MICROSAR HSM

Run symmetric and asymmetric cryptographic operations on the HSM’s secure core. Encryption, decryption, signing, and verification all execute in isolated memory, separated from the host application. 

Use the HSM’s cryptographic hardware accelerators wherever they are available. MICROSAR HSM addresses these accelerators directly, so you get maximum throughput without writing low-level driver code. 

MICROSAR HSM is Post-Quantum Cryptography compatible. You prepare for the next generation of cryptographic standards inside the same firmware, without re-architecting your ECU.

Store keys, certificates, mileage, and other protected content inside the HSM. The number of items you can store is limited only by hardware resources, not by the firmware. 

Derive working keys with state-of-the-art algorithms, directly on the HSM. Your master keys stay in protected memory at all times.

Verify the authenticity of the ECU application at startup during secure boot. You can optionally run the check concurrently with system startup, to minimize boot time. 

Authenticate in-vehicle messages with Secure Onboard Communication (SecOC). MICROSAR HSM calculates and verifies message authentication codes in hardware, keeping CAN and Ethernet traffic at line rate. 

Offload TLS connection setup and payload encryption to the HSM with Secure Off-board Communication. Private keys stay in protected memory and never touch the host.

Adapt memory footprint and runtime to your specific use case. The modular firmware architecture lets you include precisely what your project needs.

Debug at source level. Vector delivers MICROSAR HSM with source code, so you retain full transparency over what runs on your HSM.

Implement OEM- or customer-specific cryptographic requirements inside the firmware. The custom crypto driver gives you a defined extension point for project-specific algorithms.

Configure the firmware with DaVinci Configurator Classic, the same proven configuration tool you already use for the rest of your stack. No proprietary configurator, no separate workflow.

Receive MICROSAR HSM for a range of semiconductor manufacturers. You are not tied to a single silicon vendor. 

Hardware-specific components are encapsulated within the firmware as interchangeable modules. When you change silicon platforms, only these need to be adapted while your upper-layer integration stays the same.

MICROSAR HSM works with MICROSAR Classic on the host side. The Crypto driver on the host talks to the HSM Job Processor through optimized shared memory. 

Together with the MICROSAR Bootloader, which handles secure software updates, the full update path, from authenticity check to deployment, is covered.