Gasgoo Munich- On August 21, the Ministry of Industry and Information Technology's Department of Equipment Industry I released an announcement seeking public feedback on the mandatory national standard "Technical Requirements for Automotive Cryptographic Application." The comment period runs until October 20, 2026. Drafted by the National Technical Committee of Auto Standardization, the standard aims to bridge the gap in mandatory technical specifications for cryptographic applications in intelligent connected vehicles.
Image source: Ministry of Industry and Information Technology of the People's Republic of China
The draft clarifies that automakers must not use self-developed or proprietary algorithms that lack standardization verification or regulatory approval. It requires vehicles to utilize cryptographic technology to ensure the integrity and trustworthiness of software components during startup, preventing the operation of firmware or operating systems that have been illegally tampered with. Additionally, specific rules address scenarios such as verifying over-the-air (OTA) update packages and authenticating third-party applications.
The standard covers the design, development, and testing of cryptographic applications for both complete vehicles and components. The implementation of this mandatory national standard marks a shift from corporate self-regulation to mandatory compliance, establishing a unified legal basis for data security and system defense in intelligent connected vehicles.
