玉渊谭天独家观察：美国如何给芯片安“后门”

Core Viewpoint - Nvidia has stated that its chips do not contain "backdoors," specifically referencing the "Clipper chip" incident from the past [1][3]. Group 1: Historical Context - In 1992, AT&T introduced a hardware device for secure voice transmission, which led to government dissatisfaction and the introduction of the "Clipper chip" containing a "cryptographic backdoor" for government access [3]. - The "Clipper chip" faced widespread resistance and was terminated within three years, leading the U.S. government to adopt a more discreet approach regarding "backdoors" in technology [3]. Group 2: Current Legislative Actions - In May 2023, U.S. Congressman Bill Foster proposed legislation requiring U.S. chip companies to include "backdoors" in export-controlled chips, asserting that the technology is mature and feasible [4][6]. Group 3: Technical Feasibility of Backdoors - There are two types of backdoors: hardware and software. Hardware backdoors involve physical modifications during chip design, while software backdoors involve embedded instructions in software [6]. - The Nvidia H20 chip can theoretically implement a "remote shutdown" feature through its power management module, which could be triggered under specific conditions [6][8]. - Another method for a hardware backdoor involves modifying the H20 chip's firmware to restrict functionality based on certain conditions, such as geographic location [8]. Group 4: Software Ecosystem and Backdoors - The CUDA ecosystem, used by over 4 million developers, could potentially facilitate the activation of backdoors through software updates, allowing for tracking and data collection [9][11]. - The U.S. aims to maintain AI dominance through both hardware and software ecosystems, necessitating other countries to develop independent alternatives [11]. Group 5: On-Chip Governance Mechanism - The U.S. government has proposed an "on-chip governance mechanism" to coordinate chip design and production, which includes features like license locking, tracking, usage monitoring, and usage restrictions [12][14]. - Many leading chip manufacturers, including Nvidia, already possess the necessary functionalities for this governance mechanism, although some may not yet be activated [14]. Group 6: Concerns Regarding Nvidia's H20 Chip - The H20 chip is considered unsafe for China, as it lacks advanced features and has only about 20% of the performance of its standard counterpart, the H100 [17][20]. - The H20 chip's energy efficiency is approximately 0.37 TFLOPS/W, failing to meet the 0.5 TFLOPS/W standard set by China's green development initiatives [18][19]. - Given its lack of safety, advancement, and environmental compliance, the H20 chip is deemed a poor choice for consumers [20][21].