Post-quantum secure over-the-air update of automotive systems
- With the announcement of the first winners of the NIST Post-Quantum Cryptography (PQC) competition in 2022, the industry has now a confirmed foundation to revisit established cryptographic algorithms applied in automotive use cases and replace them with quantumsafe alternatives. In this paper, we investigate the application of the NIST competition winner CRYSTALS-Dilithium to protect the integrity and authenticity of over-the-air updatep ackages. We show how this post-quantum secure digital signature algorithm can be integrated in AUTOSAR Adaptive Platform Update and Configuration Management framework and evaluate our approach practically using the NXPS32G vehicle network processor. We discuss two implementation variants with respect to performance and resilience against relevant attacks, and conclude that PQC has little impact on the update process as a whole.
| Author: | Joppe W. BosGND, Alexander DimaGND, Alexander KieningORCiDGND, Joost RenesGND |
|---|---|
| URN: | urn:nbn:de:hbz:294-103804 |
| DOI: | https://doi.org/10.13154/294-10380 |
| Parent Title (English): | 21th escar Europe : The World's Leading Automotive Cyber Security Conference (Hamburg, 15. - 16.11.2023) |
| Document Type: | Part of a Book |
| Language: | English |
| Date of Publication (online): | 2023/10/24 |
| Date of first Publication: | 2023/10/24 |
| Publishing Institution: | Ruhr-Universität Bochum, Universitätsbibliothek |
| Tag: | Migration; Over-the-Air Update; Post-Quantum Cryptography |
| Pagenumber: | 15 |
| Dewey Decimal Classification: | Allgemeines, Informatik, Informationswissenschaft / Informatik |
| open_access (DINI-Set): | open_access |
| Konferenz-/Sammelbände: | 21th escar Europe : The World's Leading Automotive Cyber Security Conference |
| Licence (German): |  Keine Creative Commons Lizenz - es gelten die Rechteeinräumung und das deutsche Urheberrecht |
