SAE J3101-4_202606

This report provides a survey of side channel and fault injection attacks that have an impact on automotive embedded systems. The focus is on side channel attacks that target cryptographic algorithms and hardware security engines, as well as sensitive data leakage. The report also considers fault injection attacks against typical vehicle components that allow bypassing of security controls to compromise the target system security and outlines some countermeasures to detect and/or prevent them. The report provides a list of security countermeasures that can be considered by manufacturers based on their risk tolerance to such attacks. Additionally, it offers the automotive industry supply chain a common language to facilitate the communication of side channel and fault injection mitigation requirements among the various stakeholders. Side channel and fault injection attacks have become increasingly relevant to embedded systems in recent years, with tools and technical know-how becoming more affordable and accessible. Guidance is needed on how these attacks apply to automotive embedded systems taking into account in their operational environment, as well as appropriate mitigation techniques. This information report is intended to complement the requirements and use cases for hardware protected security environments that are already defined in SAE J3101, enabling the specification of requirements for side channel and fault injection attack resistance in a consistent way throughout the automotive supply chain.