XGuard Onboard Security is a multi-layer automotive cybersecurity product from Karamba Security, part of the XGuard Suite. It is designed for teams responsible for development, maintenance, and cybersecurity of automotive systems including ECUs and the in-vehicle networks connecting them. The product is structured around two layers — Enablers and Controls — and is built to address automotive cybersecurity regulations and standards including UN R155 and ISO/SAE 21434. **Security Enablers (Foundation Layer):** - Cryptographic Module: Provides key management, a hardware abstraction layer, and AUTOSAR-compliant crypto APIs (AES, CMAC, hashing, key derivation, TRNG, PRNG, RSA digital signatures, MAC/CRC calculations, random number generation) - Secure Storage: Hardware-based persistent storage for keys, certificates, privacy data, configuration parameters, calibration data, and authentication information - Secure Logging: Manages security event collection and storage with standardized format, ensuring integrity and authenticity **Security Controls:** - Secure Boot: Implementation guidelines and support for secure boot configuration - Secure Flashing: Signature validation and secure storage of firmware update images - UDS Authentication & Authorization: Supports Seed & Key exchange and Certificate-based authentication mechanisms - Secure Onboard Communication (SecOC): Ensures message authenticity, integrity, and freshness for in-vehicle communication, compliant with the AUTOSAR SecOC protocol standard