3 ms·

I wonder if supply chain constraints prevented them from using an Artix-7 FPGA, for which a libre (reverse engineered) tool chain is available. Bunnie used an

I wonder if supply chain constraints prevented them from using an Artix-7 FPGA, for which a libre (reverse engineered) tool chain is available. Bunnie used an Artix-7 (XC7A35T) for the NeTV2 project, https://www.crowdsupply.com/alphamax/netv2 https://www.crowdsupply.com/alphamax/netv2 & https://www.bunniestudios.com/blog/?p=5018 https://www.bunniestudios.com/blog/?p=5018 > LiteX produces a design that uses about 20% of an XC7A50 FPGA with a runtime of about 10 minutes, whereas Vivado produces a design that consumes 85% of the same FPGA with a runtime of about 30-45 minutes. An early Precursor blog, https://www.crowdsupply.com/sutajio-kosagi/precursor/updates/evaluating-our-hardware-security https://www.crowdsupply.com/sutajio-kosagi/precursor/updates... > Precursor uses the Xilinx 7-series of FPGAs for its trusted root. This series of FPGAs is perhaps one of the most extensively studied from a security perspective; dozens of papers have been published about its architecture and vulnerabilities. As a result, its key stores have been reverse engineered and analyzed down to the transistor level ... its fuse boxes and encryption engine have been analyzed down to the gate level and there have been no findings so far reporting special access modes for law enforcement, undocumented shadow key stores, or other bugs that could lead to fully remote exploits or back doors.

throwaway654329 4y ago
It’s a good question - the analysis seems to ignore the need for non-free software to properly build the FPGA bitstream files from source. We have no way to know the Xilinx tools are safe. None of those papers address the tool chain question AFAIK. Additionally, it is difficult to know if a user has downloaded the real Xilinx software tool chain; the git repo ( https://github.com/betrusted-io/betrusted-soc https://github.com/betrusted-io/betrusted-soc ) from has no verification step for step 7. There is a public key and a hash, they could include this in the repo and at least it would make a targeted attack a little more difficult. Additionally they could use a git sub module for step 6 and have a better risc-v supply chain security story. It seems trivial to fix that detail, so I am sure it will be fixed if they’re alerted. These setup steps are trivial security issues, simple to fix, and possibly only theoretically an issue for a targeted attack. What isn’t theoretical is that the we cannot trust the non-free Xilinx tool chain as we can’t see the sources, so we don’t know that they’re not currently doing something bad (bugs or backdoors) or won’t later be doing something we don’t want. Frustrating! Related: https://news.ycombinator.com/item?id=32187651 https://news.ycombinator.com/item?id=32187651

throwaway654329 4y ago

It’s a good question - the analysis seems to ignore the need for non-free software to properly build the FPGA bitstream files from source. We have no way to know the Xilinx tools are safe. None of those papers address the tool chain question AFAIK. Additionally, it is difficult to know if a user has downloaded the real Xilinx software tool chain; the git repo ( https://github.com/betrusted-io/betrusted-soc https://github.com/betrusted-io/betrusted-soc ) from has no verification step for step 7. There is a public key and a hash, they could include this in the repo and at least it would make a targeted attack a little more difficult. Additionally they could use a git sub module for step 6 and have a better risc-v supply chain security story. It seems trivial to fix that detail, so I am sure it will be fixed if they’re alerted. These setup steps are trivial security issues, simple to fix, and possibly only theoretically an issue for a targeted attack. What isn’t theoretical is that the we cannot trust the non-free Xilinx tool chain as we can’t see the sources, so we don’t know that they’re not currently doing something bad (bugs or backdoors) or won’t later be doing something we don’t want. Frustrating! Related: https://news.ycombinator.com/item?id=32187651 https://news.ycombinator.com/item?id=32187651