Session 2 | Stage 2 | Dr Ken Tindell | CryptoCAN Encrypted messaging on CAN bus
Examines session 2 | Stage 2 | Dr Ken Tindell | CryptoCAN Encrypted messaging on CAN bus and evaluates key implications for security practitioners.
Summary
## Why Encrypt CAN?
Dr. Ken Tindell (CTO, Kynetix) argues that Controller Area Network was never designed for confidentiality, yet vehicles increasingly need authenticated, encrypted in-vehicle messaging. Mainstream IT crypto stacks rarely fit CAN's tight timing and bandwidth limits.
## CryptoCAN Design
CryptoCAN adapts automotive SHE (Security Hardware Extension) concepts, including separate authentication and encryption keys, secure key loading, and software HSM emulation. On a Cortex-M0, AES operations run in roughly 13 microseconds with only a few kilobytes of code and ROM tables.
## Message Authentication
Authentication uses CMAC via SHE generate/verify APIs. Verify-only key permissions prevent endpoints that only check messages from forging MACs. Tindell details bit-truncation checks and why sender and verifier roles must remain distinct on constrained ECUs.
## Practical Impact
The talk shows that meaningful CAN security is achievable without bolting on enterprise TLS. Done correctly, embedded crypto can meet real-time automotive requirements while raising the bar against bus injection and tampering.
Related talks
The Linux Foundation·45 min
Outlines linus Torvalds Interviewed on Stage at LinuxCon + CloudOpen Europe 2013 and evaluates key implications for security practitioners.
Secure Our Streets·30 min
Investigates session 3 | Stage 1 | Mohammed Shine | Hacking a Connected Car via APIs and evaluates key implications for security practitioners.
Videos·30 min
Security researchers examine technical aspects of Measuring Security Control Effectiveness with Attack Graph Stages.