DEF CON 32 - A dive into world of Aircraft PKI - Matt Gaffney
Source: YouTube · DEFCONConference · published Oct 16, 2024 · 25:06
Matt Gaffney provides an overview of aircraft PKI in aviation, explaining its critical role in securing Field Loadable Software (FLS) and maintaining aviation safety 0:17.
Key Takeaways:
• FLS is pervasive in modern aircraft, used in everything from in-flight entertainment to critical systems like control surfaces and navigation databases 1:42
• Aircraft operators must verify both authenticity and integrity of all FLS before loading, with regulations requiring signature verification 2:55
• Three signing methods exist: Method A (signing with smart cards), Method B (stripping and re-signing with HSM), and Method C (including timestamping responses) 3:06
• Aircraft certificate generation involves strict procedures with dual controls and audit requirements 4:00
• The aviation industry faces significant post-quantum challenges as aircraft lifespans (30+ years) exceed the timeline for quantum computing threats 19:19
The industry must prepare for post-quantum cryptography while working within the constraints of existing aircraft certification and embedded systems limitations 21:00.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
um so I'm Matt Gaffney also known as Gaffers uh I'm a principal engineer at United Airlines um I'm also a village lead at the Aerospace Village um so a big shout out to those guys put on a great show this year um going to do a shallow dive into aircraft pki and I've got a few caveats to start with like I said this is a shallow dive into the topic um I see a few operators uh that are recogn in the room and at least one expert uh who will know this topic several times better than I ever will um and you'll understand when I say this this is something you can easily spend three days talking about it is so complex um so there are some simplifications and there are some generalizations and I'm also only going to speak to what I'm authorized to speak to and um through the village our EOS is to br…