Training Course Professional

Quantum-Safe Over-the-Air Update Security for Connected Vehicles

Securing OTA firmware delivery pipelines against harvest-now-decrypt-later threats using PQC signing schemes.

Full day (6 hours)
Certificate on completion
Enquire About This Course View Curriculum

Proud to recommend our expert members

Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence
Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence

Course Overview

Full-day workshop on post-quantum security for vehicle OTA update infrastructure. Covers ECU firmware signing with ML-DSA, OTA server authentication with hybrid ML-KEM TLS, UNECE WP.29 R155/R156 type approval compliance, ISO/SAE 21434 cryptographic lifecycle, and phased PQC migration for 15-year vehicle lifetime constraints.

Curriculum

Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.

# Session Topics
1 OTA Attack Surface Under Quantum Threat Why vehicle update infrastructure is a high-value target
2 OTA Cryptographic Architecture Deep Dive ECU firmware signing, server authentication, and delivery encryption
  • RSA and ECC dependencies across the OTA chain: code signing keys, TLS certificates, secure boot, V2X
  • ECU firmware signing with ML-DSA (CRYSTALS-Dilithium): signature sizes, verification latency on automotive MCUs
  • OTA server authentication and update delivery: hybrid TLS 1.3 with ML-KEM key encapsulation
Break
3 Regulatory and Type Approval Compliance UNECE WP.29 R155/R156, ISO/SAE 21434, and TISAX
  • UNECE WP.29 R155 cybersecurity management system: cryptographic agility as a type approval condition
  • R156 software update management: how PQC migration affects RXSWIN versioning and homologation
  • ISO/SAE 21434 Clause 9 vulnerability management: quantum threat as a supply chain risk vector
4 Interactive Demonstration Facilitator-led OTA threat modelling exercise
  • Walk-through of a quantum-enabled OTA attack scenario: intercepted firmware update, forged code signature
  • Cryptographic dependency mapping for a reference OTA architecture (cloud, gateway ECU, target ECUs)
  • Migration priority sequencing by ECU class: safety-critical ASIL-D first, infotainment last
Break
5 Implementation Roadmap Phased PQC migration for OTA infrastructure
  • Phase 1 (immediate): hybrid TLS for OTA servers, ML-DSA dual-signing for new ECU firmware releases
  • Phase 2 (12-24 months): secure boot migration, HSM key provisioning for ML-KEM, gateway ECU updates
  • Vendor procurement language: cryptographic agility clauses for tier-1 ECU suppliers and TSPs
6 Vehicle Lifetime Constraints Managing 15-year cryptographic exposure windows
  • Vehicles shipping in 2026 will be on roads until 2041: what cryptographic assumptions hold across that window
  • Key rotation strategies for vehicles without physical recall capability
  • Balancing flash memory constraints on legacy ECUs against PQC key and signature sizes
7 Q&A and Action Planning

Designed and Delivered By

Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.

QD

Quantum Security Defence

Course design and delivery

QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.

Enquire About This Course

Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.

Contact Us
Training Courses Consulting Services Training