Impact of quantum computing technology on the automotive industry, the potential cybersecurity risks of the new technology and the risk mitigation options for car manufacturers.
Quantum computers are based on an emerging technology that could change the design and use of cars in the future. They use the principles of quantum mechanics to carry out calculations that far exceed the capabilities of classical computer-aided calculations (“computing”). In contrast to classical digital calculations, which rely only on binary states of zeros and ones, the calculations use quantum bits or qubits that can exist in several states at the same time. This allows them to process large amounts of information at unprecedented speeds and solve complex problems that traditional computers would take infinitely long to solve.
Ziv Chang, Vice President of Automotive CyberThreat Research Lab at automotive cybersecurity expert VicOne, explains the impact of quantum computing technology on the automotive industry, the potential cybersecurity risks of the new technology and the risk mitigation options for automakers.
Modern cars are becoming increasingly complex
In recent years, the automotive industry has begun to recognize the potential of quantum computing and understand the way it can revolutionize the design, manufacture and operation of vehicles. As a result, with the increasing complexity of modern cars equipped with numerous sensors, processors and communication systems, automobile manufacturers (OEMs) have highlighted the need for more efficient and powerful digital computing technologies.
Using the latest developments in quantum simulation, thanks to tackling complex optimization problems and the use of advanced quantum-based solutions for AI and machine learning, the automotive industry is developing quantum computing applications to address the aforementioned challenges. Automotive companies such as Toyota, Volkswagen Group, Ford Motors, BMW Group and Mercedes-Benz have partnered with quantum computing companies or start-ups to use the technology for various applications in the automotive industry.
Optimized routing through quantum computing
For example, a leading German automobile manufacturer has been exploring the potential of quantum computing for various applications, including optimizing traffic flow and developing advanced materials for electric vehicles. Back in 2019, the company announced a collaboration with a Canadian quantum computing company that focuses on so-called quantum annealing technology to optimize the routing of vehicles and develop new materials for electric cars. In addition, the car manufacturer is also researching the use of quantum computing in the field of autonomous driving, particularly in the development of advanced driver assistance systems.
Data encryption in the automotive industry
The increasing use of connected vehicle technologies such as infotainment, navigation and vehicle-to-vehicle systems highlights the growing need for reliable and powerful cybersecurity that ensures the security and integrity of sensitive data transmitted inside and outside the vehicle. For this reason, the automotive industry relies heavily on cryptographic methods to meet authentication, authorization, integrity and confidentiality requirements of communications and prevent cyberattacks and data breaches.
Cryptographic methods secure data transferred between vehicles, infrastructure and the cloud. This data includes personal and sensitive information such as location information, driving habits and personal preferences or behavior patterns. Cryptographic algorithms or protocols can be used to prevent unauthorized access to critical systems such as electronic control units (ECUs) or the central gateway. Without these encryption methods, connected vehicles could be more vulnerable to cyberattacks, including ransomware attacks, data theft, and unwanted remote vehicle takeover or control by third parties. These attacks could not only jeopardize the privacy and safety of vehicle occupants, but also pose a significant threat to public safety.
Examples of cryptographic methods used in the industry include encryption, decryption and hashing. During encryption, the plain text or data is converted into a secret code or ciphertext so that it is no longer readable by unauthorized users. During decryption, the encrypted text is converted back into plain text. Hashing involves converting a string into another value, typically represented by a shorter value or fixed-length key, making the original string easier to find.
Impending security risks
Because the automotive industry relies heavily on encryption algorithms, quantum computing offers criminals a new way to crack encryption codes.
Although experts believe that the full development of quantum computers is still at least a decade away, quantum computing has made significant progress in the field of cryptanalysis, with the systems capable of performing certain mathematical operations that are intractable to classical computers.
In 1994, American mathematician Peter Shor discovered that quantum computers could accelerate the decryption of RSA encryption schemes. Even the seemingly uncrackable 2.048-bit RSA or ECC can potentially be cracked using quantum computers. In addition, quantum computers can use Grover's algorithm to speed up searches for unsorted databases, potentially cracking symmetric encryption algorithms such as AES and hashing algorithms such as SHA. Both are widely used standards for securing data and ensuring the integrity of its transmission. A recent paper by Chinese physicist Shijie Wei also shows that a 2.048-bit RSA key can be cracked by a quantum circuit with 372 physical qubits and a depth of thousands.
Reduce risk with secure OTA solutions
The impending breakthrough of quantum computers poses significant risks for the automotive industry, making the implementation of post-quantum cryptography (PQC) essential. The National Institute of Standards and Technology (NIST) in the USA, among others, is aware of these risks and is taking measures to manage them. Since 2015, NIST has been looking for new encryption algorithms to replace those that quantum computers can potentially crack. In July 2022, NIST presented the first four quantum-resistant cryptographic algorithms for general encryption and digital signatures. These algorithms will be included in NIST's post-quantum crypto standard, which is expected to be finalized in about two years.
However, the automotive industry cannot afford to wait until then as the vehicles already on the road have a lifespan of 10 to 15 years. A large-scale recall campaign and the replacement of all vehicle algorithms two years after registration is unacceptable. A solution must therefore be found immediately.
Wireless software updates
A viable solution to mitigate potential risks associated with outdated encryption algorithms in connected vehicles is to use secure over-the-air (OTA) solutions. This wireless delivery of new software, firmware or other data to mobile and IoT devices is used to prepare for and enable future updates or replacements of new encryption algorithms. With this practical approach, automobile manufacturers can ensure that their vehicles are equipped with the latest and most secure encryption methods, reducing the risk of cyberattacks and increasing the overall security of vehicles. In the past, software updates had to be performed in person by a technician at a car dealership, which was costly and time-consuming. Thanks to Secure OTA, updates can now be sent wirelessly to vehicles, saving both car manufacturers and customers time and money.
These are some of the benefits that secure OTA solutions offer to car manufacturers and customers:
- It enables car manufacturers to quickly and easily fix vulnerabilities in their software. This is particularly important when there are vulnerabilities in software that hackers could exploit to gain access to sensitive vehicle systems or damage the vehicles.
- Secure OTA helps car manufacturers improve the functionality of their vehicles over time. By wirelessly delivering software updates, OEMs can add new features and capabilities to their vehicles long after they have already been sold. This can increase customer satisfaction and loyalty and give automakers a competitive advantage.
- OEMs can update legacy encryption algorithms or new post-quantum algorithms, replace compromised private keys, or strengthen multi-layer encryption mechanisms.
- The solutions can help reduce the number of vehicles that need to be recalled for software updates, which can be costly and time-consuming.
Secure OTA solutions are indeed valuable applications for the automotive industry. They enable car manufacturers to improve the safety, functionality and efficiency of their vehicles over time while reducing costs and increasing customer satisfaction. As connected vehicles become more widespread, secure OTA will become an increasingly important tool for automakers to mitigate cyber risks associated with quantum computing.
Conclusion
The automotive industry is well aware of the potential of quantum computing for the development, manufacture and use of vehicles. However, because the automotive industry relies heavily on encryption algorithms, quantum computing poses risks in the form of new opportunities for malicious actors to crack encryption codes. To mitigate these risks, the industry must take action. In addition to updating existing encryption algorithms on PQC, secure OTA solutions can be used to continuously update and strengthen new algorithms and sensitive keys. This allows the industry to continue to innovate while reducing risks to vehicles on the road.
More at VicOne.com
About VicOne
With a vision to secure the vehicles of tomorrow, VicOne offers a broad portfolio of cybersecurity software and services for the automotive industry. VicOne's solutions are specifically designed to meet the stringent requirements of automotive manufacturers and are designed to meet the specific needs of modern vehicles. As a subsidiary of Trend Micro, VicOne has a solid foundation in cybersecurity that comes from Trend Micro's over 30 years of experience in the industry.