Cryptographically Sealing Vehicle Keys to Verified Software States

Extending Platform Configuration Registers (PCRs) with cryptographic hashes of boot stages, ensuring decryption keys are released only if every software component is unmodified.

PCR Extension Mechanics

Executing PCR = Hash(PCR || New_Stage_Hash) ensures that even if malicious software gains execution later, it cannot forge an earlier uncompromised state.

Hardware-enforced measured boot from Stage-0 ROM to hypervisor.
Cryptographic sealing of disk encryption keys to verified PCR banks.
Independent PCR banks supporting SHA-256 and SHA-384 digests.
Immediate key unsealing lock upon detecting boot sequence deviations.

Explore Domain Portfolio