With the rapid development of automotive electronics technology, vehicles have transformed from traditional mechanical devices into highly intelligent, electronic, and network - connected complex systems. The introduction of these technologies has brought great convenience to drivers, but at the same time, it has also presented new security challenges. The electronic control systems of vehicles not only need to deal with the threat of functional failures but also must guard against potential cyber - attacks. Therefore, just like Functional Safety, Cybersecurity has become an essential key element in modern vehicle design.
To address this challenge, the International Organization for Standardization (ISO) introduced the ISO 21434 standard in 2021, which specifically provides guidance and a framework for the cybersecurity of road vehicles. With the official launch of the "Technical Requirements for Vehicle - level Cybersecurity" standard in China in the second half of 2024, the technical specifications and implementation standards in the field of automotive cybersecurity have been further refined, marking the entry of the automotive safety field into an era of truly strict supervision.
Product Overview
The MuNiu CryptoLibrary developed by ZC for Infineon TRAVEO T2G encompasses the firmware of the encryption module (CRYPTOGRAPHY) (zCRYPTOGRAPHY CORE), the encryption protocol stack CryptoStack (CSM, CRYIF, CRYPTO, KEYM) for the main core, along with CRYPTOGRAPHY CDD (zCRYPTOGRAPHY COM, zCRYPTOGRAPHY CRY).
The MuNiu CryptoLibrary not only complies with mainstream international cryptographic algorithms of NIST, such as AES, HASH, TDES, ECC, and TRNG/PRNG. Based on ZC's software algorithm library, it has extended a variety of other algorithms, including national cryptographic algorithms like SM2/3/4, Curve25519/X25519, etc. Additionally, it can expand multiple functions based on these algorithms, such as symmetric encryption and decryption, asymmetric signature generation and verification, secure boot, secure flashing, and SecOC.
Besides meeting the version requirements of AUTOSAR 4.4.0, CryptoStack and CRYPTOGRAPHY CDD can also be integrated as a single complex driver in non - AUTOSAR environments.
Based on the TRAVEO T2G, ZC provides the MuNiu CryptoLibrary and has added the ZC MuNiu encryption protocol stack (CryptoStack), which includes the Csm module, CryIf module, Crypto module, and KeyM module, enabling it to be adapted to the T2G CRYPTOGRAPHY encryption module driver.
Ø Csm module: Located in the service layer, it is used to handle the configuration management and scheduling of user information security tasks.
Ø CryIf module: Situated in the ECU abstraction layer, its function is to achieve secure communication between the Csm module and the Crypto module.
Ø CryIf module: Situated in the ECU abstraction layer, its function is to achieve secure communication between the Csm module and the Crypto module.
Ø CryIf module: Situated in the ECU abstraction layer, its function is to achieve secure communication between the Csm module and the Crypto module.
In short, the MuNiu CryptoLibrary is flexibly applicable to Infineon TRAVEO T2G products. It features high scalability, allowing for upgrade configuration and redevelopment according to the requirements of different customer projects, ultimately meeting the diverse information security needs of various customers.
Encryption Protocol Stack
The ZC MuNiu encryption protocol stack is mainly composed of four modules: Csm, CryIf, Crypto, and KeyM. The Csm module meets users' requirements for encryption algorithms of information - security software or hardware, such as AES - 128, CMAC, HASH, TRNG, etc., by configuring CsmJob, and provides interfaces for users to call.
The CryIf module serves to connect the Csm module in the service layer with the Crypto module in the hardware abstraction layer. It safeguards data integrity and confidentiality through security functions like encryption, decryption, verification, and authentication.
The Crypto module enables the transmission of information and data between the main core of TRAVEO T2G and the Cryptography module.
The KeyM module manages keys and certificates. Its functions include parsing and verifying the keys and certificates downloaded into the ECU, and connecting to the Cryptography module driver to store the keys in the protected area of Cryptography.
MuNiu CryptoLibrary of ZC
The software of ZC.MuNiu CryptoLibrary is mainly divided into two parts:
1) Firmware of the Cryptography Encryption Module (zCRYPTOGRAPHY CORE)
2) CryptoStack for Cortex - M4 Main Core (CSM, CRYIF, CRYPTO, CRYPTO(SW)) and CRYPTOGRAPHY CDD (zCRYPTOGRAPHY COM, zCRYPTOGRAPHY CRY)
The CRYPTOGRAPHY CDD contains two sub - modules: the zCRYPTOGRAPHY CRY module which is the call interface of the Crypto layer, and the zCRYPTOGRAPHY COM module for CRYPTOGRAPHY communication. The functional descriptions of each module are shown in Table 1.
The MuNiu CryptoLibrary also supports the SHE standard. Compared with the standard SHE, the CryptoLibrary has some functional expansions, including support for software or hardware algorithms. The main functions and differences are shown in Tables 2 and 3.
Configuration Tools
To meet the diverse project requirements of customers and enhance the scalability of the MuNiu CryptoLibrary, Infineon TRAVEO T2G has implemented the configurability of each module and developed a configuration tool for the MuNiu CryptoLibrary. Customers can, according to their different needs, complete the configuration of each module of the Safety Library on the configuration tool. The tool can generate configuration code files, which can then be integrated into the project.
The MuNiu CryptoLibrary is mainly applied to controllers with information security requirements. This product is suitable for use in the automotive electronic and electrical architecture, including power domain controllers, body domain controllers, safety domain controllers, and infotainment domain controllers.
By integrating the MuNiu CryptoLibrary into the TRAVEO T2G - based automotive electronic control units (ECUs), users can meet the information security functions required for automotive ECUs as specified in the AUTOSAR standard.
Certificate of Registration of MuNiu Software Copyright
Click to download the product manual