Strengthening Automotive Cybersecurity for the Software-Defined Vehicle Era

As the automotive industry moves toward software-defined vehicles (SDVs), cybersecurity has become essential for protecting vehicle ecosystems, safeguarding OEM intellectual property, and ensuring the privacy of end users. To address these growing requirements, Infineon Technologies AG (FSE: IFX / OTCQX: IFNNY) is further strengthening the security capabilities of its automotive microcontroller portfolio. By ensuring that its AURIX TC4x and AURIX TC3x families, as well as PSOC Automotive and TRAVEO T2G MCUs, comply with the ISO/SAE 21434 cybersecurity standard, the company reinforces its leadership in secure automotive electronics. In addition, the AURIX TC397 has received cybersecurity certification from China Automotive Technology and Research Center (CATARC), and Infineon is also introducing solutions that support Post-Quantum Cryptography (PQC).
“Through these enhancements to the cybersecurity capabilities of our automotive MCUs, we demonstrate our close collaboration with global automotive manufacturers,” said Lars Wemme, Senior Vice President of ADAS, Chassis and E/E Architecture Microcontrollers at Infineon. “Our technologies provide a strong foundation for security-compliant automotive electronics, helping customers reduce development complexity and accelerate time to market.”
Key developments within Infineon’s automotive MCU portfolio include:
ISO/SAE 21434 compliance: The AURIX TC4x family has already achieved certification under ISO/SAE 21434. Certification for the TRAVEO T2G and AURIX TC3x MCU families is expected to follow starting in April 2026. Upcoming PSOC Automotive MCUs are also being designed to meet this standard. Compliance simplifies adherence to global cybersecurity regulations such as UNECE R155 and UNECE R156, enabling OEMs—especially those in regulated automotive markets—to bring products to market more efficiently.
CATARC certification: The AURIX TC397 is among the first automotive MCUs to obtain cybersecurity certification from the China Automotive Technology and Research Center (CATARC). Infineon aims for the TRAVEO T2G CYT2B75x to receive CATARC cybersecurity certification by April 2026. This represents an important milestone for China’s automotive security ecosystem and provides manufacturers with a pathway to meet regulatory requirements in the Chinese automotive market.
Post-quantum cryptography (PQC): Support for Post-Quantum Cryptography is being expanded across the AURIX TC4x and TRAVEO T2G families. The AURIX TC49, released in February 2026, already features PQC capabilities, and additional derivatives in the AURIX TC4x family will follow. These PQC-enabled devices integrate dedicated CPUs, non-volatile memory (NVM), and hardware accelerators to efficiently support applications such as secure boot and secure over-the-air (OTA) software updates in software-defined vehicle architectures.
China-specific cryptographic algorithms: Dedicated algorithms designed for the Chinese market have been implemented directly in the hardware of AURIX TC4x MCUs and will also be included in upcoming TRAVEO T2G devices. In addition, these algorithms will be available via software for AURIX TC3x and existing TRAVEO T2G MCUs. This allows OEMs to prepare in advance for regulatory requirements before they become mandatory.
Together, these initiatives enable customers to integrate cybersecurity across the entire application lifecycle through certified products, compliant development processes, and a future-ready security roadmap.
