Google has introduced the open project OpenTitan for creating trustworthy chips.

Google Inc. introduced a new open project OpenTitan, representing a platform for creating trustworthy hardware components (RoT, Root of Trust). The foundation of OpenTitan is based on technologies already used in cryptographic USB tokens Google Titan and TPM chips for ensuring verified boot, installed on servers in Google's infrastructure, as well as on Chromebook and Pixel devices. The associated project code and specifications for hardware components has been published are available on GitHub under the Apache 2.0 license.

Unlike existing implementations of the Root of Trust, the new project is being developed according to the concept of 'security through transparency,' which entails a completely open development process and accessibility of code and schematics. OpenTitan can be used as a ready-made, tested, and reliable framework that enhances trust in created solutions and reduces costs in developing specialized security chips. OpenTitan will evolve in an independent environment as a collaborative project, not tied to specific vendors and chip manufacturers.

The development of OpenTitan will be overseen by a non-profit organization lowRISC, which is developing a free microprocessor based on the RISC-V architecture. Companies such as G+D Mobile Security, Nuvoton Technology, and Western Digital, as well as the Swiss Federal Institute of Technology in Zurich and the University of Cambridge, whose researchers are developing a secure processor architecture, have already joined the collaborative work on OpenTitan. CHERI (Capability Hardware Enhanced RISC Instructions) and recently received received a grant of 190 million euros to adapt related technologies for ARM processors and create a prototype of the new hardware platform Morello.

The OpenTitan project encompasses the development of various logical components required in RoT chips, including an open microprocessor lowRISC Ibex based on RISC-V architecture, cryptographic coprocessors, a hardware random number generator, key and data storage hierarchy in persistent and volatile memory, protection mechanisms, input/output blocks, secure booting means, etc. OpenTitan can be implemented where it is necessary to ensure the integrity of hardware and software components of the system, certifying that critical system components have not been tampered with and are based on verified and manufacturer-authorized code.

Chips based on OpenTitan can be used in
server motherboards, network cards, consumer devices, routers, IoT devices for verifying firmware (detecting firmware modifications by malware), providing a cryptographically unique system identifier (protection against hardware tampering), safeguarding cryptographic keys (isolating keys in the event of a malicious actor gaining physical access to the hardware), offering security-related services, and maintaining an isolated audit log that cannot be edited or erased.

Source: opennet.ru