{"id":52523,"date":"2019-11-10T00:00:00","date_gmt":"2019-11-09T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm"},"modified":"2020-02-18T14:00:16","modified_gmt":"2020-02-18T11:00:16","slug":"opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/opensorsnyj-chip-opentitan-zamenit-proprietarnye-korni-doveriya-intel-i-arm","title":{"rendered":"Chipul open-source OpenTitan va \u00eenlocui r\u0103d\u0103cinile de \u00eencredere proprietare Intel \u0219i ARM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Chipul
\n
\nOrganiza\u021bie non-profit lowRISC<\/a><\/noindex> cu participarea Google \u0219i a altor sponsori pe 5 noiembrie 2019 a prezentat<\/a><\/noindex> proiect OpenTitan<\/a><\/noindex>, care este numit \u201eprimul proiect open-source dedicat cre\u0103rii unei arhitecturi de microcipuri deschise \u0219i de calitate cu r\u0103d\u0103cin\u0103 de \u00eencredere (RoT) la nivel hardware\u201d.<\/p>\n

OpenTitan pe arhitectura RISC-V este un cip specializat destinat instal\u0103rii pe servere \u00een centre de date \u0219i \u00een orice alt echipament unde este necesar\u0103 asigurarea autenticit\u0103\u021bii \u00eenc\u0103rc\u0103rii, protec\u021bia firmware-ului \u00eempotriva modific\u0103rilor \u0219i eliminarea riscurilor de rootkit-uri: pl\u0103ci de baz\u0103, pl\u0103ci de re\u021bea, routere, dispozitive IoT, gadgeturi mobile etc.<\/p>\n

Desigur, astfel de module exist\u0103 \u00een procesoarele moderne. De exemplu, modulul hardware Intel Boot Guard serve\u0219te ca r\u0103d\u0103cin\u0103 de \u00eencredere \u00een procesoarele Intel. Acesta verific\u0103 \u00een lan\u021b autenticitatea UEFI BIOS \u00eenainte de \u00eenc\u0103rcarea OS-ului. \u00cens\u0103 \u00eentrebarea este c\u00e2t de mult putem avea \u00eencredere \u00een r\u0103d\u0103cinile de \u00eencredere proprietare, av\u00e2nd \u00een vedere c\u0103 nu avem garan\u021bii c\u0103 nu exist\u0103 erori \u00een design, iar verificarea acestuia nu este posibil\u0103? Vezi articolul \u201e\u00cenc\u0103rcare de \u00eencredere a lui Schr\u00f6dinger. Intel Boot Guard\u201d<\/a><\/noindex> care descrie cum o eroare de fabrica\u021bie clonat\u0103 timp de ani de zile de mai mul\u021bi furnizori permite unui atacator poten\u021bial s\u0103 foloseasc\u0103 aceast\u0103 tehnologie pentru a crea un rootkit latent (chiar \u0219i programabil) \u00een sistem.
\n<\/a><\/noindex>
\nAmenin\u021barea compromiterii echipamentului \u00een lan\u021bul de aprovizionare este surprinz\u0103tor de real\u0103: se pare c\u0103 orice electronist hobbyist poate lipi un dispozitiv de interceptare \u00een placa de baz\u0103 a serverului<\/a><\/noindex>, folosind echipamente \u00een valoare de nu mai mult de 200 de dolari. Unii exper\u021bi suspecteaz\u0103 c\u0103 \u201eorganiza\u021biile cu bugete de sute de milioane de dolari ar putea face asta de ani de zile\u201d. De\u0219i nu exist\u0103 dovezi concrete, teoretic este posibil.<\/p>\n

\u201eDac\u0103 nu po\u021bi avea \u00eencredere \u00een bootloaderul hardware, jocul s-a terminat, \u2014 spune<\/a><\/noindex> Gavin Ferris, membru al consiliului de administra\u021bie al lowRISC. \u2014 Nu conteaz\u0103 ce face sistemul de operare \u2014 dac\u0103 p\u00e2n\u0103 \u00een momentul \u00eenc\u0103rc\u0103rii sistemului de operare ai fost compromis, restul este doar o chestiune de tehnic\u0103. E\u0219ti deja terminat.\u201d<\/p><\/blockquote>\n

\nAceast\u0103 problem\u0103 trebuie s\u0103 fie solu\u021bionat\u0103 de prima platform\u0103 hardware open-source din lume OpenTitan (repository GitHub<\/a><\/noindex>, documenta\u021bia<\/a><\/noindex>, specifica\u021bii hardware<\/a><\/noindex>). Abandoning proprietary solutions will change the 'clumsy and imperfect RoT industry,' believes Google.<\/p>\n

Google itself has started developing Titan after discovering the Minix operating system embedded in Intel Management Engine (ME) chips. This complex OS unpredictably and uncontrollably expanded the attack surface. Google attempted to eliminate Intel Management Engine (ME)<\/a><\/noindex>, but unsuccessfully.<\/p>\n

What is the root of trust?<\/h1>\n

\nEvery stage of the system boot process verifies the authenticity of the next stage, thus forming a chain of trust.<\/i>.<\/p>\n

The root of trust (RoT) is a hardware authentication that guarantees that the source of the first executable instruction in the chain of trust cannot be altered. RoT is the foundational protection against rootkits. It is a key step in the boot process that participates in the further startup of the system \u2014 from BIOS to OS and applications. It must verify the authenticity of each subsequent boot stage. For this, a set of keys with a digital signature is used at each stage. One of the most popular hardware security standards for keys is TPM (Trusted Platform Module).<\/p>\n

\"Chipul
\nEstablishing the root of trust. Above is a five-stage boot that forms a chain of trust and starts with a bootloader located in immutable memory. An open key is used at each stage to authenticate the next loaded component. Illustration from Perry Lee's book \u2018Architecture of the Internet of Things\u2019<\/a><\/noindex><\/i><\/p>\n

RoT can be initiated in different ways:<\/p>\n