Table 1. HADES requirements for secure testing Property Requirement Comments Secure access Mutual authentication protocol Possibly Challengeresponse Confidentiality Symmetric encryption 1 bit per cycle (avg) ; Random IV against replay attacks Integrity Hashing algorithm Collision resistant, possibly shared with other processes Interfaces Standard compliance Wrappers if needed (AMBA, I2C, CAN, …) Key management Updatable Multiple keys No fixed single global key Group management Attacker model Skilled attacker