Every connected vehicle on the road depends on OTA update infrastructure secured by RSA or ECC. This workshop covers how to migrate that infrastructure to post-quantum cryptography before the cryptographic assumptions underlying ECU firmware signing, server authentication, and update delivery are broken.
A modern connected vehicle receives dozens of OTA software updates per year. Each update is signed with RSA or ECDSA keys, transmitted over TLS-protected channels, and verified by secure boot firmware on the target ECU. Every link in that chain depends on cryptographic primitives that Shor's algorithm will break. A vehicle shipping in 2026 will be on the road until at least 2041. That is 15 years of cryptographic exposure, and for most OEMs, the ECUs installed at the factory cannot be physically recalled for key replacement. The OTA infrastructure itself is the only mechanism for rotating cryptographic material across the fleet, which means the OTA infrastructure must be quantum-safe before the ECUs it serves can be migrated.
UNECE WP.29 R155 requires a cybersecurity management system as a condition of type approval. R156 governs software update management and introduces RXSWIN (Rx Software Identification Number) versioning that is directly affected by cryptographic algorithm changes. ISO/SAE 21434 Clause 9 places vulnerability management obligations on OEMs that extend to supply chain cryptographic risk. This workshop covers the OTA-specific attack surface (code signing, TLS, secure boot, V2X), walks through a facilitator-led threat modelling exercise on a reference OTA architecture, and delivers a phased migration roadmap that sequences PQC deployment by ECU criticality class (ASIL-D safety-critical first, infotainment last). Participants leave with a cryptographic dependency map of their OTA chain and vendor procurement language for tier-1 ECU suppliers.
Full-day session structure with scheduled breaks. Content is configurable to your OTA architecture, ECU fleet composition, and type approval jurisdiction.
| # | Session | Topics |
|---|---|---|
| 1 | OTA Attack Surface Under Quantum Threat Why vehicle update infrastructure is a high-value target | |
| 2 | OTA Cryptographic Architecture Deep Dive ECU firmware signing, server authentication, and delivery encryption |
|
| Break, after 60 min | ||
| 3 | Regulatory and Type Approval Compliance UNECE WP.29 R155/R156, ISO/SAE 21434, and TISAX |
|
| 4 | Interactive Demonstration Facilitator-led OTA threat modelling exercise |
|
| Break, after 90 min | ||
| 5 | Implementation Roadmap Phased PQC migration for OTA infrastructure |
|
| 6 | Vehicle Lifetime Constraints Managing 15-year cryptographic exposure windows |
|
| 7 | Q&A and Action Planning | |
Workshops are designed and delivered by QSECDEF in collaboration with sector specialists. All facilitators have direct experience in both quantum technologies and automotive systems.
Workshop design and delivery
QSECDEF brings world-leading expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our advisory membership spans 600+ organisations and 1,200+ professionals working at the intersection of quantum technologies and critical infrastructure security.
Domain expertise and operational validation
Automotive workshops are co-delivered with sector specialists who bring direct operational experience in automotive organisations. This ensures workshop content is grounded in regulatory, operational, and technical realities specific to the sector.
Sessions are configured around your OTA architecture, ECU fleet composition, and type approval jurisdiction. Get in touch to discuss requirements and schedule a date.
Contact Us