利用RISC-V构建信任方案解决安全性落差  

Architecting trust with RISC-V to resolve gaps in safety

作　　者：陈宏铭 胡进 徐滔 刚至坚 CHEN Hong-Ming;HU Jin;XU Tao;KANG Jack(Shanghai SiFive Technology Co.,Ltd,Shanghai,201203,China)

机构地区：[1]上海赛昉科技有限公司

出　　处：《中国集成电路》2019年第11期51-63,75,共14页China lntegrated Circuit

摘　　要：本文介绍了通过将设计中的安全性集成到处理器核心规范中,RISC-V使工程师能够构建符合经济高效、实用且具有时间弹性的可信计算技术。为了构建安全技术,底层芯片的处理器内核必须做出三个核心安全承诺,安全存储机密、保证可执行代码的真实性、为可信应用程序的执行提供安全的环境。SiFive的产品是基于核心RISC-V技术构建的,该技术是从头开始设计,以支持设计可靠计算设备所必需的基本构建模块。This paper presents the security design integrated into the processor core specification,and RISC-V grants engineers the ability to build cost-effective,practical,and time-resilient technology worthy of trusted computing.To build security technology,three core security promises must be made by the underlying silicon.Processor cores must be capable of securely storing secrets,guaranteeing the authenticity of executable code and providing a secure environment for the execution of trusted applications SiFive’s offerings are built from the core RISC-V technology,which was designed from the ground up to support the fundamental building blocks necessary to engineer trustworthy computing devices.

关 键 词：RISC-V TRUSTZONE 物理内存保护 安全元件 可信平台模块 可信引导加载程序 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]