I-Google yethule iphrojekthi yomthombo ovulekile i- "OpenTitan", ukudala ama-chip aphephile futhi athembekile

Ezinsukwini ezithile ezedlule I-Google yethule iphrojekthi entsha evulekile, enegama "I-OpenTitan " futhi lokho kuchaza ukuthi kanjani ipulatifomu yokwakha izingxenye zehadiwe ezethembekile (RoT, Root of Trust). I-OpenTitan yakhela kubuchwepheshe obusetshenzisiwe kumathokheni we-Google Titan crypto ne-TPM chips ukunikeza ukulanda okuqinisekisiwe okufakwe kumaseva kwingqalasizinda ye-Google, kanye nakumadivayisi we-Chromebook ne-Pixel.

I-G + D Mobile Security, i-Nuvoton Technology ne-Western Digital sezivele zijoyine ukusebenzisana kwe-OpenTitan, kanye naku iZurich Higher Technical School kanye neYunivesithi yaseCambridge, abacwaningi babo abathuthukisa izakhiwo iprosesa ephephilei-CHERI (i-Capability Hardware Enhanced RISC Imiyalo) futhi usanda kuthola isibonelelo sama-euro ayizigidi ezingama-190 ukulungisa ubuchwepheshe obusondelene nama-processor we-ARM nokwakha ama-prototypes wesikhulumi esisha se-Morello.

Inhloso yomfelandawonye omusha ukudala ukwakheka kwe-chip okuthembekile ukuze isetshenziswe ezikhungweni zedatha, ekugcineni nasekusebenziseni okokufaka kwikhompyutha, okuvulelekile futhi okusobala, okuvumela noma ngubani ukuthi ahlole i-hardware ngobungozi bokuphepha nangasemuva.

Mayelana ne-OpenTitan

Ngokungafani nokuqaliswa kwe-Root of Trust okukhona, iphrojekthi entsha ithuthukiswa ngokuya ngomqondo 'wokuphepha ngokusebenza obala', okusho inqubo yokuthuthuka evuleke ngokuphelele nokutholakala kwekhodi nesikimu.

I-OpenTitan ingasetshenziswa njengohlaka olulungele, oluhloliwe noluthembekile lokho kukuvumela ukuthi wandise ukuzethemba ezixazululweni ezenziwe futhi wehlise izindleko ngokwakha ama-chips akhethekile okuphepha. I-OpenTitan se uzothuthukisa endaweni yesikhulumi ezimele njengephrojekthi ehlangene, kungaboshelwe kubathengisi be-chip abathile nabakhiqizi.

"Ngesikhathi i-Google iqala ukubona ukuthi imboni idinga ukwakheka komthombo ovulekile, besazi ukuthi kuzodinga umphathi ovuthiwe ovela eceleni onjenge-lowRISC ukukhuthaza iphrojekthi yomthombo ovulekele umphakathi," kusho uDominic Rizzo, umholi we-Google OpenTitan.

I-OpenTitan izobhekwa yinhlangano engenzi nzuzo i-lowRISC, ekhulisa i-microprocessor yamahhala ngokususelwa ekwakhiweni kwe-RISC-V.

Iphrojekthi ye-OpenTitan ihlanganisa ukwakhiwa kwezakhi ezahlukahlukene zomqondo ifunwa kuma-RoT chips, kufaka phakathi i-lowRISC Ibex microprocessor evulekile esekwe kubakhiwo be-RISC-V, ama-cryptographicrocrocessors, i-hardware engahleliwe yenombolo, idatha yememori yokufinyelela engaguquguquki nokungahleliwe kanye nobukhulu bokugcina, izindlela zokuvikela, amabhlogo wokufaka we-I / O, okuphephile imidiya yokuqalisa, njll.

I-OpenTitan ingasetshenziswa lapho kudingeka khona ukuqinisekisa ubuqotho bezingxenyekazi zekhompuyutha nezesoftware zohlelo, ukuqinisekisa ukuthi izingxenye zohlelo ezibucayi azishintshwanga futhi zisekelwe kwikhodi eqinisekisiwe futhi egunyazwe ngumenzi.

Ama-Chips asuselwa ku-OpenTitan angasetshenziswa ku- ama-motherboards eseva, amakhadi enethiwekhi, amadivayisi wabathengi, ama-routers, amadivayisi we-Intanethi wezinto ukuqinisekisa i-firmware (thola ukulungiswa kwe-firmware yi-malware), ahlinzeke ngokuhlonza uhlelo oluyingqayizivele (ukuvikelwa komgunyathi wehadiwe), nokuvikela okhiye be-Cryptographic (ukhiye wedwa uma kwenzeka umhlaseli uthola ukufinyelela ngokomzimba kumakhompiyutha), ahlinzeka ngezinsizakalo ezihlobene nokuphepha, futhi agcine umzila wokucwaningwa kwamabhuku ongahlukaniswa noma osuswe.

Onjiniyela be-OpenTitan njengamanje bakha i-logic design ye-silicon RoT. Kuze kube manje lokho kufaka phakathi i-microprocessor yomthombo ovulekile (i-lowRISC Ibex, idizayini esekwe ku-RISC-V), ama-cryptographic coprocessors, i-hardware engahleliwe ye-generator yenombolo, isikhundla sezinkinobho eziyinkimbinkimbi, imigqa yememori yokugcina okungaxakile nokungashisi, izindlela zokuzivikela, ama-IOS wangaphandle , ivikeleke ebhuthini nokuningi.

Ungakwazi buka ukuqhubeka ku-GitHub njengoba amakhodi ahlobene nephrojekthi nama-hardware specs ashicilelwa ku-GitHub ngaphansi kwelayisense le-Apache 2.0.