← Glossary
Glossary · Security Controls
Key Management
Lifecycle of cryptographic keys from generation through deployment, rotation, and revocation.
Automotive key management covers how keys are generated, provisioned to ECUs at end-of-line, distributed in the field, rotated, escrowed, and revoked when an ECU is decommissioned or compromised. AUTOSAR's KeyM and HSM-backed key stores are the typical implementation surface.
Related terms
KeyM
AUTOSAR Key Manager — manages cryptographic keys and certificates for the Crypto Stack.
Hardware Security Module (HSM)
Tamper-resistant in-ECU module that stores keys and runs cryptographic operations.
SecOC
Secure Onboard Communication (SecOC) is the AUTOSAR mechanism that adds message authentication and freshness protection to in-vehicle network traffic.
Need help applying Key Management on a programme? Use the contact form or request a KAVACH demo.