ETAS and Infineon receive NIST CAVP certification for ESCRYPT CycurHSM implemented on AURIX microcontrollers

The certificate was validated under the Cryptographic Algorithm Verification Program (CAVP) of the National Institute of Standards and Technology (NIST) and granted for ESCRYPT CycurHSM. This automotive embedded security software stack is implemented on Infineon’s second-generation AURIX™ TC3xx hardware security module (HSM).

The internationally recognized CAVP test protocol is considered a de facto standard. It validates the quality of cryptographic algorithm implementations and ensures their correct operation as defined by NIST, the U.S. federal agency responsible for developing cryptographic standards and guidelines. With the CAVP certification, the independent validation of the implemented cryptographic suite ensures that a critical requirement for Federal Information Processing Standards (FIPS) certification, the U.S. federal government’s standard for cryptographic software, has been met.

“By achieving this CAVP certification, both ETAS and Infineon further demonstrate our commitment to providing best-in-class security solutions to our customers,” said Mark Elkins, Onboard Security Operational Unit Concept and Delivery Lead of ETAS. “The CAVP certification eases the burden of additional algorithm validation for automotive OEMs worldwide, ensuring that only state-of-the-art security products are installed in their vehicles.”

“This CAVP certification will further increase customer confidence in Infineon’s MCU products as well as the software solutions developed within our partner ecosystem,” said Thomas Schneid, Senior Director Software, Partnership & Ecosystem Management at Infineon Technologies. “AURIX offers a rich portfolio, and with partners like ETAS as a solution provider we can demonstrate that this is perfectly suited for demanding automotive applications in a constantly evolving market.”

ESCRYPT CycurHSM is an automotive embedded security software stack that implements a security trust anchor using the hardware security module on automotive microcontrollers (MCU). It helps meet complex OEM security requirements and can be deployed in any automotive electronic control unit (ECU) including domain controllers. ESCRYPT CycurHSM enables a smooth integration into any AUTOSAR stack or bootloader and is also useful for non-AUTOSAR systems.

Infineon’s second generation AURIX TC3xx HSM is available across all variants of the AURIX TC3xx MCU family. Therefore, the CAVP validation of ESCRYPT CycurHSM V2.7.13 applies across the entire AURIX TC3xx family. This demonstrates that the AURIX TC3xx HSM is fully capable of supporting CAVP validated cryptographic algorithm implementations with the help of integrated crypto accelerators.

About ETAS

Founded in 1994, ETAS GmbH is a wholly owned subsidiary of Robert Bosch GmbH, represented in twelve countries in Europe, North and South America, and Asia. ETAS’ portfolio includes vehicle basic software, middleware, development tools, cloud-based operations services, cybersecurity solutions, and end-to-end engineering and consulting services for the realization of software-defined vehicles. Our product solutions and services enable vehicle manufacturers and suppliers to develop, operate, and secure differentiating vehicle software with increased efficiency.