OHC

Openness is at the very core of the design and evaluation of cryptographic systems. Indeed, Kerckhoffs’s principle establish that it is necessary to make public all the details of any encryption system in order to make possible the public and collaborative evaluation of its security and robustness. Upon this basis, openness could be considered a good principle that should always be applied in the case of Information Technologies (IT). Openness enables to know with enough detail how an IT system was designed and implemented, which would facilitate to properly assess the fulfillment of security and privacy protection requirements. However, openness as information disclosure make it easier to potential attackers to find out and exploit security and privacy vulnerabilities. Another controversial issue is how openness can be consistent with, and respectful of, the protection of industrial secrets and intellectual property rights. While IT manufacturing should endorse transparency and trust verification, it is also necessary to guarantee that innovators exploit the result of their creations.
This workshop specifically tackles latest developments in RISC-V and open hardware applications for cybersecurity and privacy protection. The aim is to see to what extent openness as a principle can contribute to improve standards and the security evaluation and certification of IT products. The workshop will also evaluate whether it is possible to comply with the EU Cyber Resilience Act and the EU cybersecurity certification framework.