The Open Compute Project unveils Caliptra, a Root of Trust specification for verifiable cryptographic assurances of an ASIC's or SoC's security configuration
Mike Wheatley / SiliconANGLE :
Context & Ripple Effects
Caliptra is the Open Compute Project's entry into a line of work that started with Google's Verified Access API cryptographically validating Chrome OS devices for enterprises, then moved into the silicon itself when Google, lowRISC and others launched the open-source OpenTitan root-of-trust project in 2019.
The difference now is venue and scope: instead of one company's design, a multi-vendor consortium specification defines how any ASIC or SoC proves its security configuration cryptographically — the same open-foundation pattern the Linux Foundation applied to software with the Open Source Security Foundation.
First-order effects
- Chip designers building datacenter ASICs and SoCs gain a common specification to implement, making a verifiable root of trust a procurement checkbox rather than a per-vendor custom feature.
Second-order effects
- Vendors selling proprietary root-of-trust IP now compete against an openly specified alternative that hyperscale buyers can audit, pressuring them to match on transparency rather than secrecy.
Third-order effects
- If consortium-owned specs like Caliptra become the default, silicon trust shifts from vendor-attested black boxes to community-audited standards — the direction consumer IoT certification under the Connectivity Standards Alliance is already pointing.
The trend: Hardware security assurance is migrating from proprietary vendor implementations to openly specified, auditable standards authored by hyperscaler-backed consortia.