As the automotive industry transitions toward software-defined vehicles and highly connected ecosystems, cybersecurity is becoming a foundational design requirement. A challenge arises with the advent of quantum computing, which threatens the security of widely deployed cryptographic standards such as RSA and ECC. This paper addresses the need for quantum-resilient security architectures in the automotive domain by introducing a combined approach that leverages Post-Quantum Cryptography (PQC) and crypto-agility. Unlike conventional static cryptographic systems, our approach enables seamless integration and substitution of cryptographic algorithms as standards evolve.
Central to this work is the role of Hardware Security Modules (HSMs), which provide secure, tamper-resistant environments for cryptographic operations within vehicles. We present how HSMs can evolve into crypto-agile, quantum-safe platforms capable of supporting both hybrid (RSA/ECC + PQC) and fully post-quantum deployments—ensuring secure transitions without requiring hardware replacement. The novelty of this work lies in the design and validation of a first-of-its-kind operational prototype that supports current cryptographic standards (RSA/ECC) and is engineered for plug-and-play migration to PQC.
Our architecture ensures long-term security while minimizing operational disruption and costs. Using a systematic architectural methodology, we integrated both software- and hardware-based HSMs and evaluated their performance under hybrid cryptographic conditions. Key performance metrics such as latency, key negotiation time, and re-keying efficiency demonstrate that crypto agility can be achieved with minimal overhead, confirming its feasibility for real-world deployment.
There is an urgent need to adopt quantum-safe and agile security practices today, as vehicles manufactured now will remain in service long after quantum computers become practical. By embracing crypto-agile designs, automakers can mitigate long-term risks and ensure resilience against future cryptographic threats. This paper provides both a technical roadmap and a working prototype demonstration to guide the automotive industry toward a secure, quantum-resilient future.