3 ms·
CAN should have authentication built in. That's the root of the problem, and without fixing it everything else becomes hard.
by debatem1 9y ago
CAN should have authentication built in. That's the root of the problem, and without fixing it everything else becomes hard.
- gumby 9y agoThat's easy to say but if you look at CAN it's just a set of small serial frames over RS-485 designed to be usable by an 8-bit (or smaller) processor. Like a simple SPI/TWI bus, but off-board. Sure, I am upset that it's not more secure, as I am about the same thing with SCADA and (shudder) MODBUS, but I recognize where how the problems emerged: these busses are, by current standards, old.
- debatem1 9y agoWhile you're not wrong, it wouldn't require throwing out 8-bit MCU support to bring CAN into this century. In particular, replacing the CAN CRC with a short auth tag would not be beyond the capability of many small MCUs at low speeds (10s of messages/s).