MACsec & MACsec Key Agreement (MKA) by Colt Correa Author - Automotive Ethernet - Definitive Guide

MACsec and the MACsec Key Agreement (MKA) protocol are the foundational technologies protecting in-vehicle Ethernet communications. Employing existing IEEE standards, the OPEN Alliance Inc. Technical Committee 17 (TC17) authored a MACsec usage profile tailored to automotive use cases.

▶️ MACsec (IEEE 802.1AE-2018) provides robust Layer 2 security for Ethernet frames. It ensures:
Authentication: Verifies the message source.
Integrity: Confirms data hasn't been altered.
Confidentiality: Offers optional data encryption.
Replay Protection: Stops attackers from reusing old data packets.

▶️ MKA (IEEE 802.1X-2020) is the key manager. It securely generates and distributes the dynamic, ephemeral keys that MACsec uses. This automated process ensures the security keys are fresh and extremely difficult to compromise.

00:00 MACsec & MACsec Key Agreement Intro
00:25 SDV/Zonal Cybersecurity
01:27 Automotive MACsec/MKA
05:05 MACsec/MKA - Terms
10:20 MACsec/MKA - Security Policy
12:46 MACsec in Automotive
14:37 MACsec Architecture
17:26 MACsec PDU - Frame Format
20:04 MACsec PHY - Tx Processing
21:34 MACsec PHY - Rx Processing
23:22 MKA - Key Distribution
26:27 MKA Architecture
28:49 MKA - MKAPDU Structure
30:15 MKA Parameter Sets
38:42 MKA Init Sequence
43:43 MKA Rekey Sequence
48:31 Conclusion