roytam1

終於有hardware open source出現, 2015年搞RISC-V班UC Berkeley友出來搞的公司Sifive, 出的Hifive就是risc- ...
unixman 發表於 2018-8-27 07:19

    yes，重點係真係有貨
https://www.sifive.com/products/hifive-unleashed/

314315316

如果樓主搵open source CPU係為左privacy/security，其實意義不大，因為除非有電子顯微鏡同識得silicon reverse engineering，否則無辦法驗證cpu設計與source一致，所以最後都係要靠個“信”字。

fvson

回復 314315316

3rd party audit...

truecrypt etc are audited like that.

via HKEPC Reader for Andro ...
tmaxene 發表於 2018-9-10 23:10

Truecrypt is an exceptional case because the authors claim there are serve security issues in the project and halted the development.
Most importantly money was raised for code review.

Other projects are not that "lucky" to have people invested so much just for security audit.

Even the most popular open-sourced crypto library OpenSSL have backdoor that is introduced and undiscovered for years.

It is just unrealistic to expect any systems to be vulnerability free