00e9 platformy OpenTitan | ProHoster","description":"Neziskov\u00e1 organizace lowRISC, kter\u00e1 dohl\u00ed\u017e\u00ed na v\u00fdvoj voln\u011b p\u0159\u00edstupn\u00e9ho mikropo\u010d\u00edta\u010de na b\u00e1zi architektury RISC-V, ozn\u00e1mila dostupnost prvn\u00edho \u010dipu p\u0159ipraven\u00e9ho k s\u00e9riov\u00e9 v\u00fdrob\u011b, kter\u00fd byl postaven na t\u00e9to b\u00e1zi.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlen-pervyj-chip-na-baze-otkrytoj-platformy-opentitan","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0435\u0440\u0432\u044b\u0439 \u0447\u0438\u043f \u043d\u0430 \u0431\u0430\u0437\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b OpenTitan | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f lowRISC, \u043a\u0443\u0440\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b RISC-V, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0433\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043a \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0443 \u0447\u0438\u043f\u0430, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0431\u0430\u0437\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlen-pervyj-chip-na-baze-otkrytoj-platformy-opentitan","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-16T02:02:42+00:00","article:modified_time":"2024-02-16T02:02:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113631","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=113631"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113631\/revisions"}],"predecessor-version":[{"id":164375,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113631\/revisions\/164375"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/113632"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=113631"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=113631"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=113631"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}