ESCRYPT CycurSoC

Close-up of a computer circuit board with a prominent microchip, showcasing the intricate details of electronic components and circuitry.

ESCRYPT CycurSoC is an embedded future-proof cybersecurity software solution for system-on-chip(SoC)-based automotive ECUs. It is designed to meet high-performance cryptographic demands. The solution provides a complete set of security building blocks for heterogenous SoC architectures, utilizing an HSM core and any other SoC CPU cores.

Download Flyer

Your benefits

Fast and flexible

Fully configurable solution, integrable with POSIX and real time operating systems.

Comprehensive

Encapsulates all required functions needed to satisfy OEM automotive security requirements.

Reliable quality

Developed to high quality standards (ASPICE, ISO-21434 CSMS, ISO-26262 ASIL B).

Optimized cybersecurity for powerful on-vehicle computing platforms

This diagram illustrates the software architecture of an automotive System-on-a-Chip (SoC) platform, emphasizing security components and their integration. It highlights various elements, including the Host (Application Processor), Real Time Host(s), and a Hardware Security Module (HSM). The Host runs a hypervisor managing virtual machines for Adaptive and User Space AUTOSAR. The Trust Zone incorporates a Trusted Execution Environment (TEE) alongside Classic AUTOSAR. The HSM Firmware serves as a Trust Anchor. Security components from ESCRYPT CycurSoC for both TEE and HSM are also indicated. — While supporting open and standardized interfaces (for example SHE+, AUTOSAR Classic, and Adaptive), ESCRYPT CycurSoC is flexible and integrable with different embedded technology solutions, including virtual machines and various host environments.

Features

ESCRYPT CycurSoC: the de-facto standard for µP-based SoC

Implements security functionality that is critical to the creation of a security enclave on the HSM core or TEE host
Offers cryptographic protocols and algorithms to the application
Helps to effectively fulfill complex automotive OEM security requirements, while ensuring a smooth integration into the overall system architecture
Retains integrity of data and functionality to achieve reliability, safety, and data protection
Abstracted from the requirements of an OEM and the underlying silicon, making it possible to source one cost-saving security solution that fits all

Cryptographic features

CMAC and HMAC
Hashing
Key derivation
TRNG and PRNG
Digital signature algorithms; ECDSA, EdDSA, RSA
Symmetric and asymmetric encryption
Authenticated encryption and decryption
HE+ support
Key exchange algorithms; ECDH, ECDHE, ECBD
Key wrapping and transport
Key encapsulation mechanism (KEM)
Key storage management and trust management
Certificate handling
- Parsing
- Signing request
- Revocation and CRL handling
- Chain verification

HSM & host core

Secure storage of data and keys in external flash
Secure access
Establishes trusted channel amongst different cores on the SoC
Support for E/E architectures with large number of keys
Support for multi-CPU tenancy
Support for virtualized environment
Responsive operations in multi-CPU use cases
HSM lifecycle mode
Support for secure boot, trusted boot, authenticated boot, and other boot modes
Trust anchor based on signatures
Runtime manipulation detection

Trust zone

Integration with TEE operating systems
Establishes trusted channel between trust zone and other cores on the SoC
Automotive grade security functionality, supporting trusted applications (TA) and the non-secure world

Seven men at a tech conference give a thumbs-up, signifying a successful event.

ETAS and Rambus offer integrated software and hardware security solution

ETAS and Rambus partner to co-develop and provide a bundled cybersecurity solution. The common offering combines the Rambus RT-640 embedded hardware security module (eHSM) IP integrated with ESCRYPT CycurSoC. The integration of the HSM hardware and security software stack avoids costly and lengthy porting, integration, and validation efforts.