IAV quantumSAR is planned as an AUTOSAR Cryptodriver with a collection of post-quantum cryptographic algorithms for microcontroller presented by IAV GmbH. The post-quantum cryptographic algorithms are based on the PQClean repository, which is a clean collection of the NIST post-quantum project. IAV quantumSAR implements these algorithms to use them for automotive microcontrollers in an AUTOSAR Classic environment. The goal is to have a collection of various cryptographic algorithms for future automotive cybersecurity projects preparing for the upcoming computing power of quantum computers.
E-Mail: quantumsar@iav.de
There was no security risk analysis like TARA or similar carried out for IAV quantumSAR. The post-quantum cryptographic algorithms itself were evaluated by NIST.
The base of IAV quantumSAR is the PQCleanAutomotive repository. It includes the following post-quantum cryptographic algorithms:
- CRYSTALS-KYBER
- CRYSTALS-DILITHIUM
- SPHINCS+
- FALCON
For the integration of IAV quantumSAR, the file Crypto.c contains an example of the use of the CRYSTALS-KYBER, CRYSTALS-DILITHIUM and SPHINCS+ algorithm.
In the SPHINCS+ algorithm, dynamic arrays had to be replaced by static arrays in various functions for the microcontroller implementation.
Copyright [2024] [IAV GmbH]
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
IAV quantumSAR should support the AUTOSAR Version R22-11.
IAV quantumSAR and the post-quantum cryptographic algorithms are checked with the 2012 version of MISRA. Not all MISRA findings could be resolved. An explanation has been written in the relevant places.
The Encryption PQC algorithm CRYSTALS-KYBER is one of the candidate algorithms for public-key post-quantum standards. There are two patent portfolios listed in a patent license agreement published by NIST.
https://csrc.nist.gov/csrc/media/Projects/post-quantum-cryptography/documents/selected-algos-2022/nist-pqc-license-summary-and-excerpts.pdf
Please check the license condition before any commercial implementation. IAV isn’t owner, applicant, licensor or sub-licensor of the patent portfolios. It is any implementers sole responsibility to do the final license check for all implementations of CRYSTALS-KYBER. IAV is not responsible for possible infringements of third party rights.