Automotive nonce-misuse-resistant authenticated encryption

A method, comprising:

• receiving, by a hardware state machine, a command associated with a block-cipher-based symmetric cryptographic operation,
• wherein the block-cipher-based symmetric cryptographic operation is associated with securing a communication channel of an automotive system;
• causing, by the hardware state machine and based on the command, one or more block cipher devices to perform the block-cipher-based symmetric cryptographic operation,
• wherein the one or more block cipher devices are included in a plurality of matching block cipher devices communicatively coupled to the hardware state machine,
• wherein the one or more block cipher devices form a pseudo random function (PRF) and act as a counter (CTR) mode,
• wherein the pseudo random function (PRF) is based on cipher block chaining (CBC) and uses a first secret key and a second secret key, and
• wherein the counter (CTR) mode uses a third secret key;
• receiving, by the hardware state machine and from the one or more block cipher devices, one or more intermediate results associated with the block-cipher-based symmetric cryptographic operation;
• and
• providing, by the hardware state machine, a final result associated with the block-cipher-based symmetric cryptographic operation.

A system, comprising:

• a plurality of block cipher devices,
• wherein each of the plurality of block cipher devices is associated with the same cryptographic primitive;
• and
• a state machine, at least partially implemented in hardware and communicatively coupled to each of the plurality of block cipher devices, to:
• receive a command associated with a cryptographic operation associated with securing a communication channel of an automotive system,
• wherein the cryptographic operation is a block-cipher-based symmetric cryptographic operation,
• cause, based on the command, two or more block cipher devices, of the plurality of block cipher devices, to perform the cryptographic operation,
• wherein each of the one or more block cipher devices performs the cryptographic operation in a redundant mode or a parallel mode,
• receive, from the one or more block cipher devices, an intermediate result associated with the cryptographic operation, and
• provide, based on the intermediate result, a final result associated with the cryptographic operation.