FIELD NOTES
Writing on automotive cybersecurity.
Working notes from the parts of automotive cybersecurity that do not make it into the marketing decks. Post-quantum migration, V2X PKI, vehicle SOC operations, regulatory readiness. Written by the engineers doing the work.
-
V2X · POST-QUANTUM · MIGRATION
·Field notes on V2X PQC migration: where the standards leave you stranded
Five problem classes we see in real V2X PQC migrations, with the numerical shape from engagements we have run. Composite field notes for OEM architects planning their roadmap.
11 min read Read -> -
LAW ENFORCEMENT · POST-QUANTUM · FORENSICS
·Law enforcement and post-quantum cryptography in vehicles: clues toward a framework
When V2X fleets migrate to post-quantum cryptography, lawful-access workflows change in ways the existing standards do not yet address. A structured argument toward the framework that needs to be built, written for law enforcement and the people who will write the standards.
26 min read Read -> -
POST-QUANTUM · ARCHITECTURE
·Cryptographic agility is the only honest answer to 'when will quantum arrive?'
The argument that a cryptographically-relevant quantum computer is decades away is true. The argument that it is months away is also occasionally made. Neither is a planning horizon. Here is what is.
9 min read Read -> -
PSIRT · INCIDENT RESPONSE · OEM
·The PSIRT playbook nobody writes down
Field notes from running automotive vulnerability response across five OEMs and a dozen real disclosures. The official process and the working process are not the same document.
10 min read Read -> -
V2X · POST-QUANTUM · COST
·What V2X PQC migration actually costs: a field-notes TCO
A field-notes TCO for V2X PQC migration. Six cost categories, four fleet profiles, ranges anchored to engagements we have run. For the OEM architect defending the budget internally.
14 min read Read -> -
V2X · POST-QUANTUM · BANDWIDTH
·Why our V2X bandwidth budget breaks the moment you add ML-DSA
The post-quantum standards landed in 2024. The 1,400-byte V2X frame ceiling did not move. Here is what actually happens when you try to drop ML-DSA into a Basic Safety Message, and what we ship instead.
11 min read Read -> -
REGULATION · COMPLIANCE
·Reading R155 like a security engineer, not a lawyer
Most R155 readings happen in compliance teams. That's a mistake. The clauses are written for engineers if you know which ones to read first.
9 min read Read ->