I-Google yembula iphrojekthi ye-OpenTitan ukuze idale ama-chips athembekile

Google kwethulwe iphrojekthi entsha evulekile I-OpenTitan, okuyinkundla yokudala izingxenye zehadiwe ezithembekile (i-RoT, Umsuka Wokuthenjwa). I-OpenTitan isuselwe kubuchwepheshe osebuvele busetshenziswa kumathokheni e-cryptographic USB I-Google Titan и TPM chips ukuze unikeze ukulanda okuqinisekisiwe okufakwe kumaseva kungqalasizinda ye-Google, kanye nama-Chromebook namadivayisi we-Pixel. Ikhodi ehlobene nephrojekthi kanye nokucaciswa kwehadiwe eshicilelwe ku-GitHub ngaphansi kwelayisensi ye-Apache 2.0.

Ngokungafani nokusetshenziswa okukhona kwe-Root of Trust, iphrojekthi entsha ithuthukiswa ngokuhambisana nomqondo "wokuphepha ngokubeka izinto obala", okusho ukuthi inqubo yentuthuko evuleleke ngokuphelele kanye nokuba khona kwekhodi nezinhlelo. I-OpenTitan ingasetshenziswa njengohlaka olwenziwe ngomumo, olufakazelwe noluthembekile olukuvumela ukuthi ukhulise ukuzethemba kuzixazululo ezidalwayo futhi wehlise izindleko lapho uthuthukisa ama-chips okuvikela akhethekile. I-OpenTitan izothuthuka endaweni ezimele njengephrojekthi ehlanganyelwe, engaboshelwe kubahlinzeki abathile nabakhiqizi bama-chip.

Ukuthuthukiswa kwe-OpenTitan kuzokwenganyelwa inhlangano engenzi nzuzo lowRISC, ukuthuthukisa i-microprocessor yamahhala esekelwe ekwakhiweni kwe-RISC-V. Izinkampani ze-G+D Mobile Security, i-Nuvoton Technology kanye ne-Western Digital sezivele zijoyine umsebenzi ohlanganyelwe we-OpenTitan, kanye ne-ETH Zurich kanye neNyuvesi yaseCambridge, abacwaningi abavela kuzo abakha isakhiwo esivikelekile seprosesa. I-CHERI (Iziqondiso Ze-RISC Ezithuthukisiwe Ze-Hardware) futhi muva nje ithole isibonelelo sezigidi ezingu-190 zama-euro ukuze sivumelane nobuchwepheshe obuhlobene nama-ARM processors nokudala isibonelo seplathifomu entsha yezingxenyekazi zekhompuyutha ze-Morrello.

Iphrojekthi ye-OpenTitan ihlanganisa ukuthuthukiswa kwezingxenye ezinengqondo ezihlukahlukene ezidingekayo kuma-chips e-RoT, kuhlanganise ne-microprocessor evulekile lowRISC Ibex ngokusekelwe ekwakhiweni kwe-RISC-V, ama-cryptographic coprocessors, i-hardware engahleliwe generator inombolo, ukulandelana kokhiye nokugcinwa kwedatha unomphela ne-RAM, izindlela zokuphepha, amayunithi okokufaka/okukhiphayo, amathuluzi okuqalisa avikelekile, njll. I-OpenTitan ingasetshenziswa lapho ubuqotho be-hardware yesistimu nezingxenye zesofthiwe kufanele kuqinisekiswe, kuqinisekiswe ukuthi izingxenye zesistimu ezibucayi aziphazanyiswanga futhi zisekelwe kukhodi egunyaziwe negunyazwe ngumkhiqizi.

Ama-chips asekelwe ku-OpenTitan angasetshenziswa ku
amabhodi omama weseva, amakhadi enethiwekhi, amadivayisi abathengi, amarutha, amadivayisi we-inthanethi Yezinto zokuqinisekisa i-firmware (ukutholwa kokuguqulwa kwe-firmware ngohlelo olungayilungele ikhompuyutha), ukuhlinzekwa kwesihlonzi sesistimu esiyimfihlo esiyingqayizivele (ukuvikelwa ekufakweni esikhundleni kwezingxenyekazi zekhompyutha), ukuvikelwa kokhiye be-cryptographic (ukuhlukaniswa kokhiye uma kwenzeka umhlaseli uthola ukufinyelela okungokoqobo kumathuluzi), ahlinzeke ngamasevisi ahlobene nokuvikeleka futhi agcine ilogi yokuhlola eyodwa engakwazi ukuhlelwa noma ukusulwa.

I-Google yembula iphrojekthi ye-OpenTitan ukuze idale ama-chips athembekile

Source: opennet.ru

Engeza amazwana