IAV quantumSAR

IAV quantumSAR is planned as an AUTOSAR Cryptodriver with a collection of post-quantum cryptographic algorithms for microcontroller presented by IAV GmbH. The post-quantum cryptographic algorithms are based on the PQClean repository, which is a clean collection of the NIST post-quantum project. IAV quantumSAR implements these algorithms to use them for automotive microcontrollers in an AUTOSAR Classic environment. The goal is to have a collection of various cryptographic algorithms for future automotive cybersecurity projects preparing for the upcoming computing power of quantum computers.

Contact

E-Mail: [email protected]

Security Note

There was no security risk analysis like TARA or similar carried out for IAV quantumSAR. The post-quantum cryptographic algorithms itself were evaluated by NIST.

Content

The base of IAV quantumSAR is the PQCleanAutomotive repository. It includes the following post-quantum cryptographic algorithms:

• ML‑KEM (CRYSTALS-KYBER)
• ML‑DSA (CRYSTALS-DILITHIUM)
• SLH‑DSA (SPHINCS+)
• FN‑DSA (FALCON)
• HQC

Implementation

For the integration of IAV quantumSAR, the file Crypto.c contains an example of the use of the ML-KEM, ML-DSA, SLH-DSA, FN‑DSA and HQC algorithm.

In the SLH-DSA algorithm, dynamic arrays had to be replaced by static arrays in various functions for the microcontroller implementation.

License

Copyright [2026] [IAV GmbH]

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

AUTOSAR

IAV quantumSAR should support the AUTOSAR Version R23-11.

MISRA

IAV quantumSAR and the post-quantum cryptographic algorithms are checked with the 2012 version of MISRA. Not all MISRA findings could be resolved. An explanation has been written in the relevant places.

Doxygen

The post-quantum cryptographic algorithms have been labelled with doxygen comments for documentation reasons.

Measurement results

Our measurements of the post-quantum cryptographic algorithms' running times and memory consumption are documented in our open access paper for the 23rd escar Europe 2025:

   https://hss-opus.ub.ruhr-uni-bochum.de/opus4/frontdoor/index/index/year/2025/docId/13649