1. Overview
1.1. Secure Hardware Extension (SHE)
基本结构:ECU里面有一块单独的Secure Zone。Secure Zone里面是SHE模块。SHE包含Control Logic, AES,PRNG, Memory。SHE模块和CPU通讯。
功能:
- Symmetric cryptography, AES-128 with ECB, CBC。
- Secure key store
- Secure boot loader
- Anthetication
- Against replay attacks
限制:
- 不能保护application software
- 没有public-key cryptography
- 不能保护 replay attacks
- 同时只能一个instance访问SHE
1.2. Hardware Security Module (HSM)
- Symmetric cryptography
- Secure key store
- Secure boot loader
- Secure memory
- Implemented within the application CPU's ASIC
- Support software modules
EVITA
限制:
- 需要和普通应用CPU一起集成在ASIC里面
SHE vs. HSM
EVITA full > EVITA medium > SHE > EVITA light
2. Vehicular Security Architectures
集中,分布,mix
版权所有,侵权必究,如需使用请与作者本人联系。