{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,4]],"date-time":"2026-11-04T16:51:00Z","timestamp":1793811060430,"version":"4.6.1"},"reference-count":30,"publisher":"MDPI AG","issue":"22","license":[{"start":{"date-parts":[[2019,11,12]],"date-time":"2019-11-12T00:00:00Z","timestamp":1573516800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"CNCS-UEFISCDI","award":["PN-III-P1-1.1-TE-2016-1317"],"award-info":[{"award-number":["PN-III-P1-1.1-TE-2016-1317"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Security has become critical for in-vehicle networks as they carry safety-critical data from various components, e.g., sensors or actuators, and current research proposals were quick to react with cryptographic protocols designed for in-vehicle buses, e.g., CAN (Controller Area Network). Obviously, the majority of existing proposals are built on cryptographic primitives that rely on a secret shared key. However, how to share such a secret key is less obvious due to numerous practical constraints. In this work, we explore in a comparative manner several approaches based on a group extension of the Diffie\u2013Hellman key-exchange protocol and identity-based authenticated key agreements. We discuss approaches based on conventional signatures and identity-based signatures, garnering advantages from bilinear pairings that open road to several well-known cryptographic constructions: short signatures, the tripartite Diffie\u2013Hellman key exchange and identity-based signatures or key exchanges. Pairing-based cryptographic primitives do not come computationally cheap, but they offer more flexibility that leads to constructive advantages. To further improve on performance, we also account for pairing-free identity-based key exchange protocols that do not require expensive pairing operations nor explicit signing of the key material. We present both computational results on automotive-grade controllers as well as bandwidth simulations with industry-standard tools, i.e., CANoe, on modern in-vehicle buses CAN-FD and FlexRay.<\/jats:p>","DOI":"10.3390\/s19224919","type":"journal-article","created":{"date-parts":[[2019,11,13]],"date-time":"2019-11-13T09:11:27Z","timestamp":1573636287000},"page":"4919","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":23,"title":["Identity-Based Key Exchange on In-Vehicle Networks: CAN-FD &amp; FlexRay"],"prefix":"10.3390","volume":"19","author":[{"given":"Bogdan","family":"Groza","sequence":"first","affiliation":[{"name":"Faculty of Automatics and Computers, Politehnica University of Timisoara, Timisoara 300223, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0330-4523","authenticated-orcid":false,"given":"Pal-Stefan","family":"Murvay","sequence":"additional","affiliation":[{"name":"Faculty of Automatics and Computers, Politehnica University of Timisoara, Timisoara 300223, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2019,11,12]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"40","DOI":"10.1109\/MVT.2017.2736344","article-title":"Security Solutions for the Controller Area Network: Bringing Authentication to In-Vehicle Networks","volume":"13","author":"Groza","year":"2018","journal-title":"IEEE Veh. Technol. Mag."},{"key":"ref_2","unstructured":"AUTOSAR (Specification of Secure Onboard Communication, 2017). Specification of Secure Onboard Communication."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Jain, S., and Guajardo, J. (2016, January 17\u201319). Physical Layer Group Key Agreement for Automotive Controller Area Networks. Proceedings of the Conference on Cryptographic Hardware and Embedded Systems, Santa Barbara, CA, USA.","DOI":"10.1007\/978-3-662-53140-2_5"},{"key":"ref_4","first-page":"10","article-title":"Plug-and-secure communication for CAN","volume":"4","author":"Mueller","year":"2015","journal-title":"CAN Newsl."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Jain, S., Wang, Q., Arafin, M.T., and Guajardo, J. (2018). Probing Attacks on Physical Layer Key Agreement for Automotive Controller Area Networks (Extended Version). arXiv.","DOI":"10.1109\/AsianHOST.2018.8607166"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Boneh, D., Lynn, B., and Shacham, H. (2001, January 9\u201313). Short signatures from the Weil pairing. Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security, Gold Coast, Australia.","DOI":"10.1007\/3-540-45682-1_30"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"1025","DOI":"10.1049\/el:20020682","article-title":"ID-based signatures from pairings on elliptic curves","volume":"38","author":"Paterson","year":"2002","journal-title":"Electron. Lett."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Joux, A. (2000, January 2\u20137). A one round protocol for tripartite Diffie\u2013Hellman. Proceedings of the International Algorithmic Number Theory Symposium, Leiden, The Netherlands.","DOI":"10.1007\/10722028_23"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Wang, Y. (2013). Efficient identity-based and authenticated key agreement protocol. Transactions on Computational Science Xvii, Springer.","DOI":"10.1007\/978-3-642-35840-1_9"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"2895","DOI":"10.1016\/j.ins.2010.04.002","article-title":"A pairing-free identity-based authenticated key agreement protocol with minimal message exchanges","volume":"180","author":"Cao","year":"2010","journal-title":"Inf. Sci."},{"key":"ref_11","unstructured":"MIRACL Ltd. (2018, December 11). Multiprecision Integer and Rational Arithmetic C Library\u2014The MIRACL Crypto SDK. Available online: https:\/\/github.com\/miracl\/MIRACL."},{"key":"ref_12","unstructured":"Kurachi, R., Matsubara, Y., Takada, H., Adachi, N., Miyashita, Y., and Horihata, S. (2014, January 18\u201319). CaCAN\u2014Centralized Authentication System in CAN (Controller Area Network). Proceedings of the 12th International Conference on Embedded Security in Cars (ESCAR 2014), Hamburg, Germany."},{"key":"ref_13","unstructured":"(2010). J1939-21\u2014Data Link Layer, SAE International. Standard."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"4325","DOI":"10.1109\/TVT.2018.2795384","article-title":"Security Shortcomings and Countermeasures for the SAE J1939 Commercial Vehicle Bus Protocol","volume":"67","author":"Murvay","year":"2018","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref_15","unstructured":"Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., Savage, S., Koscher, K., Czeskis, A., Roesner, F., and Kohno, T. (2011, January 8\u201312). Comprehensive Experimental Analyses of Automotive Attack Surfaces. Proceedings of the USENIX Security Symposium, San Francisco, CA, USA."},{"key":"ref_16","unstructured":"Miller, C., and Valasek, C. (2014, January 2\u20137). A survey of remote automotive attack surfaces. Proceedings of the Black Hat USA, Las Vegas, NV, USA."},{"key":"ref_17","unstructured":"Hoppe, T., and Dittman, J. (2007, January 4). Sniffing\/Replay Attacks on CAN Buses: A simulated attack on the electric window lift classified using an adapted CERT taxonomy. Proceedings of the 2nd Workshop on Embedded Systems Security (WESS), Salzburg, Austria."},{"key":"ref_18","unstructured":"Hartkopp, O., Reuber, C., and Schilling, R. (2012, January 28\u201329). MaCAN-message authenticated CAN. Proceedings of the 10th Int. Conf. on Embedded Security in Cars (ESCAR 2012), Berlin, Germany."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Wang, Q., and Sawhney, S. (2014, January 6\u20138). VeCure: A practical security framework to protect the CAN bus of vehicles. Proceedings of the 2014 IEEE International Conference on the Internet of Things (IOT), Cambridge, MA, USA.","DOI":"10.1109\/IOT.2014.7030108"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"2248","DOI":"10.1109\/TITS.2016.2519464","article-title":"A Practical Security Architecture for In-Vehicle CAN-FD","volume":"17","author":"Woo","year":"2016","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Radu, A.I., and Garcia, F.D. (2016, January 26\u201330). LeiA: A Lightweight Authentication Protocol for CAN. Proceedings of the 21st European Symposium on Research in Computer Security, ESORICS, Heraklion, Greece.","DOI":"10.1007\/978-3-319-45741-3_15"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"2034","DOI":"10.1109\/TII.2013.2239301","article-title":"Efficient protocols for secure broadcast in controller area networks","volume":"9","author":"Groza","year":"2013","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Lin, C.W., Zhu, Q., Phung, C., and Sangiovanni-Vincentelli, A. (2013, January 18\u201321). Security-aware mapping for CAN-based real-time distributed automotive systems. Proceedings of the 2013 IEEE\/ACM International Conference on Computer-Aided Design (ICCAD), San Jose, CA, USA.","DOI":"10.1109\/ICCAD.2013.6691106"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1109\/LES.2014.2354011","article-title":"Security-aware modeling and efficient mapping for CAN-based real-time distributed automotive systems","volume":"7","author":"Lin","year":"2015","journal-title":"IEEE Embed. Syst. Lett."},{"key":"ref_25","unstructured":"Bella, G., Biondi, P., Costantino, G., and Matteucci, I. (2019, January 27). TOUCAN: A proTocol tO secUre Controller Area Network. Proceedings of the ACM Workshop on Automotive Cybersecurity, Richardson, TX, USA."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Dariz, L., Selvatici, M., Ruggeri, M., Costantino, G., and Martinelli, F. (2017, January 26\u201328). Trade-off analysis of safety and security in CAN bus communication. Proceedings of the 2017 5th IEEE International Conference on Models and Technologies for Intelligent Transportation Systems (MT-ITS), Naples, Italy.","DOI":"10.1109\/MTITS.2017.8005670"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"644","DOI":"10.1109\/TIT.1976.1055638","article-title":"New directions in cryptography","volume":"22","author":"Diffie","year":"1976","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Steer, D.G., Strawczynski, L., Diffie, W., and Wiener, M. (1990). A Secure Audio Teleconference System. Proceedings on Advances in Cryptology, Springer. CRYPTO \u201988.","DOI":"10.1007\/0-387-34799-2_37"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"905","DOI":"10.1109\/TC.2004.31","article-title":"Group key agreement efficient in communication","volume":"53","author":"Kim","year":"2004","journal-title":"IEEE Trans. Comput."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"107","DOI":"10.1007\/BF00124891","article-title":"Authentication and authenticated key exchanges","volume":"2","author":"Diffie","year":"1992","journal-title":"Des. Codes Cryptogr."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/19\/22\/4919\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T13:33:44Z","timestamp":1760189624000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/19\/22\/4919"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,11,12]]},"references-count":30,"journal-issue":{"issue":"22","published-online":{"date-parts":[[2019,11]]}},"alternative-id":["s19224919"],"URL":"https:\/\/doi.org\/10.3390\/s19224919","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,11,12]]}}}