Re: [Secdispatch] Problem statement for post-quantum multi-algorithm PKI

[Ira McDonald <[e-mail]>]

Hi Rich,

The autos *do* already support numerous algorithms (including
nation-specific mandatory ones).  They do update their crypto
(for bug-fixes and for new algorithms).  But when new algorithms
are from an entirely different family and need hardware acceleration
to achieve hard timing constraints *within* vehicle internal networks,
there is no practical solution.  Auto OEMs and parts suppliers are
not going to dramatically increase the cost of their ECUs in order
to add FPGAs or something else to allow field upgrades of their
hardware acceleration.

I perceive that this list doesn't care about this issue.  Beware your
lovely "connected cars" in future years.  I'll give up doing a poor
job of explaining the problem on this list.

Cheers,
- Ira

Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: [e-mail]
PO Box 221  Grand Marais, MI 49839  906-494-2434



On Mon, Sep 16, 2019 at 5:53 PM Salz, Rich <[e-mail]> wrote:

> So why are multiple algorithms needed if the target platform (cars) cannot
> update to handle them?
>