CANCryptography: Securing In-Vehicle Networks, AUTOSAR SecOC & Quantum-Safe ECUs

CANCryptography engineers quantum-resilient cryptographic authentication protocols for Controller Area Networks (CAN and CAN FD), automotive Ethernet, and AUTOSAR Secure Onboard Communication (SecOC), ensuring automotive functional safety in the post-quantum era.

CANCryptography System Architecture

Core cryptographic topology and protocol interaction of cancryptography.com

Central System: SecOC Quantum Core - CAN FD Bus Guard

Cryptographic Nodes

  • Truncated MAC
  • Freshness Counter
  • SecOC Module
  • Gateway ECU
  • Ethernet Backbone

Architectural Layers & Protocols

  • Physical Bus & Arbitration Layer (ISO 11898-1 CAN FD 5 Mbps Bus & 100BASE-T1 Automotive Ethernet): Transmitting critical sensor and actuator telemetry with deterministic bus timing and fault tolerance
  • SecOC Truncated Post-Quantum MAC Layer (Lattice-Derived Symmetric Key Message Authentication Codes): Injecting cryptographic message authentication into CAN FD frames without exceeding 64-byte payload caps
  • Freshness Value Management (FVM) (Trip Counter & Monotonic Timestamp Synchronization): Eliminating replay attacks and message re-ordering across power cycles and vehicle sleep states
  • Automotive Central Gateway & HSM Bridge (EVITA Full / High Hardware Security Module Partitioning): Translating post-quantum TLS 1.3 packets from telematics into SecOC frames on internal vehicle buses

Key Metrics: 64 Bytes (Max CAN FD Frame Payload) | <50 µs (Authentication Verification Time) | ISO 21434 (Automotive Security Standard) | Zero-Loss (Bus Arbitration Reliability)

Quantum-Proofing the Autonomous Vehicle Nervous System

Vehicles produced today will remain on public roads well past 2040, within the window of operational quantum computing. Compromising in-vehicle bus messages allows malicious adversaries to override steering, throttle, and braking commands. CANCryptography hardens automotive transport.

Core Engineering Areas

Technical Articles

Related Cluster Architecture Specifications