PQC Migration for Connected Vehicles and Automotive Supply Chains
Vehicles with 10-to-20-year operational lifetimes being sold today will still be on the road when a CRQC may be operational. Over-the-air update signing is the most urgent migration case: if OTA signing keys are compromised, an attacker could push malicious firmware to an entire fleet. V2X communication, in-vehicle network security, and supplier cryptographic requirements add further scope.
This course covers PQC migration for automotive OEMs, tier-1 suppliers, and the connected vehicle ecosystem.
Who Should Take This Course
Vehicle cybersecurity engineers, automotive architects, ADAS security specialists, connected services engineers, and supply chain security managers at OEMs and tier-1 suppliers.
What You Will Learn
This course covers the quantum threat and PQC migration as it applies specifically to your sector, including sector-specific regulatory requirements, unique technical constraints, and practical migration strategies aligned with the PQC Migration Framework sector extensions.
Course Outline
Module 1 — Automotive Cryptographic Exposure
Where cryptography is used in connected vehicles: OTA update signing, V2X communication, telematics, in-vehicle networking, diagnostic interfaces, and key fob systems. The 10-20 year vehicle lifetime and its implications for cryptographic longevity.
Module 2 — OTA Update Signing Migration
The most urgent automotive PQC use case. Code signing key migration strategies. Dual-signature approaches during transition. Managing signing infrastructure across vehicle generations. Recall and remediation planning.
Module 3 — V2X and Connected Services
V2X communication security and PQC migration. Telematics data protection. Connected service API security. Fleet management cryptographic dependencies.
Module 4 — Standards and Supply Chain
ISO/SAE 21434 cybersecurity requirements. UNECE WP.29 implications. Tier-1 supplier cryptographic requirements. Managing PQC migration across the automotive supply chain.
Prerequisites
None. Sector experience is helpful but not required. For a broader PQC foundation, consider starting with Post-Quantum Foundation.
Certificate of Completion
Upon completion, you will receive a Quantum Academy certificate of completion. This is not a professional certification.