{"id":105364,"date":"2022-10-23T15:36:39","date_gmt":"2022-10-23T13:36:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov"},"modified":"2022-10-23T15:36:39","modified_gmt":"2022-10-23T13:36:47","slug":"predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","title":{"rendered":"Bemutat\u00e1sra ker\u00fclt a Caliptra, egy ny\u00edlt IP-blokk megb\u00edzhat\u00f3 chipek l\u00e9trehoz\u00e1s\u00e1hoz","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Google, AMD, NVIDIA \u00e9s Microsoft k\u00f6z\u00f6sen kidolgozott Caliptra projekt keret\u00e9ben egy ny\u00edlt \u00e1ramk\u00f6r-tervez\u00e9si blokkot (IP-blokkot) fejlesztettek ki, amely be\u00e9p\u00edthet\u0151 a chipjeikbe az \u00e1rus\u00edt\u00f3 megb\u00edzhat\u00f3 hardverkomponensek (RoT, Root of Trust) l\u00e9trehoz\u00e1s\u00e1hoz. A Caliptra egy k\u00fcl\u00f6n\u00e1ll\u00f3 hardverblokk, saj\u00e1t mem\u00f3ri\u00e1val, processzorral \u00e9s kriptogr\u00e1fiai primit\u00edv\u00e1k megval\u00f3s\u00edt\u00e1s\u00e1val, amely biztos\u00edtja a bet\u00f6lt\u00e9si folyamat, a haszn\u00e1lt firmware-ek \u00e9s az energiatakar\u00e9kos mem\u00f3ri\u00e1ban t\u00e1rolt eszk\u00f6zkonfigur\u00e1ci\u00f3 verifik\u00e1l\u00e1s\u00e1t. <\/p>\n

A Caliptra integr\u00e1lhat\u00f3 k\u00fcl\u00f6nb\u00f6z\u0151 chipekbe, amelyek egy f\u00fcggetlen hardverblokkot l\u00e1t el, amely biztos\u00edtja az integrit\u00e1s ellen\u0151rz\u00e9s\u00e9t \u00e9s garant\u00e1lja, hogy az eszk\u00f6zben a gy\u00e1rt\u00f3 \u00e1ltal j\u00f3v\u00e1hagyott firmware-eket haszn\u00e1lnak. A Caliptra jelent\u0151sen egyszer\u0171s\u00edtheti \u00e9s egys\u00e9ges\u00edtheti a be\u00e9p\u00edtett hardveres kriptogr\u00e1fiai verifik\u00e1ci\u00f3s mechanizmusok integr\u00e1l\u00e1s\u00e1t CPU-kba, GPU-kba, SoC-okba, ASIC-okba, h\u00e1l\u00f3zati adapterekbe, SSD-kbe \u00e9s egy\u00e9b berendez\u00e9sekbe. <\/p>\n

A platform \u00e1ltal biztos\u00edtott kriptogr\u00e1fiai integrit\u00e1s- \u00e9s hiteles\u00edt\u00e9si verifik\u00e1l\u00f3 eszk\u00f6z\u00f6k v\u00e9delmet ny\u00fajtanak a hardverkomponensek sz\u00e1m\u00e1ra a firmware-ekbe val\u00f3 rosszindulat\u00fa m\u00f3dos\u00edt\u00e1sok be\u00e9p\u00edt\u00e9se ellen, \u00e9s biztons\u00e1goss\u00e1 teszik a rendszerind\u00edt\u00e1si \u00e9s konfigur\u00e1ci\u00f3s t\u00e1rol\u00e1si folyamatokat, ezzel megakad\u00e1lyozva a f\u0151 rendszer kompromitt\u00e1l\u00f3d\u00e1s\u00e1t a hardverkomponensek elleni t\u00e1mad\u00e1sok vagy a chipgy\u00e1rt\u00e1si l\u00e1ncokban t\u00f6rt\u00e9nt rosszindulat\u00fa m\u00f3dos\u00edt\u00e1sok r\u00e9v\u00e9n. A Caliptra lehet\u0151s\u00e9get biztos\u00edt a firmware-friss\u00edt\u00e9sek \u00e9s a platformhoz kapcsol\u00f3d\u00f3 adatok (RTU, Root of Trust for Update) hiteles\u00edt\u00e9s\u00e9nek ellen\u0151rz\u00e9s\u00e9re, valamint a firmware-ek \u00e9s kritikus adatok (RTD, Root of Trust for Detection) s\u00e9r\u00fcl\u00e9seinek \u00e9szlel\u00e9s\u00e9re, valamint a s\u00e9r\u00fclt firmware-ek \u00e9s adatok (RTRec, Root of Trust for Recovery) helyre\u00e1ll\u00edt\u00e1s\u00e1ra. <\/p>\n

A Caliptra fejleszt\u00e9se az Open Compute k\u00f6z\u00f6s projekt keretein bel\u00fcl zajlik, amely c\u00e9lja a ny\u00edlt hardverspecifik\u00e1ci\u00f3k fejleszt\u00e9se a datacenter-ek felszerel\u00e9s\u00e9hez. A Calipr\u00e1val kapcsolatos specifik\u00e1ci\u00f3kat az Open Web Foundation Agreement (OWFa) szerz\u0151d\u00e9s keretein bel\u00fcl terjesztik, amelyet a ny\u00edlt szabv\u00e1nyok terjeszt\u00e9s\u00e9re alak\u00edtottak ki (hasonl\u00f3an a ny\u00edlt forr\u00e1sk\u00f3d\u00fa licenchez a specifik\u00e1ci\u00f3k eset\u00e9ben). Az OWFa alkalmaz\u00e1sa lehet\u0151v\u00e9 teszi, hogy a specifik\u00e1ci\u00f3 alapj\u00e1n saj\u00e1t term\u00e9keket \u00e9s sz\u00e1rmaztatott megval\u00f3s\u00edt\u00e1sokat hozzanak l\u00e9tre royalty-ig\u00e9nyek n\u00e9lk\u00fcl, \u00e9s lehet\u0151s\u00e9get biztos\u00edt b\u00e1rmely szervezet sz\u00e1m\u00e1ra, hogy r\u00e9szt vegyen a specifik\u00e1ci\u00f3 fejleszt\u00e9s\u00e9ben. <\/p>\n

A B\u00e1zis IP-blokk megval\u00f3s\u00edt\u00e1sa a ny\u00edlt RISC-V SWeRV EL2 processzorra \u00e9p\u00fcl, 384 KB RAM-mal (128 KB DCCM, 128 KB ICCM0 \u00e9s 128 KB SRAM) \u00e9s 32 KB ROM-mal rendelkezik. A t\u00e1mogatott kriptogr\u00e1fiai algoritmusok k\u00f6z\u00f6tt szerepel a SHA256, SHA384, SHA512, ECC Secp384r1, HMAC-DRBG, HMAC SHA384, AES256-ECB, AES256-CBC \u00e9s AES256-GCM.

\"Bemutat\u00e1sra<\/center>
\"Bemutat\u00e1sra<\/center>
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, AMD, NVIDIA \u0438 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Caliptra \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0431\u043b\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c (IP-\u0431\u043b\u043e\u043a) \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u0447\u0438\u043f\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (RoT, Root of Trust). Caliptra \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u0431\u043b\u043e\u043a \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105365,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105364","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bemutatkozott a Caliptra, az IP-blokk a megb\u00edzhat\u00f3 chipek el\u0151\u00e1ll\u00edt\u00e1s\u00e1hoz | ProHoster","description":"A Google, az AMD, a NVIDIA \u00e9s a Microsoft egy\u00fcttm\u0171k\u00f6d\u00e9s\u00e9ben l\u00e9trej\u00f6tt Caliptra projekt keret\u00e9ben egy ny\u00edlt chiptervez\u00e9si blokk (IP-blokk) k\u00e9sz\u00fclt, amely be\u00e9p\u00edthet\u0151 a megb\u00edzhat\u00f3 hardverek l\u00e9trehoz\u00e1s\u00e1ra szolg\u00e1l\u00f3 chipbe.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d Caliptra, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 IP-\u0431\u043b\u043e\u043a \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0447\u0438\u043f\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, AMD, NVIDIA \u0438 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Caliptra \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0431\u043b\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c (IP-\u0431\u043b\u043e\u043a) \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u0447\u0438\u043f\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-23T13:36:47+00:00","article:modified_time":"2022-10-23T13:36:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/105364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=105364"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/105364\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/105365"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=105364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=105364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=105364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}