Design-Space Mapping of Post-Quantum Cryptographic Artifact Transport on CAN-FD: A Discrete-Event Simulation Study
Source abstract
Abstract
Post-quantum cryptography (PQC) artifacts are one to three orders of magnitude larger than their classical counterparts and must be segmented via ISO-TP across a shared CAN-FD bus while coexisting with periodic safety-critical traffic. No prior work has quantitatively mapped the transport-level feasibility of these artifacts under realistic multi-electronic control unit (ECU) contention. This paper presents a validated discrete-event simulator and evaluates 29 parameter sets from nine algorithm families—spanning the KpqC final portfolio, NIST FIPS 203–205 standards, and the draft FIPS 206—across 534 scenarios classified as feasible, borderline, or infeasible. Results show that key encapsulation mechanism (KEM) feasibility is scenario-dependent: domain scale and startup coordination dominate over algorithm choice, with 4-ECU staggered deployments feasible for all Level-1 candidates, while 16-ECU simultaneous startup is universally infeasible. For digital signatures, FN-DSA achieves the best transport feasibility due to its compact signature, while HQC is uniformly infeasible and SLH-DSA is nearly uniformly infeasible, quantifying the CAN-FD bandwidth premium of algorithmic diversity. System-side traffic shaping—staggered startup and reserved bus windows—outperforms algorithm substitution as a mitigation strategy. To the best of our knowledge, these findings constitute the first design-space map of PQC artifact transport on CAN-FD and provide actionable deployment guidelines for post-quantum transition.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Smart Grid Security and Resilience · Cryptographic Implementations and Security · Security and Verification in Computing
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Information Computer Engineering, Hansung University, Seoul 02876, Republic of Korea
Department of Convergence Security, Hansung University, Seoul 02876, Republic of Korea
References (52)
Show source-provided references
1. Shor, P.W. (1994, January 20–22). Algorithms for Quantum Computation: Discrete Logarithms and Factoring. Proceedings of the 35th Annual Symposium on Foundations of Computer Science (FOCS), Santa Fe, NM, USA.
2. National Institute of Standards and Technology (NIST) (2026, April 06). Post-Quantum Cryptography Standardization, Available online: https://csrc.nist.gov/projects/post-quantum-cryptography.
3. United Nations Economic Commission for Europe (2021). UN Regulation No. 155—Uniform Provisions Concerning the Approval of Vehicles with Regards to Cyber Security and Cyber Security Management System, UNECE. Entered into force 22 January 2021.
4. (2021). Road Vehicles—Cybersecurity Engineering. Technical Report (Standard No. ISO/SAE 21434:2021).
5. National Institute of Standards and Technology (2025). Considerations for Achieving Crypto Agility: Strategies and Practices, NIST. Cybersecurity White Paper 39.
6. Mosca, M., and Piani, M. (2022). Quantum Threat Timeline Report 2022, Global Risk Institute.
7. National Institute of Standards and Technology (2024). Transition to Post-Quantum Cryptography Standards, NIST. Internal Report 8547 (Initial Public Draft).
8. National Security Agency (2022). Announcing the Commercial National Security Algorithm Suite 2.0, NSA. Cybersecurity Advisory.
9. National Institute of Standards and Technology (2024). FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard (ML-KEM), NIST. Technical Report.
10. National Institute of Standards and Technology (2024). FIPS 204: Module-Lattice-Based Digital Signature Standard (ML-DSA), NIST. Technical Report.
11. National Institute of Standards and Technology (2024). FIPS 205: Stateless Hash-Based Digital Signature Standard (SLH-DSA), NIST. Technical Report.
12. KpqC Competition (2025, September 17). KpqC Competition and Final Selection Announcement. Available online: https://kpqc.or.kr/competition.html.
13. (2022). Specification of Communication Management. Technical Report (Standard No. AUTOSAR AP R22-11).
14. (2024). Road Vehicles—Controller Area Network (CAN)—Part 1: Data Link Layer and Physical Signalling. Technical Report (Standard No. ISO 11898-1).
15. (2016). Road Vehicles—Diagnostic Communication over Controller Area Network (DoCAN)—Part 2: Transport Protocol and Network Layer Services. Technical Report (Standard No. ISO 15765-2:2016).
16. (2022). Specification of Secure Onboard Communication. Technical Report (Standard No. AUTOSAR CP R22-11).
17. Post-quantum cryptography for automotive systems10.1016/j.micpro.2021.104379 ↗
18. Pott, C., Jungklass, P., Csejka, D.J., Eisenbarth, T., and Siebert, M. (2025, January 13–17). Secure Boot in Automotive Real-Time Systems in Context of Post-Quantum Cryptography. Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS ’25), Taipei, Taiwan.
19. Cultice, T., and Thapliyal, H. (2022). PUF-Based Post-Quantum CAN-FD Framework for Vehicular Security. Information, 13.10.3390/info13080382 ↗
20. Securing in-vehicle communications through post-quantum cryptography and network segmentation10.1016/j.compeleceng.2025.110488 ↗
21. Lee, M.W., Sim, M.J., Song, G.J., Yoon, S.Y., and Seo, H.J. (2025, January 26–28). KpqC on CAN-FD: A Feasibility Assessment. Proceedings of the Korea Information Processing Society Conference (ACK 2025), Seoul, Republic of Korea.
22. Controller Area Network (CAN) Schedulability Analysis: Refuted, Revisited and Revised10.1007/s11241-007-9012-7 ↗
23. Schreiner, M., Mahmoud, H., Huber, M., Koç, S., and Waldmann, J. (2013, January 12–13). CAN FD from an OEM Point of View. Proceedings of the 14th International CAN Conference, Paris, France.
24. (2024). Road Vehicles—Diagnostic Communication over Controller Area Network (DoCAN)—Part 2: Transport Protocol and Network Layer Services (Standard No. ISO 15765-2:2024).
25. Alagic, G., Barker, E., Chen, L., Moody, D., Robinson, A., Silberg, H., and Waller, N. (2025). Recommendations for Key-Encapsulation Mechanisms, NIST. Special Publication 800-227.10.6028/NIST.SP.800-227 ↗
26. SMAUG (-T), Revisited: Timing-Secure, More Compact, Less Failure10.1109/ACCESS.2024.3511346 ↗
27. NTRU+: Compact Construction of NTRU Using Simple Encoding Method10.1109/TIFS.2023.3299172 ↗
28. HAETAE: Shorter Lattice-Based Fiat–Shamir Signatures10.46586/tches.v2024.i3.25-75 ↗
29. Kim, S., Ha, J., Son, M., Lee, B., Moon, D., Lee, J., Lee, S., Kwon, J., Cho, J., and Yoon, H. (2023, January 26–30). AIM: Symmetric Primitive for Shorter Signatures with Stronger Security. Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS ’23), Copenhagen, Denmark.10.1145/3576915.3616579 ↗
30. Aguilar Melchor, C., Aragon, N., Bettaieb, S., Bidoux, L., Blazy, O., Bos, J., Deneuville, J.C., Dion, A., Gaborit, P., and Lacan, J. (2026, April 06). HQC: Hamming Quasi-Cyclic Code-Based Cryptosystem, Available online: https://pqc-hqc.org/doc/hqc_specifications_2025_08_22.pdf.
31. Alagic, G., Bros, M., Ciadoux, P., Cooper, D., Dang, Q., Dang, T., Kelsey, J., Lichtinger, J., Liu, Y., and Miller, C. (2025). Status Report on the Fourth Round of the NIST Post-Quantum Cryptography Standardization Process, National Institute of Standards and Technology. Technical Report IR 8545.10.6028/NIST.IR.8545 ↗
32. National Institute of Standards and Technology (2025). FIPS 206 (Draft): FN-DSA Digital Signature Standard, NIST. Technical Report.
33. Prest, T., Fouque, P.A., Hoffstein, J., Kirchner, P., Lyubashevsky, V., Pornin, T., Ricosset, T., Seiler, G., Whyte, W., and Zhang, Z. (2026, April 06). FALCON: Fast-Fourier Lattice-Based Compact Signatures over NTRU, Available online: https://falcon-sign.info/falcon.pdf.
34. Bernstein, D.J., Hülsing, A., Kölbl, S., Niederhagen, R., Rijneveld, J., and Schwabe, P. (2026, April 06). SPHINCS+: Submission to the NIST Post-Quantum Cryptography Standardization Project, Available online: https://sphincs.org/data/sphincs+-r3.1-specification.pdf.
35. Bos, J.W., Carlson, B., Renes, J., Rotaru, M., Sprenkels, D., and Waters, G. (2022, January 15–16). Post-Quantum Secure Boot on Vehicle Network Processors. Proceedings of the 20th Embedded Security in Cars (Escar) Europe, Berlin, Germany.
36. Nguyen, H.P., and Chen, Y. (2024). Lightweight, Post-Quantum Secure Cryptography Based on Ascon: Hardware Implementation in Automotive Applications. Electronics, 13.10.3390/electronics13224550 ↗
37. Rathweg, A., Osman, A., Fleig, A., Katsigianni, E., and Tschache, A. (2023, January 15–16). Impacts of Post-Quantum Cryptography on Automotive Security: A Case Study. Proceedings of the 11th Embedded Security in Cars (Escar) USA, Hamburg, Germany.
38. Kannwischer, M.J., Rijneveld, J., Schwabe, P., and Stoffelen, K. (2019, January 22–24). pqm4: Testing and Benchmarking NIST PQC on ARM Cortex-M4. Proceedings of the Second NIST Post-Quantum Cryptography Standardization Conference, Santa Barbara, CA, USA.
39. Bozdal, M., Samie, M., Aslam, S., and Jennions, I. (2020). Evaluation of CAN Bus Security Challenges. Sensors, 20.10.3390/s20082364 ↗
40. A Systematic Review on Security Attacks and Countermeasures in Automotive Ethernet
41. Calculating Controller Area Network (CAN) Message Response Times10.1016/0967-0661(95)00112-8 ↗
42. Tenruh, M., Oikonomidis, P., Charchalakis, P., and Stipidis, E. (2015, January 27). Modelling, Simulation, and Performance Analysis of a CAN FD System with SAE Benchmark Based Message Set. Proceedings of the 15th International CAN Conference (iCC 2015), Vienna, Austria.
43. (2020). Road Vehicles—Unified Diagnostic Services (UDS)—Part 1: Application Layer. Technical Report (Standard No. ISO 14229-1:2020).
44. (2018). Road Vehicles—Functional Safety. Technical Report (Standard No. ISO 26262:2018).
45. Law, A.M. (2024). Simulation Modeling and Analysis, McGraw-Hill Education. [6th ed.].
46. Desjardins, A. (2026, March 15). Python-Can-Isotp: Python Implementation of ISO-TP (ISO 15765-2). Available online: https://github.com/pylessard/python-can-isotp.
47. Moody, D., Perlner, R., and Smith-Tone, D. (2024). Status Report on the First Round of the Additional Digital Signature Schemes for the NIST Post-Quantum Cryptography Standardization Process, NIST. Internal Report 8528.
48. Making the Case for Centralized Automotive E/E Architectures10.1109/TVT.2021.3054934 ↗
49. Sim, M., Song, G., Lee, M., Yoon, S., Baksi, A., and Seo, H. (2025). Integrating and Benchmarking KpqC in TLS/X.509. Electronics, 14.10.3390/electronics14183717 ↗
50. Mutter, A., Hartwich, F., and Muth, M. (2021, January 14–17). CAN XL—The Next Step in CAN Evolution. Proceedings of the 17th International CAN Conference (iCC 2021), Baden-Baden, Germany.
51. CAN in Automation (2024). CiA 610-1: CAN XL Data Link Layer, CAN in Automation e.V.. Technical Report.
52. Wiemer, F., and Mutter, A. (2025). Beyond Ethernet: Reusing MACsec for CANsec, IACR. IACR Cryptology ePrint Archive, Report 2025/2224.