1. ECU State Monitor
NORMAL_OPERATION
Locked Out
false
Secure Boot Integrity
VERIFIED
AUTH Failure Count (selected PDU)
0 / 5
Last Valid Freshness (selected PDU)
0
2. Primary Operation Console
Authentic PDU--
Freshness--
MAC--
- Tx · FreshnessManager.load_last_valid_freshness → freshness = last+1
- Tx · Authenticator.generate_mac → CSM → CryIf → HSM.hmac_sha256
- Tx · PduManager.build_secured_pdu → authentic‖freshness‖mac
- CanBus · secured PDU placed on bus
- Rx · PduManager.parse_secured_pdu
- Rx · FreshnessManager.validate_freshness (window=16)
- Rx · Authenticator.verify_mac (constant-time compare)
- Rx · commit_freshness → SecOC.receive_secured returns authentic_pdu
3. Test Scenario Runner (VTC-SR-01..20)