Automotive Security's information and experience (2): Cryptography

1. Security Goal

-Confidentiality

-Integrity

-Availability

-Authenticity

-Non-repudiation

-Authorisation

-Accounting

2. Cryptography

Very large topic,,, a lot of information on the web. Recommend a few good books.

Understanding Cryptography, Christof Paar

Security Engineering for vehicular IT Systems, Marko Wolf

3. Cryptographic Libraries

3.1. Business Library

Providers: Escrypt, POLAR SSL, Crypto Vision, Easycore, Elektrobit, Wolfssl

Embedded vs It-system

Most CL providers focus on only one application area. Stock Market, public transport

For automotive, different security requirements need to be met. Deeply embedded device,embedded device, IT

Key considerations include the performance and resources

3.2. Free Library

OpenSSL, s2n, Labor cryptolib ARM, Naci

When using these libraries, it is often necessary to pay attention to the license they use.

-No official permission required

Public domain, BSD, MIT, Apache 1.0, Apache 1.1, Apache 2.0, Artistic License, PHP License, Python software foundatin lice NSE, Zlib/libpng License, OpenLDAP License, Boost software License, Ssleay

-can be used internally. Need legal approval if commercial use

Apache 2.0, Mozilla 1.0, Mozilla 2.0, CDDL, CPL or IBM, EPL, FLTK, GPL, OpenSSL

-Requires legal approval if commercial use

GPL 2.0, LGPL 3.0, GP3.0, Affero GPL v3, Sleepycat

Automotive Security's information and experience (2): Cryptography