{"id":52523,"date":"2019-11-10T00:00:00","date_gmt":"2019-11-09T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm"},"modified":"2020-02-18T14:00:16","modified_gmt":"2020-02-18T11:00:16","slug":"opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm","title":{"rendered":"Otev\u0159en\u00fd \u010dip OpenTitan nahrad\u00ed propriet\u00e1rn\u00ed ko\u0159eny d\u016fv\u011bry Intel a ARM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Otev\u0159en\u00fd \u010dip OpenTitan nahrad\u00ed propriet\u00e1rn\u00ed ko\u0159eny d\u016fv\u011bry Intel a ARM\" src=\"\/wp-content\/uploads\/2019\/11\/f772b9f7e7f57a5c6a700ac0ca6110b8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNeziskov\u00e1 organizace <noindex><a rel=\"nofollow\" href=\"https:\/\/www.lowrisc.org\/\">lowRISC<\/a><\/noindex> ve spolupr\u00e1ci s Googlem a dal\u0161\u00edmi sponzory 5. listopadu 2019 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.lowrisc.org\/blog\/2019\/11\/announcing-opentitan-the-first-transparent-silicon-root-of-trust\/\">p\u0159edstavila<\/a><\/noindex> projekt <noindex><a rel=\"nofollow\" href=\"https:\/\/opentitan.org\">OpenTitan<\/a><\/noindex>, kter\u00fd je ozna\u010dov\u00e1n jako \u201eprvn\u00ed otev\u0159en\u00fd projekt pro vytvo\u0159en\u00ed otev\u0159en\u00e9, kvalitn\u00ed architektury \u010dip\u016f s ko\u0159enem d\u016fv\u011bry (RoT) na hardwarov\u00e9 \u00farovni.\u201c<\/p>\n<p>OpenTitan na architektu\u0159e RISC-V je \u010dip specializovan\u00e9ho ur\u010den\u00ed pro instalaci na serverech v datov\u00fdch centrech a v jak\u00e9mkoli jin\u00e9m za\u0159\u00edzen\u00ed, kde je t\u0159eba zajistit autenticitu zav\u00e1d\u011bn\u00ed, chr\u00e1nit firmware p\u0159ed zm\u011bnami a vylou\u010dit mo\u017enost rootkit\u016f: jedn\u00e1 se o z\u00e1kladn\u00ed desky, s\u00ed\u0165ov\u00e9 karty, sm\u011brova\u010de, za\u0159\u00edzen\u00ed IoT, mobiln\u00ed gadgety atd.<\/p>\n<p>Samoz\u0159ejm\u011b, podobn\u00e9 moduly existuj\u00ed v modern\u00edch procesorech. Nap\u0159\u00edklad hardwarov\u00fd modul Intel Boot Guard je ko\u0159enem d\u016fv\u011bry v procesorech Intel. Ov\u011b\u0159uje autenticitu UEFI BIOS p\u0159ed zaveden\u00edm OS prost\u0159ednictv\u00edm \u0159et\u011bzce d\u016fv\u011bry. Ale ot\u00e1zka je, nakolik m\u016f\u017eeme d\u016fv\u011b\u0159ovat propriet\u00e1rn\u00edm ko\u0159en\u016fm d\u016fv\u011bry, pokud nem\u00e1me z\u00e1ruky absence chyb v designu a nen\u00ed mo\u017en\u00e9 to ov\u011b\u0159it? Viz \u010dl\u00e1nek <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/326556\/\">\u201eD\u016fv\u011bryhodn\u00e9 zav\u00e1d\u011bn\u00ed Schr\u00f6dingerovy ko\u010dky. Intel Boot Guard\u201c<\/a><\/noindex> s popisem toho, \u201ejak roky klonovan\u00e1 chyba v produkci n\u011bkolika dodavatel\u016f umo\u017e\u0148uje potenci\u00e1ln\u00edmu \u00fato\u010dn\u00edkovi vyu\u017e\u00edt tuto technologii k vytvo\u0159en\u00ed v syst\u00e9mu neodstraniteln\u00e9ho (i program\u00e1torem) skryt\u00e9ho rootkitu.\u201c<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nHrozba kompromitace hardwaru v dodavatelsk\u00e9m \u0159et\u011bzci je p\u0159ekvapiv\u011b re\u00e1ln\u00e1: podle v\u0161eho m\u016f\u017ee jak\u00fdkoli elektronick\u00fd nad\u0161enec <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/news\/t\/471398\/\">v p\u0159ip\u00e1jet \u0161peha na z\u00e1kladn\u00ed desku serveru<\/a><\/noindex>, s pou\u017eit\u00edm vybaven\u00ed v hodnot\u011b maxim\u00e1ln\u011b 200 dolar\u016f. N\u011bkte\u0159\u00ed experti podez\u00edraj\u00ed, \u017ee \u201eorganizace s rozpo\u010dtem v \u0159\u00e1du stovek milion\u016f dolar\u016f se t\u00edmto mohou zab\u00fdvat u\u017e mnoho let\u201c. A\u010dkoliv neexistuj\u00ed \u017e\u00e1dn\u00e9 d\u016fkazy, teoreticky je to mo\u017en\u00e9.<\/p>\n<blockquote><p>\u201ePokud nem\u016f\u017eete d\u016fv\u011b\u0159ovat hardwarov\u00e9mu zav\u00e1d\u011b\u010di, je po h\u0159e, \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.technologyreview.com\/s\/614675\/googles-new-chip-protects-the-cloud-where-its-most-vulnerable\/\">\u0159\u00edk\u00e1<\/a><\/noindex> Gavin Ferris, \u010dlen p\u0159edstavenstva lowRISC. \u2014 Nez\u00e1le\u017e\u00ed na tom, co d\u011bl\u00e1 opera\u010dn\u00ed syst\u00e9m \u2014 pokud jste v okam\u017eiku zav\u00e1d\u011bn\u00ed opera\u010dn\u00edho syst\u00e9mu kompromitov\u00e1ni, zbytek je u\u017e technika. S v\u00e1mi je u\u017e konec.\u201c<\/p><\/blockquote>\n<p>\nTento probl\u00e9m by m\u011bla vy\u0159e\u0161it prvn\u00ed sv\u00e9ho druhu otev\u0159en\u00e1 hardwarov\u00e1 platforma OpenTitan (<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lowRISC\/opentitan\">GitHub repozit\u00e1\u0159<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.opentitan.org\">dokumentace<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.opentitan.org\/hw\/\">hardwarov\u00e9 specifikace<\/a><\/noindex>). Odstran\u011bn\u00ed propriet\u00e1rn\u00edch \u0159e\u0161en\u00ed povede k p\u0159etvo\u0159en\u00ed \u201enepohybliv\u00e9ho a nedokonal\u00e9ho odv\u011btv\u00ed RoT\u201c, domn\u00edv\u00e1 se Google.<\/p>\n<p>Spole\u010dnost Google zah\u00e1jila v\u00fdvoj Titan a objevila opera\u010dn\u00ed syst\u00e9m Minix, integrovan\u00fd do \u010dip\u016f Intel Management Engine (ME). Tento slo\u017eit\u00fd opera\u010dn\u00ed syst\u00e9m nep\u0159edv\u00eddateln\u00fdm a ne\u0159\u00edzen\u00fdm zp\u016fsobem zvy\u0161oval plochu \u00fatoku. Google <noindex><a rel=\"nofollow\" href=\"https:\/\/www.tomshardware.com\/news\/google-removing-minix-management-engine-intel,35876.html\">se pokusila zbavit Intel Management Engine (ME)<\/a><\/noindex>, ale ne\u00fasp\u011b\u0161n\u011b.<\/p>\n<h1>Co je ko\u0159en d\u016fv\u011bry?<\/h1>\n<p>\nKa\u017ed\u00e1 f\u00e1ze procesu zav\u00e1d\u011bn\u00ed syst\u00e9mu ov\u011b\u0159uje autenticitu n\u00e1sleduj\u00edc\u00ed f\u00e1ze, \u010d\u00edm\u017e vytv\u00e1\u0159\u00ed <i>\u0159et\u011bzec d\u016fv\u011bry.<\/i>.<\/p>\n<p>Ko\u0159en d\u016fv\u011bry (Root of Trust, RoT) je hardwarov\u00e1 autentizace, kter\u00e1 zaji\u0161\u0165uje, \u017ee zdroj prvn\u00ed vykon\u00e1van\u00e9 instrukce v \u0159et\u011bzci d\u016fv\u011bry nelze m\u011bnit. RoT je z\u00e1kladn\u00ed ochranou proti rootkit\u016fm. To je kl\u00ed\u010dov\u00e1 f\u00e1ze procesu zav\u00e1d\u011bn\u00ed, kter\u00e1 se pod\u00edl\u00ed na dal\u0161\u00edm spu\u0161t\u011bn\u00ed syst\u00e9mu \u2013 od BIOSu a\u017e po opera\u010dn\u00ed syst\u00e9m a aplikace. Mus\u00ed ov\u011b\u0159ovat autenticitu ka\u017ed\u00e9 dal\u0161\u00ed f\u00e1ze zav\u00e1d\u011bn\u00ed. K tomu se v ka\u017ed\u00e9 f\u00e1zi pou\u017e\u00edv\u00e1 sada kl\u00ed\u010d\u016f s digit\u00e1ln\u00edm podpisem. Jedn\u00edm z nejpopul\u00e1rn\u011bj\u0161\u00edch standard\u016f hardwarov\u00e9 ochrany kl\u00ed\u010d\u016f je TPM (Trusted Platform Module, d\u016fv\u011bryhodn\u00fd platformn\u00ed modul).<\/p>\n<p><img decoding=\"async\" alt=\"Otev\u0159en\u00fd \u010dip OpenTitan nahrad\u00ed propriet\u00e1rn\u00ed ko\u0159eny d\u016fv\u011bry Intel a ARM\" src=\"\/wp-content\/uploads\/2019\/11\/f7d282d85ae0d7bdc0cbd7e702da4df3.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Zaveden\u00ed ko\u0159ene d\u016fv\u011bry. V\u00fd\u0161e je uveden p\u011btif\u00e1zov\u00fd zav\u00e1d\u011bn\u00ed, kter\u00e9 vytv\u00e1\u0159\u00ed \u0159et\u011bzec d\u016fv\u011bry a za\u010d\u00edn\u00e1 bootloaderem um\u00edst\u011bn\u00fdm v nem\u011bniteln\u00e9 pam\u011bti. V ka\u017ed\u00e9 f\u00e1zi se pou\u017e\u00edv\u00e1 ve\u0159ejn\u00fd kl\u00ed\u010d, kter\u00fd ov\u011b\u0159uje autenticitu n\u00e1sleduj\u00edc\u00edho na\u010d\u00edtan\u00e9ho komponentu. Ilustrace z knihy Perryho Leeho <noindex><a rel=\"nofollow\" href=\"https:\/\/dmkpress.com\/catalog\/computer\/os\/978-5-97060-672-8\/\">\u201eArchitektura internetu v\u011bc\u00ed\u201c<\/a><\/noindex><\/i><\/p>\n<p>RoT m\u016f\u017ee b\u00fdt spou\u0161t\u011bn r\u016fzn\u00fdmi zp\u016fsoby:<\/p>\n<ul>\n<li>na\u010dten\u00ed obrazu a ko\u0159enov\u00e9ho kl\u00ed\u010de z firmware nebo nem\u011bniteln\u00e9 pam\u011bti;\n<\/li>\n<li>uchov\u00e1v\u00e1n\u00ed ko\u0159enov\u00e9ho kl\u00ed\u010de v jednou zapisovateln\u00e9 pam\u011bti pomoc\u00ed f\u00fazov\u00fdch bit\u016f;\n<\/li>\n<li>na\u010dten\u00ed k\u00f3du z chr\u00e1n\u011bn\u00e9 oblasti pam\u011bti do chr\u00e1n\u011bn\u00e9ho \u00falo\u017ei\u0161t\u011b.<\/li>\n<\/ul>\n<p>\nV r\u016fzn\u00fdch procesorech je ko\u0159en d\u016fv\u011bry implementov\u00e1n r\u016fzn\u00fdmi zp\u016fsoby. Intel a ARM<br \/>\npodporuj\u00ed n\u00e1sleduj\u00edc\u00ed technologie:<\/p>\n<ul>\n<li><b>ARM TrustZone<\/b>. ARM prod\u00e1v\u00e1 v\u00fdrobc\u016fm \u010dip\u016f propriet\u00e1rn\u00ed k\u0159em\u00edkov\u00fd blok, kter\u00fd poskytuje z\u00e1klad d\u016fv\u011bry a dal\u0161\u00ed bezpe\u010dnostn\u00ed mechanismy. T\u00edmto zp\u016fsobem je mikroprocesor odd\u011blen od nezabezpe\u010den\u00e9ho j\u00e1dra; prov\u00e1d\u00ed Trusted OS \u2014 zabezpe\u010den\u00fd opera\u010dn\u00ed syst\u00e9m s p\u0159esn\u011b definovan\u00fdm rozhran\u00edm pro interakci s nezabezpe\u010den\u00fdmi komponenty. Ochr\u00e1n\u011bn\u00e9 zdroje se nach\u00e1zej\u00ed v d\u016fv\u011bryhodn\u00e9m j\u00e1dru a m\u011bly by b\u00fdt co nejleh\u010d\u00ed. P\u0159echod mezi komponenty r\u016fzn\u00fdch typ\u016f se prov\u00e1d\u00ed pomoc\u00ed hardwarov\u00e9ho p\u0159ep\u00edn\u00e1n\u00ed kontextu, co\u017e eliminuje pot\u0159ebu zabezpe\u010den\u00e9ho softwaru pro monitorov\u00e1n\u00ed. \n<\/li>\n<li><b>Intel Boot Guard<\/b> \u2014 je hardwarov\u00fd mechanismus pro autentizaci po\u010d\u00e1te\u010dn\u00edho boot bloku pomoc\u00ed kryptografick\u00fdch prost\u0159edk\u016f nebo procesem m\u011b\u0159en\u00ed. K ov\u011b\u0159en\u00ed po\u010d\u00e1te\u010dn\u00edho bloku mus\u00ed v\u00fdrobce vygenerovat 2048-bitov\u00fd kl\u00ed\u010d, kter\u00fd se skl\u00e1d\u00e1 ze dvou \u010d\u00e1st\u00ed: ve\u0159ejn\u00e9 a soukrom\u00e9. Ve\u0159ejn\u00fd kl\u00ed\u010d je vyti\u0161t\u011bn na desce procesem \"detonace\" f\u00fazov\u00fdch bit\u016f v pr\u016fb\u011bhu v\u00fdroby. Tyto bity jsou jednor\u00e1zov\u00e9 a nelze je m\u011bnit. Soukrom\u00e1 \u010d\u00e1st kl\u00ed\u010de generuje digit\u00e1ln\u00ed podpis pro n\u00e1sledn\u00e9 ov\u011b\u0159en\u00ed autenticity bootovac\u00edho procesu.<\/li>\n<\/ul>\n<p>\nPlatforma OpenTitan odhaluje kl\u00ed\u010dov\u00e9 \u010d\u00e1sti takov\u00e9ho hardwarov\u011b-softwarov\u00e9ho syst\u00e9mu, jak je zn\u00e1zorn\u011bno v diagramu n\u00ed\u017ee.<\/p>\n<p><img decoding=\"async\" alt=\"Otev\u0159en\u00fd \u010dip OpenTitan nahrad\u00ed propriet\u00e1rn\u00ed ko\u0159eny d\u016fv\u011bry Intel a ARM\" src=\"\/wp-content\/uploads\/2019\/11\/ff75fd23edf8654b1308a4f5b06b79b1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>Platforma OpenTitan<\/h1>\n<p>\nV\u00fdvoj platformy OpenTitan prob\u00edh\u00e1 pod veden\u00edm neziskov\u00e9 organizace lowRISC. T\u00fdm in\u017een\u00fdr\u016f s\u00eddl\u00ed v Cambridge (Velk\u00e1 Brit\u00e1nie) a hlavn\u00edm sponzorem je Google. Zakl\u00e1daj\u00edc\u00ed partne\u0159i zahrnuj\u00ed \u0160v\u00fdcarskou vysokou \u0161kolu technickou v Curychu, G+D Mobile Security, Nuvoton Technology a Western Digital.<\/p>\n<p>Google <noindex><a rel=\"nofollow\" href=\"https:\/\/opensource.googleblog.com\/2019\/11\/opentitan-open-sourcing-transparent.html\">publikovala ozn\u00e1men\u00ed<\/a><\/noindex> projektu na firemn\u00edm blogu Google Open Source. Spole\u010dnost uvedla, \u017ee OpenTitan se sna\u017e\u00ed \"poskytovat vysoce kvalitn\u00ed doporu\u010den\u00ed pro n\u00e1vrh a integraci RoT pro pou\u017eit\u00ed na serverech datov\u00fdch center, \u00falo\u017ei\u0161t\u00edch, perifern\u00edch za\u0159\u00edzen\u00edch a mnoha dal\u0161\u00edch.\"<\/p>\n<p>Z\u00e1klad d\u016fv\u011bry je prvn\u00ed \u010dl\u00e1nek v \u0159et\u011bzci d\u016fv\u011bry na nejni\u017e\u0161\u00ed \u00farovni v d\u016fv\u011bryhodn\u00e9m v\u00fdpo\u010detn\u00edm modulu, kter\u00e9mu syst\u00e9m v\u017edy zcela d\u016fv\u011b\u0159uje.<\/p>\n<p>RoT je kriticky d\u016fle\u017eit\u00fd pro aplikace, v\u010detn\u011b infrastruktur ve\u0159ejn\u00fdch kl\u00ed\u010d\u016f (PKI). Je to z\u00e1klad bezpe\u010dnostn\u00edho syst\u00e9mu, na kter\u00e9m stoj\u00ed slo\u017eit\u00e9 syst\u00e9my, jako je aplikace IoT nebo datov\u00e9 centrum. Proto je jasn\u00e9, pro\u010d Google tento projekt podporuje. V sou\u010dasnosti m\u00e1 19 datov\u00fdch center na p\u011bti kontinentech. Datov\u00e1 centra, \u00falo\u017ei\u0161t\u011b a kritick\u00e9 aplikace p\u0159edstavuj\u00ed rozs\u00e1hlou \u00fatokovou plochu, a pro ochranu t\u00e9to infrastruktury Google p\u016fvodn\u011b vyvinul sv\u016fj vlastn\u00ed ko\u0159en d\u016fv\u011bry na \u010dipu Titan.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/cloud.google.com\/blog\/products\/gcp\/titan-in-depth-security-in-plaintext\">Propriet\u00e1rn\u00ed \u010dip Titan<\/a><\/noindex> pro datov\u00e1 centra Google byl poprv\u00e9 p\u0159edstaven <noindex><a rel=\"nofollow\" href=\"https:\/\/www.businessinsider.com\/google-cloud-urs-holzle-2017-3\">v b\u0159eznu 2017<\/a><\/noindex> na konferenci Google Cloud Next. \"Na\u0161e po\u010d\u00edta\u010de prov\u00e1d\u011bj\u00ed kryptografick\u00e9 ov\u011b\u0159en\u00ed ka\u017ed\u00e9ho bal\u00ed\u010dku s softwarem, a pot\u00e9 se rozhoduj\u00ed, zda mu poskytnout p\u0159\u00edstup k s\u00ed\u0165ov\u00fdm zdroj\u016fm. Titan se integruje do tohoto procesu a nab\u00edz\u00ed dal\u0161\u00ed vrstvy ochrany,\" \u0159ekli z\u00e1stupci Googlu b\u011bhem t\u00e9to prezentace.<\/p>\n<p><img decoding=\"async\" alt=\"Otev\u0159en\u00fd \u010dip OpenTitan nahrad\u00ed propriet\u00e1rn\u00ed ko\u0159eny d\u016fv\u011bry Intel a ARM\" src=\"\/wp-content\/uploads\/2019\/11\/fc7be7d9f07204c5024648659bb5c98e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>\u010cip Titan v serveru Google<\/i><\/p>\n<p>Architektura Titan byla vlastnictv\u00edm Google, ale nyn\u00ed se st\u00e1v\u00e1 ve\u0159ejn\u00fdm majetkem v r\u00e1mci open-source projektu. <\/p>\n<p>Prvn\u00ed f\u00e1ze projektu zahrnuje vytv\u00e1\u0159en\u00ed logick\u00e9ho n\u00e1vrhu RoT na \u00farovni \u010dipu, v\u010detn\u011b open-source mikroprocesoru <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lowRISC\/ibex\/\">lowRISC ibex<\/a><\/noindex>, kryptografick\u00fdch procesor\u016f, hardwarov\u00e9ho gener\u00e1toru n\u00e1hodn\u00fdch \u010d\u00edsel, hierarchie kl\u00ed\u010d\u016f a pam\u011bti pro nevolatiln\u00ed a volatiln\u00ed \u00falo\u017ei\u0161t\u011b, ochrann\u00fdch mechanism\u016f, perifern\u00edch za\u0159\u00edzen\u00ed a bezpe\u010dn\u00fdch proces\u016f spou\u0161t\u011bn\u00ed.<\/p>\n<p>Google \u0159\u00edk\u00e1, \u017ee OpenTitan vych\u00e1z\u00ed ze t\u0159\u00ed z\u00e1kladn\u00edch princip\u016f: <\/p>\n<ul>\n<li>ka\u017ed\u00fd m\u00e1 mo\u017enost platformu ov\u011b\u0159it a p\u0159isp\u011bt; <\/li>\n<li>zv\u00fd\u0161en\u00e1 flexibilita d\u00edky otev\u0159en\u00ed logicky bezpe\u010dn\u00e9ho n\u00e1vrhu, kter\u00fd nen\u00ed blokov\u00e1n propriet\u00e1rn\u00edmi z\u00e1kazy dodavatele;\n<\/li>\n<li>kvalita zaji\u0161t\u011bna nejen samotn\u00fdm n\u00e1vrhem, ale tak\u00e9 referen\u010dn\u00edmi firmwary a dokumentac\u00ed.<\/li>\n<\/ul>\n<p>\n\u201eSou\u010dasn\u00e9 \u010dipy s d\u016fv\u011bryhodn\u00fdmi ko\u0159eny jsou velmi propriet\u00e1rn\u00ed. Tvrd\u00ed, \u017ee jsou bezpe\u010dn\u00e9, ale ve skute\u010dnosti tomu zase v\u011b\u0159\u00edte a nem\u016f\u017eete si je ov\u011b\u0159it, \u201c \u0159\u00edk\u00e1 Dominic Rizzo, vedouc\u00ed specialista na bezpe\u010dnost projektu Google Titan. \u201ePoprv\u00e9 nyn\u00ed existuje mo\u017enost zajistit bezpe\u010dnost bez slep\u00e9 v\u00edry ve v\u00fdvoj\u00e1\u0159e propriet\u00e1rn\u00edho n\u00e1vrhu d\u016fv\u011bryhodn\u00fdch ko\u0159en\u016f. Tak\u017ee z\u00e1klad nen\u00ed jen siln\u00fd, lze jej tak\u00e9 ov\u011b\u0159it.\u201c <\/p>\n<p>Rizzo dodal, \u017ee OpenTitan lze pova\u017eovat za \u201eradik\u00e1ln\u011b transparentn\u00ed design ve srovn\u00e1n\u00ed se sou\u010dasn\u00fdm stavem v\u011bc\u00ed.\u201c<\/p>\n<p>Podle v\u00fdvoj\u00e1\u0159\u016f by se OpenTitan rozhodn\u011b nem\u011bl pova\u017eovat za hotov\u00fd produkt, proto\u017ee v\u00fdvoj je\u0161t\u011b nen\u00ed dokon\u010den. Specifikace a design byly z\u00e1m\u011brn\u011b zve\u0159ejn\u011bny uprost\u0159ed v\u00fdvoje, aby je mohl ka\u017ed\u00fd ov\u011b\u0159it, p\u0159isp\u011bt a zlep\u0161it syst\u00e9m p\u0159ed zah\u00e1jen\u00edm v\u00fdroby. <\/p>\n<p>Pro zah\u00e1jen\u00ed v\u00fdroby \u010dip\u016f OpenTitan je nutn\u00e9 podat \u017e\u00e1dost a proj\u00edt certifikac\u00ed. Podle v\u0161eho nen\u00ed t\u0159eba platit \u017e\u00e1dn\u00e9 licen\u010dn\u00ed poplatky.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dcmiran\/blog\/474900\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f lowRISC \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 Google \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043f\u043e\u043d\u0441\u043e\u0440\u043e\u0432 5 \u043d\u043e\u044f\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 OpenTitan, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u00ab\u043f\u0435\u0440\u0432\u044b\u043c \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u043f\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439, \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c \u0441 \u043a\u043e\u0440\u043d\u0435\u043c \u0434\u043e\u0432\u0435\u0440\u0438\u044f (RoT) \u043d\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u00bb. OpenTitan \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 RISC-V\u00a0\u2014 \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0432 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u0430\u0445 \u0438 \u0432 \u043b\u044e\u0431\u043e\u043c \u0434\u0440\u0443\u0433\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438, \u0433\u0434\u0435 \u043d\u0443\u0436\u043d\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52523","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u0439 \u0447\u0438\u043f OpenTitan \u0437\u0430\u043c\u0435\u043d\u0438\u0442 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u044b\u0435 \u043a\u043e\u0440\u043d\u0438 \u0434\u043e\u0432\u0435\u0440\u0438\u044f Intel \u0438 ARM | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-09T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Open-source \u010dip OpenTitan nahrad\u00ed propriet\u00e1rn\u00ed ko\u0159eny d\u016fv\u011bry Intel a ARM | ProHoster","description":"Nekomer\u010dn\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u0439 \u0447\u0438\u043f OpenTitan \u0437\u0430\u043c\u0435\u043d\u0438\u0442 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u044b\u0435 \u043a\u043e\u0440\u043d\u0438 \u0434\u043e\u0432\u0435\u0440\u0438\u044f Intel \u0438 ARM | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-09T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52523","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 03:53:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:41:25","updated":"2026-01-24 03:53:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=52523"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52523\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=52523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=52523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=52523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}