The MuNiu CryptoLibrary developed by ZC for Infineon TRAVEO T2G encompasses the firmware of the encryption module (HSM) (zHSM CORE), the encryption protocol stack CryptoStack (CSM, CRYIF, CRYPTO, KEYM) for the main core, along with HSM CDD (zHSM COM, zHSM CRY).

The MuNiu CryptoLibrary not only complies with mainstream international cryptographic algorithms of NIST, such as AES, HASH, TDES, ECC, and TRNG/PRNG. Based on ZC's software algorithm library, it has extended a variety of other algorithms, including national cryptographic algorithms like SM2/3/4, Curve25519/X25519, etc. Additionally, it can expand multiple functions based on these algorithms, such as symmetric encryption and decryption, asymmetric signature generation and verification, secure boot, secure flashing, and SecOC.

Besides meeting the version requirements of AUTOSAR 4.4.0, CryptoStack and HSM CDD can also be integrated as a single complex driver in non - AUTOSAR environments.

Based on the TRAVEO T2G, ZC provides the MuNiu CryptoLibrary and has added the ZC MuNiu encryption protocol stack (CryptoStack), which includes the Csm module, CryIf module, Crypto module, and KeyM module, enabling it to be adapted to the T2G HSM encryption module driver.

Ø  Csm module: Located in the service layer, it is used to handle the configuration management and scheduling of user information security tasks.

Ø  CryIf module: Situated in the ECU abstraction layer, its function is to achieve secure communication between the Csm module and the Crypto module.

Ø  Crypto module: Hardware abstraction layer, used to implement data transmission between the Host end and HSM module, access related components, and perform encryption and decryption operations

Ø  KeyM module: Key management and certificate management, used to achieve interaction between keys, certificates, and underlying storage

In short, the MuNiu CryptoLibrary is flexibly applicable to Infineon TRAVEO T2G products. It features high scalability, allowing for upgrade configuration and redevelopment according to the requirements of different customer projects, ultimately meeting the diverse information security needs of various customers.

Crypto Stack

 Flowchart of CRYPTOSTACK

The ZC.MuNiu encryption protocol stack is mainly composed of four modules: Csm, CryIf, Crypto, and KeyM. The Csm module meets users' requirements for encryption algorithms of information - security software or hardware, such as AES - 128, CMAC, HASH, TRNG, etc., by configuring CsmJob, and provides interfaces for users to call.

The CryIf module serves to connect the Csm module in the service layer with the Crypto module in the hardware abstraction layer. It safeguards data integrity and confidentiality through security functions like encryption, decryption, verification, and authentication.

The Crypto module enables the transmission of information and data between the main core of TRAVEO T2G and the HSM module.

The KeyM module manages keys and certificates. Its functions include parsing and verifying the keys and certificates downloaded into the ECU, and connecting to the HSM module driver to store the keys in the protected area of HSM.

CryptoLibrary  MuNiu CryptoLibrary of ZC

Static Architecture Design

Static Architecture of CYT4BB CYBERSECURITY Library Software

Architecture Description

The CYT4BB information security library software architecture mainly consists of two parts: the CM7 core service layer call interface, and the CM0 core module drivers. Among them:

Ø  CM7 Core Service Layer Call Interface

The CM7 core does not contain CryptoStack, only the HSM CDD part, where zHSM CRY includes: AES、CHACHA、CMAC、CRC、DEBUGHANDLING、DES、TDES、ED25519、GETUID、HMAC_SHA1/SHA2/SHA3、KDF、KEYLOAD、PRNG/TRNG、RSA、SHA Wait for the module to call the interface. ZHSM COM is a transmission interface related to inter core communication.

Ø  CM0 core module drivers

The CM0 core contains various module drivers, among which the SHE/SHE+module includes AUTOSAR_ScureHardwareExtension document related requirement modules, including SHE Key, Chipers, MAC, RNG and other modules. The hardware acceleration module is shown in the above figure. HSM LIB is an integration of the HSM software algorithm library, which includes modules such as Ed25519, GETUID, KDF implemented using software algorithms

Start up and operation phase process

STARTUP PROCESS of CYT4BB CYBERSecurity Library Software

The HSM CDD contains two sub - modules: the zHSM CRY module which is the call interface of the Crypto layer, and the zHSM COM module for HSM communication. The functional descriptions of each module are shown in Table 1.

Table 1 Functional Description of Software Modules

The MuNiu CryptoLibrary also supports the SHE standard. Compared with the standard SHE, the CryptoLibrary has some functional expansions, including support for software or hardware algorithms. The main functions and differences are shown in Tables 2 and 3.

Table 2 Main Functions of ZC.MuNiu CryptoLibrary

Table 3. Mu Niu CryptoLibrary's SHE Function Description

Configuration Tools

Configuration Interface Diagram of Zc.Muniu CRYPTOSTACK

To meet the diverse project requirements of customers and enhance the scalability of the MuNiu CryptoLibrary, Infineon TRAVEO T2G has implemented the configurability of each module and developed a configuration tool for the MuNiu CryptoLibrary. Customers can, according to their different needs, complete the configuration of each module of the Safety Library on the configuration tool. The tool can generate configuration code files, which can then be integrated into the project.

The MuNiu CryptoLibrary is mainly applied to controllers with information security requirements. This product is suitable for use in the automotive electronic and electrical architecture, including power domain controllers, body domain controllers, safety domain controllers, and infotainment domain controllers.

AUTOMOTIVE ELECTRONIC AND ELECTRICAL ARCHITECTURE

By integrating the MuNiu CryptoLibrary into the TRAVEO T2G - based automotive electronic control units (ECUs), users can meet the information security functions required for automotive ECUs as specified in the AUTOSAR standard.

With the rapid development of automotive electronics technology, vehicles have transformed from traditional mechanical devices into highly intelligent, electronic, and network - connected complex systems. The introduction of these technologies has brought great convenience to drivers, but at the same time, it has also presented new security challenges. The electronic control systems of vehicles not only need to deal with the threat of functional failures but also must guard against potential cyber - attacks. Therefore, just like Functional Safety, Cybersecurity has become an essential key element in modern vehicle design.

To address this challenge, the International Organization for Standardization (ISO) introduced the ISO 21434 standard in 2021, which specifically provides guidance and a framework for the cybersecurity of road vehicles. With the official launch of the "Technical Requirements for Vehicle - level Cybersecurity" standard in China in the second half of 2024, the technical specifications and implementation standards in the field of automotive cybersecurity have been further refined, marking the entry of the automotive safety field into an era of truly strict supervision.

GB 44495 - 2024 BASIC FRAMEWORK 

Click to download the product manual