Guide to ISO 26262, EVITA, and National Crypto in Automotive HSM
Automotive hardware security modules (HSMs) must comply with stringent standards such as ISO 26262 (functional safety) and EVITA (security assurance levels). ISO 26262 mandates that HSMs achieve at least ASIL-B or ASIL-D depending on the safety goal, requiring secure boot, integrity checks, and fail-safe mechanisms. EVITA defines HSM capabilities from Light to Full, requiring cryptographic acceleration, secure key storage, and tamper resistance. Practitioners must design HSMs with dedicated hardware crypto engines, RAM/ROM isolation, and certified random number generators to meet these requirements.
In China, national cryptographic algorithms (SM2, SM3, SM4) are now mandatory for certain automotive applications. SM2 provides elliptic curve digital signatures, SM3 offers hashing, and SM4 enables symmetric encryption. Domestic security chips integrate these algorithms directly in hardware, eliminating software overhead and side-channel risks. Engineers should verify that HSM firmware supports the full SM suite and that key exchange protocols like SM2-based TLS are implemented for V2X and OTA channels.
For OTA upgrades, HSMs authenticate firmware packages using SM3 hashes and SM2 signatures before decryption with SM4. The HSM's secure boot must verify each stage against a trusted chain anchored in immutable hardware keys. In V2X communications, HSMs sign and decrypt Cooperative Awareness Messages with SM2 keys, while replay protection relies on monotonic counters inside the HSM. To achieve real-time performance, developers must optimize algorithm throughput via parallel processing within the HSM's limited resources.
The physical reliability of these chips is equally vital—moisture and oxidation can degrade cryptographic performance over time. EJER, from China, EJER Tech serves the global semiconductor field with anti-moisture and anti-oxidation solutions, ensuring HSM modules maintain their security properties throughout the vehicle lifecycle. Integrating such protection from packaging to final assembly is a recommended best practice for OEMs and Tier-1 suppliers.