UGoogle uveze iprojekthi evulekileyo "OpenTitan", ukwenza iichips ezikhuselekileyo nezithembekileyo

Kwiintsuku ezithile ezidlulileyo UGoogle uveze iprojekthi entsha evulekileyo, enegama elinegama "Ufikelelo kwaye ichaza indlela iqonga lokudala izixhobo zekhompyutha ezithembakeleyo (i-RoT, ingcambu yeTrust). I-OpenTitan yakhela kwitekhnoloji esele isetyenzisiwe kwiithokheni zeGoogle Titan crypto kunye neetshipsi zeTPM ukubonelela ngokukhutshelwa okuqinisekisiweyo okufakelweyo kumaseva kwizibonelelo zikaGoogle, nakwizixhobo zeChannelbook nezePixel.

Ukhuseleko lwe-G + D lweSelfowuni, iTekhnoloji yeNuvoton kunye neNtshona yeDijithali sele ijoyine intsebenziswano ye-OpenTitankunye iZurich Higher Technical School kunye neDyunivesithi yaseCambridge, abaphandi bayo baphuhlisa uyilo iprosesa ekhuselekileyoI-CHERI (ukuXhobisa izixhobo ze-Hardware eyandisiweyo ye-RISC) kwaye kutshanje ndifumene isibonelelo se-190 yezigidi zeerandi zokuziqhelanisa neetekhnoloji ezinxulumene neeprosesa ze-ARM kunye nokwenza iiprototypes zeqonga elitsha lezinto zeMorello.

Injongo yomdibaniso omtsha kukwenza uyilo lwe-chip oluthembekileyo ukuze isetyenziswe kumaziko edatha, ukugcinwa kunye nezinto ezisecaleni zekhompyuter, ezivulekileyo neziselubala, zivumela nabani na ukuba ahlole ubuchwephesha kwezokhuseleko kunye nasemva.

Malunga ne-OpenTitan

Ngokungafaniyo nokuphunyezwa kwengcambu yeTrust, iprojekthi entsha iphuhliswa ngokuhambelana nomgaqo 'wokhuselo ngokubonakala', oko kuthetha ukuba inkqubo yophuhliso evuleleke ngokupheleleyo kunye nokufumaneka kwekhowudi kunye nezikimu.

I-OpenTitan inokusetyenziswa njengesakhelo esilungeleyo, esivivinywayo nesinokuthenjwa ekuvumela ukuba wandise ukuzithemba kwizisombululo ezenziwe kunye nokunciphisa iindleko ngokuphuhlisa iichips ezizodwa zokukhusela. I-OpenTitan se iya kuphuhlisa kwiqonga elizimeleyo njengeprojekthi edibeneyo, ayibophelelwanga kubathengisi abathile be-chip kunye nabavelisi.

"Xa uGoogle wayeqala ukubona ukuba eli shishini lifuna uyilo oluvulekileyo lwemithombo yolwazi, besisazi ukuba kuzakufuna umphathi wesithathu okhulileyo njenge-lowRISC ukukhuthaza iprojekthi evulekileyo yoluntu, utshilo uDominic Rizzo, inkokheli yeGoogle OpenTitan.

I-OpenTitan iya kujongwa ngumbutho ongajonganga nzuzo we-lowRISC, ephuhlisa i-microprocessor yasimahla esekwe kuyilo lwe-RISC-V.

Iprojekthi ye-OpenTitan igubungela uphuhliso lwezinto ezahlukeneyo ezinengqondo ifunwa kwiitshipsi ze-RoT, kubandakanya i-lowRISC Ibex microprocessor evulekileyo esekwe kuyilo lwe-RISC-V, iicryptographic coprocessors, izixhobo zejenali engahleliwe, idatha yememori yokufikelela engaguquguqukiyo kunye nolawulo oluphezulu, iindlela zokukhusela, iibhloko zokufaka ze-I / O, ezikhuselekileyo Imidiya yokuqalisa, njl.

I-OpenTitan inokusetyenziswa apho kukho imfuneko yokuqinisekisa ukuthembeka kwezixhobo zekhompyuter kunye nezinto zesoftware, kuqinisekiswe ukuba iinkqubo zenkqubo ebalulekileyo azitshintshwanga kwaye zisekwe kwikhowudi yomenzi eqinisekisiweyo negunyazisiweyo.

Iichips ezisekwe kwi-OpenTitan zinokusetyenziswa kwi Iibhodi zee-mama, amakhadi enethiwekhi, izixhobo zabathengi, ii-routers, i-Intanethi yezixhobo zezinto zokuqinisekisa i-firmware (ukubona ukuguqulwa kwe-firmware yi-malware), ukubonelela ngesazisi esikhethekileyo senkqubo (ukhuselo lomgunyathi wehardware), kunye nokukhusela izitshixo ze-Cryptographic (isitshixo sodwa kwimeko apho umhlaseli ufumana ukufikelela emzimbeni kwiikhompyuter), ebonelela ngeenkonzo ezinxulumene nokhuselo, kunye nokugcina umkhondo wophicotho olwahlukileyo ongenakulungiswa okanye ucinywe.

Iinjineli ze-OpenTitan ngoku zakha uyilo lwe-logic ye-silicon RoT. Ukuza kuthi ga ngoku kubandakanya umthombo ovulekileyo wemicroprocessor (lowRISC Ibex, uyilo olusekwe kwi-RISC-V), iicryptographic coprocessors, izixhobo ezisebenza ngokungacwangciswanga zeenombolo, ubuchwephesha obunobunkunkqele, inkumbulo yemigangatho yogcino kunye nokungagungqi, iindlela zokhuselo, ii-IOS zepheripherali , Khusela i-boot kunye nokunye.

Unako jonga inkqubela phambili kwiGitHub njengoko ikhowudi enxulumene neprojekthi kunye neekhompyuter zentsimbi zipapashwa kwiGitHub phantsi kwelayisensi ye-Apache 2.0.