Core engineering and protocols for Post-Quantum Uptane Framework.
Standard software update systems (like APT or Yum) rely on a single signing key. If an attacker compromises the server holding that key, they can push malicious software to every client device. In automotive fleets carrying human lives, a single compromised server must never grant the ability to compromise vehicles. Uptane was engineered specifically to solve this problem.
OTACrypt enhances Uptane by implementing FIPS 205 Stateless Hash-Based Signatures (SLH-DSA) and stateful LMS for root keys, and FIPS 204 ML-DSA for high-frequency timestamp keys. Even if online update servers are infiltrated, attackers cannot forge the root of trust, protecting vehicles against mass remote exploitation.