Automotive DoIP SecurityAccess using TRNG and AES-CMAC
Description
This demonstration showcases the implementation of UDS SecurityAccess (0x27) over DoIP (Diagnostics over Internet Protocol) on the Infineon AURIX TC4D7 microcontroller.
The implementation leverages the CyberSecurity Real-Time Module (CSRM) to demonstrate hardware-based cryptographic operations, including:
CSRM TRNG: Hardware-based generation of a random 256-bits sized seed for SecurityAccess.
AES-CMAC: Cryptographic key generation and verification using AES-CMAC.
UDS SecurityAccess (ISO 14229): Implementation of the RequestSeed (0x27 0x01) and SendKey (0x27 0x02) sequence.
DoIP (ISO 13400): Diagnostic communication between an external tester and the ECU over Ethernet.
The demonstration covers the complete security access sequence, from seed generation on the AURIX TC4D7 to CMAC-based key calculation on the tester and ECU-side key verification.
Platform: Infineon AURIX TC4D7 Cryptography: CSRM TRNG and AES-CMAC Diagnostic protocol: UDS over DoIP Standards: ISO 14229 and ISO 13400
This project demonstrates the integration of hardware-assisted cryptography into automotive diagnostic security.
Leave a Reply