BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-4bdb0afd-93a2-4d20-8789-3eb44ce1f7d0@ics.pkic.org
SEQUENCE:1
DTSTAMP:20261025T183315Z
DTSTART:20261201T130000Z
DTEND:20261201T132500Z
STATUS:CONFIRMED
SUMMARY:You Can't Patch the Silicon: Post-Quantum Migration Realities in Au
 tomotive HSM and AUTOSAR Crypto Stacks
DESCRIPTION:Post-quantum migration guidance is largely written for systems 
 that can be patched in place: swap a TLS library\, rotate a certificate aut
 hority\, roll out a firmware update to a fleet of servers. Automotive embed
 ded systems break almost every one of those assumptions\, and this talk is 
 a practitioner's account of what actually happens when you run a real PQC r
 isk and migration assessment against an in-vehicle HSM and AUTOSAR crypto s
 tack instead of a data center.\n\nThree constraints define the problem. Fir
 st\, SecOC authenticates every CAN and CAN-FD frame in real time\, inside p
 ayloads that top out around 64 bytes — ML-DSA signatures and ML-KEM ciphe
 rtexts run into the kilobytes\, so the real-time authentication path cannot
  simply be re-signed with a post-quantum primitive\; the migration has to h
 appen somewhere else in the chain. Second\, the HSM is fixed-function silic
 on soldered into a vehicle that will still be on the road in fifteen to twe
 nty years\, with no OTA path to add lattice-math acceleration after the fac
 t — so "harvest now\, decrypt later" isn't an abstract future risk\, it's
  a clock already running against hardware that shipped years ago. Third\, t
 he AUTOSAR crypto stack (CSM\, CryIf\, KeyM) was built around parameter ass
 umptions that classical algorithms never forced anyone to question\, which 
 turns crypto-agility into a real integration problem rather than a configur
 ation flag.\n\nThis talk walks through where post-quantum primitives map cl
 eanly today (OTA backend TLS\, V2X certificate issuance\, secure boot signi
 ng)\, what has to stay symmetric and why\, and how an ISO 21434-aligned ris
 k assessment was used to decide which ECUs and assets get migrated first wh
 en neither silicon nor budget allow migrating everything at once.\n\n## Key
  Takeaways\n\nAttendees will leave with:\n\n- A concrete picture of what do
 es and doesn't map onto NIST's PQC primitives in a real-time embedded authe
 ntication path\, and why\n- A working model for why "harvest now\, decrypt 
 later" timelines look different for fixed-lifecycle hardware than for patch
 able infrastructure\n- A risk-based method\, grounded in ISO 21434 clause 8
 \, for sequencing PQC migration across an ECU portfolio under real budget a
 nd silicon constraints\n- Open questions the automotive supply chain hasn't
  answered yet — useful for anyone assessing vendor or supplier readiness 
 in this sector\n\nSpeakers: Swathi C L
LOCATION:Room C (8)
CATEGORIES:Room C (8)
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR