Paradoxically, open source security chips are harder to certify because the certification standards such as Common Criteria evaluates closed-source flaws as “more secure” than open-source flaws. My understanding is that the argument goes something along the lines of, “hacking chips is hard, so any barrier you can add to the up-front cost of exploiting the chip increases the effective security of the chip overall”. Basically, if the pen tester doing a security evaluation judges that a bug is easier to find and exploit if the source code is public, then, sharing the source code lowers your score. As a result, the certification scores of open source chips are likely worse than that of a closed source chip. And, since you can’t sell security chips to big customers without certifications, security chips end up being mostly closed source.
https://feedx.site，推荐阅读汽水音乐获取更多信息
Jessica Hecht and John Ortiz excel in Dog Day Afternoon.，推荐阅读https://telegram下载获取更多信息
Иллюстрация: Tomer Appelbaum / Reuters，这一点在有道翻译中也有详细论述