Automotive DoIP SecurityAccess using TRNG and AES-CMAC

Description

This demonstration showcases the implementation of UDS SecurityAccess (0x27) over DoIP (Diagnostics over Internet Protocol) on the Infineon AURIX TC4D7 microcontroller.

The implementation leverages the CyberSecurity Real-Time Module (CSRM) to demonstrate hardware-based cryptographic operations, including:

  • CSRM TRNG: Hardware-based generation of a random 256-bits sized seed for SecurityAccess.
  • AES-CMAC: Cryptographic key generation and verification using AES-CMAC.
  • UDS SecurityAccess (ISO 14229): Implementation of the RequestSeed (0x27 0x01) and SendKey (0x27 0x02) sequence.
  • DoIP (ISO 13400): Diagnostic communication between an external tester and the ECU over Ethernet.

The demonstration covers the complete security access sequence, from seed generation on the AURIX TC4D7 to CMAC-based key calculation on the tester and ECU-side key verification.

Platform: Infineon AURIX TC4D7
Cryptography: CSRM TRNG and AES-CMAC
Diagnostic protocol: UDS over DoIP
Standards: ISO 14229 and ISO 13400

This project demonstrates the integration of hardware-assisted cryptography into automotive diagnostic security.


Leave a Reply

Your email address will not be published. Required fields are marked *