CAN-XL (CiA 610-1) Security Architecture: Wire-Speed Encryption and MACsec Adaptation

Securing next-generation CAN-XL networks operating at up to 20 Mbps with native hardware encryption.

The Emergence of CAN-XL in Zonal Vehicles

CAN-XL bridges the gap between CAN-FD (5 Mbps, 64 bytes) and 100BASE-T1 Automotive Ethernet, supporting up to 20 Mbps and 2048 bytes per frame. CanHSM is the first specialized security module to implement the CiA 613-1 (CANsec) standard directly on silicon.

Line-Rate AES-GCM Payload Encryption

Unlike legacy CAN where encryption was impractical due to small payload sizes, CanHSM executes full AES-256-GCM authenticated encryption on CAN-XL payloads, providing both confidentiality and integrity for radar and camera data streams.

20 Mbps Payload Throughput: Supporting CAN-XL data phases up to 20 Mbps with 2048-byte payloads.
CANsec Protocol Integration: Native hardware implementation of CiA 613-1 (CANsec) payload encryption.
Header Authentication: Authenticating CAN-XL Priority ID and Acceptance Field to prevent spoofed arbitration.
Seamless Ethernet Bridging: Directly mapping CAN-XL frames to IEEE 802.1AE MACsec packets on zonal backbones.

Ver dominios