Glossary · Security Controls

Secure Flashing

Authenticated and integrity-checked update of ECU firmware.

Secure flashing requires that firmware images written to ECU memory are signed by an authorised authority and verified against a trust anchor before being committed. It is the ECU-side counterpart to OTA delivery — without it, an OTA channel can deliver an authenticated package to an ECU that still accepts unsigned writes.

Related terms

Secure Boot
Boot-time integrity check that an ECU only runs authenticated firmware.
OTA Update
Over-the-air software update delivered to a vehicle ECU after manufacture.
Hardware Security Module (HSM)
Tamper-resistant in-ECU module that stores keys and runs cryptographic operations.

Need help applying Secure Flashing on a programme? Use the contact form or request a KAVACH demo.

Secure Flashing

Secure Boot

OTA Update

Hardware Security Module (HSM)