Beyond Classical PKI: A Quantum-Safe Authentication Framework for Automotive OTA...
summary
Proposes a deployable quantum-safe OTA authentication protocol that uses Leighton-Micali Signatures for server identity and Module-Lattice ML-KEM to derive session keys, adds a one-time ticket-gating filter to block invalid burst requests, and achieves mutual authentication with a single round trip. Claims preservation of authenticity, confidentiality, integrity and anti-rollback while resisting replay and quantum attacks, and demonstrates feasibility on a Raspberry Pi 3 over Wi‑Fi with protocol overhead a small fraction of total OTA time.
AI-written summary · about
chapters (11)
- 0:00Quantum-safe automotive OTA intro
- 2:19Wireless OTA security challenges
- 3:23Classical PKI vs quantum threats
- 4:48Quantum-safe framework contributions
- 6:34Uptane vs system model overview
- 7:58Protocol design and registration phase
- 9:23Mutual authentication and key exchange
- 10:47Handling disconnections and recovery
- 11:53Security analysis and performance
- 13:57Comparison with OTA security solutions
- 14:17Conclusion and future work
related talks
19mPost-Quantum Firmware Signing in IoT: Practical PQC-FOTA Implementation
24mHybrid Quantum-Safe Cryptography for Electric Vehicle Charging Infrastructure
26mCrypto-Agile PKI: A Strategic Blueprint for Post-Quantum Trust
20mPost-Quantum Cryptography for the Internet of Things
30mCoping with post-quantum signatures in the WebPKI
15mImplementing Hybrid TLS with ML-KEM-768 for Post-Quantum Security in Mobile IIoT Deployments
55mMaking PQ Signatures work in the WebPKI
30mPost-Quantum Crypto Integration for Enterprise Applications