Architecture of on-die cryptographic co-processors with isolated flash, dedicated crypto accelerators (AES-256, ECC, SHA-3), and tamper-resistant master key storage.
An EVITA Full module comprises an independent 32-bit secure microcontroller core (e.g. ARM Cortex-M35P or RISC-V with physical memory protection), isolated RAM and secure ROM, and a hardware true random number generator (TRNG). At vehicle power-on, the host application cores are held in physical hardware reset. The HSM boots first, verifies the SHA-256 hash and RSA-3072/ECDSA-256 digital signature of the host bootloader against fused root-of-trust public keys, and only releases the host reset line once integrity is mathematically confirmed.