About the course

📘 Course Description:

This course provides a hands-on, system-level understanding of embedded security using the Secure Hardware Extension (SHE) module on NXP’s S32K1xx automotive microcontrollers, specifically the S32K144. Tailored for embedded software engineers and developers working in security-critical automotive or industrial applications, the course focuses on the practical implementation of symmetric cryptography, key management, secure boot, and real-time data protection using SHE hardware.

Starting with the architectural overview of S32K1xx and its integrated SHE engine, learners will explore how to securely manage AES-128 keys, perform encryption/decryption, generate and verify MACs (CMAC), and utilize true random numbers. The course covers essential security use cases such as secure boot authentication, ECU-to-ECU challenge–response, secure diagnostics access, and secure flash logging — all implemented using S32 Design Studio and SDK APIs, without relying on AUTOSAR stacks.

Advanced modules focus on implementing message integrity mechanisms using AES-CMAC, designing symmetric secure storage mechanisms, and building lightweight access control protocols for diagnostic interfaces — empowering learners to deploy real-world embedded security protections in low-resource environments.

Each module is accompanied by lab exercises using S32K144 Evaluation Boards, guiding learners through security implementation, verification, and testing in a production-relevant context.

---

🎯 Key Learning Outcomes:

• Understand the SHE security architecture and features in the S32K1xx platform

• Perform secure key loading and management with key slot access controls

• Implement AES-128 encryption and CMAC authentication for messages and logs

• Configure and verify Secure Boot using MAC authentication

• Develop symmetric challenge–response protocols for ECU authentication

• Design secure flash logging mechanisms using AES and MACs

• Protect diagnostic functions with custom secure access control logic

• Use SHE API functions via NXP’s S32 SDK in S32 Design Studio

---

🛠️ Tools & Platforms:

• NXP S32K144 Evaluation Board

• S32 Design Studio with NXP S32K1 SDK with SHE Peripheral CSEc MCAL and Non MCAL RTD

• CAN/UART interfaces for communication demos

• Optional: OpenSSL or Python scripts for offline validation

---

This course is ideal for embedded developers, automotive engineers, and system integrators who want to build production-grade symmetric security features into low-cost automotive ECUs using hardware-backed crypto protections.