Securing the Future: Exploring the Intersection of OT/IoT and OpenTitan

OpenTitan: An Open Source Silicon Root of Trust

OpenTitan, a project managed by UK non-profit organization LowRISC, aims to bring the success of open source software to the silicon design space with a silicon-level root of trust (S-RoT). The S-RoT provides security to vulnerable parts of a device that can be attacked by a third party. However, the question remains: can the S-RoT itself be attacked?

The Importance of a Root of Trust

A root of trust (RoT) is the foundation upon which all subsequent operations in a device are based. Without a separate RoT, the operating system (OS) is exposed to potential attacks. If attackers gain access to the OS, they can compromise the device invisibly. Thus, a separate RoT is essential to verify the integrity of the boot process and provide a secure home for cryptographic keys.

OpenTitan functions as a secure tamper-resistant microcontroller that operates independently of the OS. It ensures the lowest levels of the OS and drivers haven’t been compromised and provides security guarantees and services to the system. By anchoring trust properties in the silicon below the OS, OpenTitan protects against threats such as bootkits, rootkits, and firmware attacks that occur before the OS is loaded.

Advantages of Open Source S-RoT

OpenTitan‘s open source approach offers transparency and availability. Chip-level RoTs controlled by proprietary companies can raise concerns about control and trust. In contrast, an open source S-RoT provides both security and transparency. OpenTitan follows three core principles: flexibility, quality, and transparency, with transparency being fundamental. Multiple developers can build their own RoT operations for their products, anchoring trust properties in the silicon, which promotes widespread buy-in to OpenTitan.

Another advantage of open source is availability. As the world grapples with the increasing threat landscape of IoT and operational technology (OT), an open source S-RoT can benefit device manufacturers in securing IoT devices. By verifying the trust of IoT devices and embedding security at the chipset level, open source S-RoTs provide a solution to the growing attack surface presented by IoT devices.

Risks and Security Measures for S-RoTs

While an S-RoT provides security to vulnerable device parts, it can itself be attacked. To mitigate this risk, S-RoTs should implement comprehensive security measures, including siloed execution, anti-tamper and side-channel resistance, layered security, and multiple instances of RoTs. These measures ensure the device’s security and reduce the probability of compromise.

OpenTitan has addressed these concerns by incorporating security measures based on the knowledge and expertise of its partners, including Google. As an open source project, vulnerabilities can be publicly inspected and addressed. For example, side-channel attacks can be mitigated by using dual-core processors that operate in lockstep, making it difficult for attackers to interrupt security checks at the right moment on both cores.

Editorial: The Promise of Open Source Silicon

OpenTitan‘s Open Source Silicon Root of Trust represents an important development in the world of device security. By providing transparency and availability, it addresses concerns about control and trust in proprietary RoTs. The open source nature of OpenTitan allows for widespread scrutiny, making it difficult for vulnerabilities to go unnoticed.

As IoT and OT devices continue to proliferate and cyber attacks become more sophisticated, the need for secure chip-level solutions becomes critical. Open source S-RoTs, like OpenTitan, provide an attractive route for device manufacturers, enabling them to embed security at the chipset level and ensure trust in their devices.

Advice: Implementing Open Source S-RoTs

For organizations considering implementing open source S-RoTs, here are a few key considerations:

1. Evaluate your risks

Assess the risks associated with compromised device security, including potential national security risks, financial risks, and risks to brand reputation. Consider the specific threats and regulatory environment in which your organization operates.

2. Choose a reputable open source project

Consider projects like OpenTitan that have been developed over several years with the collaboration of industry leaders. Look for transparency, availability, and a track record of addressing vulnerabilities.

3. Implement comprehensive security measures

Ensure that your S-RoT solution includes capabilities such as siloed execution, anti-tamper and side-channel resistance, layered security, and multiple instances of RoTs. These measures will enhance the security of your devices and reduce the probability of compromise.

4. Stay current with security updates

As the field of IoT and OT security continuously evolves, it’s important to stay updated with the latest security updates and vulnerabilities in open source S-RoTs. Regularly review and update your security measures to stay ahead of emerging threats.

5. Engage with the open-source community

Take advantage of the transparency and collaboration offered by open source projects. Engage with the open-source community, report any vulnerabilities you discover, and collaborate with others to enhance the security of open source S-RoTs.

Implementing open source S-RoTs can be a significant step towards ensuring the security and trustworthiness of devices. By leveraging the benefits of open source, organizations can tap into a collective effort to enhance device security and protect against emerging threats.