Abstract: A distributed control system includes an electronic control unit to establish secure communication with a distributed control module. Upon determination that a previously negotiated session key is stored on the electronic control unit, the electronic control unit transmits encrypted communications with the distributed control module using the previously negotiated session key, negotiates a new session key with the distributed control module, and stores the new session key. Upon determination that the previously negotiated session key is not stored on the electronic control unit, the electronic control unit negotiates the new session key with the distributed control module. After negotiating the new session key with the distributed control module, the electronic control unit ceases transmission of unencrypted communications with the distributed control module, transmits encrypted communications with the distributed control module using the new session key, and stores the new session key.

Abstract: A method for initializing an engine control system of an aircraft may include authenticating a boot loader, authenticating a manifest in response to authentication of the boot loader wherein the manifest contains hashes of one or more software components, and in response to authentication of the manifest, loading a first set of software components from among the one or more software components onto a non-transitory computer-readable medium, calculating a hash of each software component of the first set of software components, authenticating the first set of software components by comparing the calculated hash of each software component of the first set of software components to the hash of a corresponding software component in the manifest, and executing the first set of software components in response to authentication of the one or more software components. Devices and systems are also provided for initializing an engine control system of an aircraft.