{"id":105364,"date":"2022-10-23T15:36:39","date_gmt":"2022-10-23T13:36:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov"},"modified":"2022-10-23T15:36:39","modified_gmt":"2022-10-23T13:36:47","slug":"predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","title":{"rendered":"Bol predstaven\u00fd Caliptra, otvoren\u00fd IP blok na vytv\u00e1ranie d\u00f4veryhodn\u00fdch \u010dipov.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spolo\u010dnosti Google, AMD, NVIDIA a Microsoft v r\u00e1mci spolo\u010dn\u00e9ho projektu Caliptra vyvinuli otvoren\u00fd blok n\u00e1vrhu \u010dipov (IP blok) na integr\u00e1ciu do \u010dipov, ktor\u00fd sl\u00fa\u017ei na vytv\u00e1ranie d\u00f4veryhodn\u00fdch hardv\u00e9rov\u00fdch komponentov (RoT, Root of Trust). Caliptra predstavuje samostatn\u00fa hardv\u00e9rov\u00fa jednotku s vlastnou pam\u00e4\u0165ou, procesorom a implement\u00e1ciou kryptografick\u00fdch primit\u00edv, ktor\u00e1 zabezpe\u010duje overenie procesu sp\u00fa\u0161\u0165ania, pou\u017e\u00edvan\u00fdch firmv\u00e9rov a konfigura\u010dn\u00fdch \u00fadajov ulo\u017een\u00fdch v neodstr\u00e1nite\u013enej pam\u00e4ti zariadenia. <\/p>\n

Caliptra m\u00f4\u017ee by\u0165 pou\u017eit\u00e1 na integr\u00e1ciu do r\u00f4znych \u010dipov nez\u00e1visl\u00e9ho hardv\u00e9rov\u00e9ho bloku, ktor\u00fd vykon\u00e1va kontrolu integrity a zaru\u010duje pou\u017eitie overen\u00fdch a autorizovan\u00fdch v\u00fdrobcovia firmv\u00e9rov v zariaden\u00ed. Caliptra m\u00f4\u017ee v\u00fdrazne zjednodu\u0161i\u0165 a zjednoti\u0165 integr\u00e1ciu zabudovan\u00fdch hardv\u00e9rov\u00fdch mechanizmov kryptografick\u00e9ho overenia v CPU, GPU, SoC, ASIC, sie\u0165ov\u00fdch adapt\u00e9rov, SSD diskov a in\u00e9ho zariadenia. <\/p>\n

Prostredn\u00edctvom platformy poskytovan\u00e9 n\u00e1stroje kryptografick\u00e9ho overovania integrity a pravosti umo\u017e\u0148uj\u00fa chr\u00e1ni\u0165 hardv\u00e9rov\u00e9 komponenty pred nasaden\u00edm \u0161kodliv\u00fdch zmien vo firmv\u00e9roch a zabezpe\u010di\u0165 proces sp\u00fa\u0161\u0165ania a uchov\u00e1vania konfigur\u00e1cie, \u010d\u00edm sa predch\u00e1dza kompromit\u00e1cii hlavn\u00e9ho syst\u00e9mu v d\u00f4sledku \u00fatokov na hardv\u00e9rov\u00e9 komponenty alebo malv\u00e9rov\u00fdch zmien v dod\u00e1vate\u013esk\u00fdch re\u0165azcoch \u010dipov. Caliptra tie\u017e umo\u017e\u0148uje overenie pravosti aktualiz\u00e1ci\u00ed firmv\u00e9rov a s\u00favisiacich \u00fadajov s platformou (RTU, Root of Trust for Update), odha\u013eovanie po\u0161koden\u00fdch firmv\u00e9rov a kritick\u00fdch \u00fadajov (RTD, Root of Trust for Detection) a obnovu po\u0161koden\u00fdch firmv\u00e9rov a \u00fadajov (RTRec, Root of Trust for Recovery). <\/p>\n

V\u00fdvoj Caliptra prebieha v priestore spolo\u010dn\u00e9ho projektu Open Compute, ktor\u00fd sa zameriava na v\u00fdvoj otvoren\u00fdch \u0161pecifik\u00e1ci\u00ed hardv\u00e9ru pre vybavenie d\u00e1tov\u00fdch centier. S\u00favisiace \u0161pecifik\u00e1cie Caliptra sa \u0161\u00edria za pou\u017eitia dohody Open Web Foundation Agreement (OWFa), vyvinutej na \u0161\u00edrenie otvoren\u00fdch \u0161tandardov (podobne ako licencie OSS pre \u0161pecifik\u00e1cie). Pou\u017e\u00edvanie OWFa umo\u017e\u0148uje vytv\u00e1ra\u0165 na z\u00e1klade \u0161pecifik\u00e1cie vlastn\u00e9 produkty a deriv\u00e1tov\u00e9 implement\u00e1cie bez platenia licen\u010dn\u00fdch poplatkov a umo\u017e\u0148uje ak\u00fdmko\u013evek organiz\u00e1ci\u00e1m z\u00fa\u010dastni\u0165 sa na rozvoji \u0161pecifik\u00e1cie. <\/p>\n

Z\u00e1kladn\u00e1 implement\u00e1cia IP bloku je postaven\u00e1 na otvorenom RISC-V procesore SWeRV EL2 a je vybaven\u00e1 384 kB RAM (128 kB DCCM, 128 kB ICCM0 a 128 kB SRAM) a 32 kB ROM. Medzi podporovan\u00fdmi kryptografick\u00fdmi algoritmami s\u00fa SHA256, SHA384, SHA512, ECC Secp384r1, HMAC-DRBG, HMAC SHA384, AES256-ECB, AES256-CBC a AES256-GCM.

\"Bol<\/center>
\"Bol<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, AMD, NVIDIA \u0438 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Caliptra \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0431\u043b\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c (IP-\u0431\u043b\u043e\u043a) \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u0447\u0438\u043f\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (RoT, Root of Trust). Caliptra \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u0431\u043b\u043e\u043a \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105365,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105364","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Predstaven\u00fd Caliptra, otvoren\u00fd IP blok pre vytv\u00e1ranie d\u00f4veryhodn\u00fdch \u010dipov | ProHoster","description":"Spolo\u010dnosti Google, AMD, NVIDIA a Microsoft v r\u00e1mci spolo\u010dn\u00e9ho projektu Caliptra vyvinuli otvoren\u00fd blok pre navrhovanie \u010dipov (IP blok) na za\u010dlenenie do \u010dipov prostriedkov na vytv\u00e1ranie d\u00f4veryhodn\u00fdch hardv\u00e9rov.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d Caliptra, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 IP-\u0431\u043b\u043e\u043a \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0447\u0438\u043f\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, AMD, NVIDIA \u0438 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Caliptra \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0431\u043b\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c (IP-\u0431\u043b\u043e\u043a) \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u0447\u0438\u043f\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/predstavlen-caliptra-otkrytyj-ip-blok-dlya-sozdaniya-zasluzhivayushhih-doveriya-chipov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-23T13:36:47+00:00","article:modified_time":"2022-10-23T13:36:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/105364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=105364"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/105364\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/105365"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=105364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=105364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=105364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}