Comment by somerandomqaguy
12 hours ago
UN Regulation No. 155, and 156, and the Cyber Resilience Act (CRA) are requiring car manufacturers to implement cryptographic validation that allows only authorized software from the manufacturer to be run.
12 hours ago
UN Regulation No. 155, and 156, and the Cyber Resilience Act (CRA) are requiring car manufacturers to implement cryptographic validation that allows only authorized software from the manufacturer to be run.
This is just signing, nothing cutting edge. Verification of signatures is a fairly old tech. What is the exact problem here? Is it that manufacturers do not publish the signed binaries or is it that you want to run something on your car compiled by you?
What I meant more is that you need more and more specialized tools (according to the manufacturers). My previous ford needed a special (expensive!) bracket to keep the drivetrain in place if you want to do anything on the engine which makes home service less likely.
These regulations do not mean you need 25k in tooling, but that is what it has come to. And thus there is a blooming (mostly Chinese/Russian) aftermarket tooling business with sketchy software you want to run in a VM.
You're going to have to explain dragging the UN in here.