Paradoxically, open source security chips are harder to certify because the certification standards such as Common Criteria evaluates closed-source flaws as “more secure” than open-source flaws. My understanding is that the argument goes something along the lines of, “hacking chips is hard, so any barrier you can add to the up-front cost of exploiting the chip increases the effective security of the chip overall”. Basically, if the pen tester doing a security evaluation judges that a bug is easier to find and exploit if the source code is public, then, sharing the source code lowers your score. As a result, the certification scores of open source chips are likely worse than that of a closed source chip. And, since you can’t sell security chips to big customers without certifications, security chips end up being mostly closed source.
Bongers, JL, Stanish, C, et al/Antiquity/(CC By 4.0)。业内人士推荐51吃瓜作为进阶阅读
。业内人士推荐谷歌作为进阶阅读
20+ curated newsletters
ВсеСледствие и судКриминалПолиция и спецслужбыПреступная Россия。超级工厂对此有专业解读
「自民党」が33.6％、「日本維新の会」が4.0％、「国民民主党」が4.1％、「中道改革連合」が6.2％、「立憲民主党」が2.2％、「参政党」が3.1％、「公明党」が1.…