2026-04-27 Security Contribution Pitch

[qor-lb]

Location

Online via teams: https://teams.microsoft.com/l/meetup-join/19%3ameeting_YWNhNzczOTQtNDgwNS00ODc3LTk4ZDctNzljODM4ZjFiYWM2%40thread.v2/0?context=%7b%22Tid%22%3a%22ab1be58c-0a5a-47f0-8b55-1c095dbd46f5%22%2c%22Oid%22%3a%2260ab3e0f-3e6f-4c59-8f52-612763cb6823%22%7d

Participants

• Abhishek Goyal
• Ahmed Nasreldin (Valeo)
• Ahmed Rushdy (Valeo)
• Ahmed Tarek-Ramadan (Valeo)
• Alaa Mahdy (Valeo)
• Ayman Elgammal
• Basheerudeen FZ/LGSI ADV Platform Task
• Christian Heissenberger (Eclipse Fdn)
• Daeyoung Jeong (LGE)
• Daniel Krefft (BMW / EF-880)
• Elvers, Carsten (T-CSB)
• Essam Srour
• Fleischmann, Thomas
• Freund Ulrich (XC-AS/ESE3)
• Heilwagen Oliver (ETAS/PJ-SC-XPC-Fe2)
• Islam Abobakr (Valeo)
• Jentsch Roland (ETAS/PJ-SC-XPC-Hi)
• Khalid Ramadan (Valeo)
• Koch, Jan Hendrik (T-CSB)
• Krivoborodov Anton (EF-80)
• Langerwisch, Marco
• Lars Bauhofer
• Larberg, Andre (T-XSJ)
• Lobsinger Sebastian (ETAS/PJ-SC-XPC-Fe6)
• Mallappallil Athul (ETAS/PJ-SC-XPC-Fe6)
• Marton Laszlo (EF-880)
• Mena Dawood (Valeo)
• Mina Hamdi (Valeo)
• Mittag Andreas (ETAS/PJ-SC-XPC-Fe6)
• Mohamed Bejijou (Valeo)
• Munirajulu Ugesh (EF-880)
• Omar Eweda (Valeo)
• Philipp Jungklass
• Philipp Meyer
• Prasanchand Sunilkumar (ETAS/PJ-SC-XPC-Fe6)
• Rhenisch, Lennard (T-CSB8)
• Rummel, Jonas (T-XS)
• Scholter Peres, Frank (415)
• Schreiber, Werner
• Sievert Arvid (ETAS/PJ-SC-XPC-Fe6)
• Thums Andreas (ETAS/PJ-SC-XPC-Fe2)
• Tina Sayarmoafi
• VinodReddy GopiReddy
• Volker Häussler
• Zavartkay Tibor (ETAS/PJ-SC-XPC-Fe2)
• 김은진/책임연구원/스마트모빌리티(연)SDV선행개발Task
• 민성욱/Task Leader/SW Platform(연)Industrial IoT Task
• 유은혜/선임연구원/스마트모빌리티(연)SDV선행개발Task
• 이철희/책임연구원/스마트모빌리티(연)SDV선행개발Task
• 임영규/책임연구원/SW Platform(연)Industrial IoT Task
• 임채희/책임연구원/스마트모빌리티(연)SDV선행개발Task

Agenda

1. 8:30 - 8:45: Feature Request for Security & Crypto #905 - @TomFleischmann?
2. 8:45 - 9:15: [Contribution Proposal] Security ETAS #2220
3. 9:15 - 9:45: [Contribution Proposal] Security IAV #2753
4. 9:45 - 10:15: [Contribution Proposal] Security Valeo #2755
5. 10:15 - 10:30: Coffee Break
6. 10:30 - 11:00: [Contribution Proposal] Security BMW #2805
7. 11:00 - 11:30: [Contribution Proposal] Security LG Electronics #2806
8. 11:30 - 12:00 Grooming [Contribution Request] Security & Cryptography #2054

Meeting Minutes

1. [Contribution Proposal] Security ETAS #2220 - Athul M & Sunilkumar P

   • presentaion material

2. [Contribution Proposal] Security IAV #2753 - Lennard R

   • presentaion material

3. [Contribution Proposal] Security Valeo #2755 - Mena D & Omar M

   • presentaion material

4. [Contribution Proposal] Security BMW #2805 - Laszlo M

   • Q Lars B: Is the contribution proposal only lessons learned or also a code contribution?
     • A: No only lessons learned for now - follow-up clarification if the proposal would be continue development of MoCOCrW in S-CORE or integrate an existing open source project.
   • Q Mena D: How could the crypto daemon identify asil apps?
     • A: UID:GID concept to be utilized for key DB. Should be part of the implementation concept and not fully specified yet.
   • presentaion material

5. [Contribution Proposal] Security LG Electronics #2806 - 민성욱

   • Q Sunilkumar P: what will be the difference between Legacy TLS API layer and SCORE TLS API? the Legacy TLS API is anyway not AUTOSAR based. or?
     • A: Autosar Adaptive does not have legacy API for TLS API -> this will be created
   • Q Sunilkumar P: WolfSSL backed is only the code that has WolfSSL API calls but there is no actual WolfSSL library or? since WolfSSL library is not compatible with Eclipse license?
     • A: WolfSSL is not part of the product because the license is compatible - it could be plugged in outside S-CORE
   • Q Tibor Z: Is the crypto IPC not a bottleneck in the current architecture?
     • A:

6. Grooming

Legend: https://github.com/orgs/eclipse-score/discussions/375#:~:text=Formal%20criteria%20for%20contribution%20selection

criterion	ETAS	IAV	Valeo	BMW	LGE
Alignment with the Feature Request	++	+ (cypto algo + FSM)	+ (PKCS frontend & openssl impl)	++	++
Availability of the Source Code	++	+/++ (core; extensions tbc)	+ (until end of week)	- (concept only)	+ (until end of week)
Technical Maturity (in frontend)	0 (PoC)	n/a	n/a	n/a	- (to be created; first only daemon parts)
Supporting Artifacts	0	0	0	n/a	+
Availability for QNX and Linux	++	n/a	++	n/a	++

• Next Steps:
  • define feature team - Sunilkumar P @sunildevda
    • create Slack channel
    • create interest group
    • proposal to combine withe the security manager meeting -> currently on friday (not a working day in Egypt) ->create poll in slack and move the meeting
  • find consensus within 4 weeks (until 24th May EoD)
    • clarify: is the FSM and HSM/TEE integration in scope of S-CORE or out of scope but in context

[qor-lb]

Slack channel: https://sdvworkinggroup.slack.com/archives/C0B0F1J914Z
Discusstion for interest group: https://github.com/orgs/eclipse-score/discussions/2839