Google ya buɗe aikin OpenTitan don ƙirƙirar amintattun kwakwalwan kwamfuta

Google gabatar sabon aikin budewa BudaTitan, wanda shine dandamali don ƙirƙirar amintattun kayan aikin kayan aiki (RoT, Tushen Amincewa). OpenTitan ya dogara ne akan fasahar da aka riga aka yi amfani da su a cikin alamun kebul na sirri Titin Google и Farashin TPM don samar da ingantattun abubuwan zazzagewa da aka sanya akan sabar a cikin kayan aikin Google, da kuma akan na'urorin Chromebooks da Pixel. Lambar da ke da alaƙa da aikin da ƙayyadaddun kayan aikin buga akan GitHub a ƙarƙashin lasisin Apache 2.0.

Ba kamar aiwatar da Tushen Amincewa da ake da shi ba, ana haɓaka sabon aikin daidai da manufar “tsaro ta hanyar bayyana gaskiya”, yana nuna tsarin ci gaba gabaɗaya da kuma samun lambobi da ƙira. Ana iya amfani da OpenTitan azaman shirye-shiryen da aka yi, tabbatarwa kuma abin dogaro wanda ke ba ku damar haɓaka amincewa da hanyoyin da ake ƙirƙira da rage farashi yayin haɓaka kwakwalwan tsaro na musamman. OpenTitan zai haɓaka akan dandamali mai zaman kansa azaman aikin haɗin gwiwa, ba a haɗa shi da takamaiman masu samarwa da masu kera guntu ba.

Ƙungiya mai zaman kanta za ta kula da ci gaban OpenTitan lowRISC, haɓaka microprocessor kyauta bisa tsarin RISC-V. Kamfanonin G + D Mobile Security, Nuvoton Technology da Western Digital sun riga sun shiga aikin haɗin gwiwa a kan OpenTitan, da ETH Zurich da Jami'ar Cambridge, masu bincike daga waɗanda ke haɓaka ingantaccen kayan aikin sarrafawa. CHERI (Apability Hardware Enhanced RISC Umarnin) kuma kwanan nan karbi kyautar Yuro miliyan 190 don daidaita fasahohin da ke da alaƙa da na'urori na ARM da ƙirƙirar samfuri na sabon dandamalin kayan masarufi na Morello.

Aikin OpenTitan ya ƙunshi haɓaka abubuwan dabaru daban-daban da ake buƙata a cikin kwakwalwan RoT, gami da buɗe microprocessor. lowRISC Ibex dangane da gine-ginen RISC-V, masu haɗin gwiwar cryptographic, janareta na lambar bazuwar hardware, matsayi na maɓalli da adana bayanai a cikin dindindin da RAM, hanyoyin tsaro, sassan shigarwa / fitarwa, amintattun kayan aikin taya, da sauransu. Ana iya amfani da OpenTitan inda dole ne a tabbatar da amincin kayan masarufi da kayan masarufi na tsarin, tabbatar da cewa ba a lalata abubuwan da ke da mahimmancin tsarin ba kuma sun dogara ne akan ingantacciyar lambar da masana'anta suka ba da izini.

Ana iya amfani da Chips bisa OpenTitan a ciki
uwar garken uwar garken uwar garken, katunan cibiyar sadarwa, na'urorin mabukaci, masu amfani da hanyar sadarwa, Intanet na na'urori don tabbatar da firmware (gano gyare-gyaren firmware ta malware), samar da mai gano tsarin keɓancewa na musamman (kariya daga sauya kayan masarufi), kariyar maɓallan sirri (keɓancewar maɓalli idan akwai). maharin ya sami damar yin amfani da kayan aiki na zahiri), samar da ayyuka masu alaƙa da tsaro da kiyaye keɓaɓɓen rajistan binciken da ba za a iya gyara ko gogewa ba.

source: budenet.ru