Post-Quantum Cryptography (PQC) in Automotive: Trends and Applications

By /

Introduction

As quantum computing advances, today's RSA/ECC cryptographic systems face the threat of being broken. Post-quantum cryptography (PQC) has become a forward-looking area of investment in automotive cybersecurity.

1. Why Should the Automotive Industry Care About PQC?

  1. Quantum computing could break existing RSA/ECC encryption, putting vehicle communications, cryptographic keys and OTA signature security at risk.
  2. The "harvest now, decrypt later" threat: attackers collect encrypted data today and break it in bulk once quantum computers mature.
  3. Vehicles have long lifecycles (10–15 years), so provisions must be made well in advance to address future threats.

2. ISO 21434 and PQC

The draft of the new edition of ISO 21434 already incorporates a migration plan for quantum-resistant algorithms (such as CRYSTALS-Kyber), placing higher computing-power demands on in-vehicle HSMs.

3. What PQC Demands of Automotive Chips

PQC (such as CRYSTALS-Kyber) is computationally demanding, requiring more powerful in-vehicle HSMs. Mainstream automotive-grade chips have already begun to support PQC.

4. A Recommended Dual-Track Strategy

  1. Today: use China's national cryptographic algorithms (SM2/SM3/SM4) to meet current compliance requirements.
  2. Tomorrow: reserve PQC capability to address quantum threats.
  3. Establish a dual-track approach of "national cryptography + quantum resistance".

5. Implementation Recommendations

  1. Adopt a hybrid-encryption transition strategy (traditional algorithms running in parallel with PQC).
  2. Reserve PQC hardware acceleration or software-upgradable support at the chip level.
  3. Track the requirements for PQC migration in the new edition of ISO 21434.

Conclusion

Post-quantum cryptography is not a distant future; it is a direction automotive cybersecurity must prepare for now. Moving early is the only way to stay secure and competitive through technological change.

Need Compliance Support?

Concerned about how post-quantum cryptography will affect your products? QinGuard provides consulting on PQC technology roadmaps and compliance planning to help you prepare for the quantum era.

Scroll to Top