Repository metrics
- Stars
- (34,843 stars)
- PR merge metrics
- (Avg merge 57d 13h) (62 merged PRs in 30d)
Description
The current tool provides complete and excellent core functions with stable performance and user-friendly interaction. It greatly improves the efficiency of daily AUTOSAR development and security configuration work, and has been very helpful for our routine development tasks.
To further improve the tool’s integration and meet the standard requirements of automotive hardware security development, we propose adding a built-in SHE key generation function in accordance with the official AUTOSAR specification. The relevant design shall refer to the document: https://www.autosar.org/fileadmin/standards/R25-11/FO/AUTOSAR_FO_TR_SecureHardwareExtensions.pdf
In actual ECU security development, SHE (Secure Hardware Extension) is a critical security module for vehicle MCU encryption. The specification defines multiple standard key slots including MASTER_ECU_KEY, BOOT_MAC_KEY, KEY_1~KEY_10, and RAM_KEY, which correspond to secure boot, data encryption, key update and other security scenarios. At present, the generation of standard SHE keys and corresponding M1-M5 update messages relies on manual calculation or third-party independent tools. The operation process is scattered and inefficient, and non-standard parameter configuration may lead to incompatibility with the AUTOSAR SHE specification.
By integrating the standard SHE key generation module inside the tool, it is possible to support standard-compliant one-click key generation, configurable security attributes, and unified export of key materials and update messages. This optimization can realize one-stop SHE key development and configuration, avoid frequent tool switching and manual calculation errors, and further enhance the tool’s professionalism and completeness in automotive security development scenarios.
This function is only an incremental extension and will not affect any existing functions of the tool. We hope to add this capability in subsequent iterations to provide a more integrated and standardized development experience for AUTOSAR security development work.