Abstract: A method for checking cryptographic secrets for equality involves at least one of the secrets being stored in a read-protected manner in a secure system. The at least one secure system has a cryptographic hash value interface. For checking purposes, a hash value of the secret provided with a salt or with the hash value of a salt is output via the interface for comparison with a corresponding hash value of another secret provided with the salt or with the hash value of the salt.

Abstract: Communications between a communication system of a vehicle and an external server external via a communication interface are secured such that data is transmitted to the communication system with integrity and authenticity protection, and also confidentially where necessary. A first securing method for the non-post-quantum-resistant securing of exchanged data is implemented, a second securing method for the post-quantum-resistant securing of exchanged data is implemented or is able to be implemented. Key material for the second securing method is initially introduced in the communication system and is stored securely or is able to be introduced via a further interface with cryptographic encryption and is securely stored for exclusive use in the second securing method.

Abstract: A method for secure usage of cryptographic material in networked system components provided with the cryptographic material in which a lifecycle of every system component includes at least one development phase and one production phase. The entire cryptographic material is at least directly securely marked as development or production material. Each system component has a binary state flag showing which phase the system component is in and which is secured against unauthorized manipulation. Each system component determines via an assessment function which phase it is in, according to which each system component carries out a check, during which the current phase and the marker of the cryptographic material are compared. Security measures are introduced if there is no agreement between the phase and the marker.

Abstract: A method for secure usage of cryptographic material in networked system components provided with the cryptographic material in which a lifecycle of every system component includes at least one development phase and one production phase. The entire cryptographic material is at least directly securely marked as development or production material. Each system component has a binary state flag showing which phase the system component is in and which is secured against unauthorized manipulation. Each system component determines via an assessment function which phase it is in, according to which each system component carries out a check, during which the current phase and the marker of the cryptographic material are compared. Security measures are introduced if there is no agreement between the phase and the marker.

Abstract: A communication device for a vehicle has a communication unit set up to establish a communication link between the vehicle and an external vehicle server and to exchange data in a cryptographically secured manner between the vehicle and the external vehicle server. The communication unit is further set up to be operated in a first or second mode. The modes differ in the type of cryptographic securing of the data. The communication unit has a secure hardware memory in which a binary value corresponding to the respective mode is stored.

Abstract: A system for generating cryptographic material includes a cryptomaterial server and developer module. The cryptomaterial server has at least one cryptomaterial generator and a cryptomaterial distributor. The cryptomaterial generator is set up to generate cryptographic material by using specifications that can be predetermined via the developer module. The cryptomaterial server has a receiving part of a specification interface and the developer module has a corresponding sending part of the specification interface, which can be coupled directly or indirectly for the secure transmission of data. The developer module has a user interface or can be coupled directly or indirectly to one that is set up for an input of the specifications in abstract form. A transformation module automatically transforms the input specifications into a syntax of the cryptomaterial generator.