The Canis Labs CANPico is a carrier board for a Raspberry Pi Pico that provides an advanced CAN controller (MCP2517FD) and CAN transceiver, ready for connection to CAN bus wires via a simple screw terminal. The CANPico includes an instrument header with the analog CAN H and CAN L signals and the digital RX and TX signals for use with an oscilloscope or logic analyzer. Software includes an open source SDK for MicroPython (via a custom MicroPython firmware build) and an open source SDK for C. The MicroPython SDK also includes the CANHack toolkit API for mounting low-level attacks on the CAN protocol.
The CANPico is also supported as a development platform for other Canis Labs products and technologies. It is available to buy from SK Pang.
CryptoCAN is an encryption scheme for CAN frames and is designed to meet the requirements of vehicle CAN bus messaging (for example, publish/subscribe communications) and uses standard algorithms (AES-128, AES-CMAC) present in SHE hardware security modules (HSMs). It is being evaluated by the United States Army Combat Capabilities Development Command (DEVCOM) Ground Vehicle Systems Center (GVSC) in a cooperative research and development agreement.
CryptoCAN is provided as an SDK for C that includes a software emulated HSM for microcontrollers that contain no cryptographic hardware. There is a custom build of MicroPython firmware that adds CryptoCAN and HSM Python APIs and this firmware can be used on the Canis Labs CANPico for free.
The Canis IDPS100 is a Verilog hardware IP module for CAN bus intrusion detection and prevention (IDPS), used in the Siemens Secure-CAV Embedded Analytics platform. It supports the CAN-HG augmentation of the CAN 2.0 protocol and can read security headers for hardware anti-spoofing. It can destroy unauthorized or spoof frames before they are received and has support for sending classic CAN frames augmented with CAN-HG information, including large payloads (276 bytes inside a 250kbit/sec classic CAN 8 byte frame).
The CAN-HG protocol augments existing CAN with Higher speed data and provides bus Guarding support to stop spoofing and denial-of-service attacks. Most importantly, CAN-HG interoperates completely with existing CAN systems.
The CAN-HG engine is a Verilog hardware IP module that can transmit and receive CAN frames, both as pure CAN and as classic CAN frames augmented with a security header and an optional payload body (up to 276 bytes on a 250kbit/sec classic CAN bus). It is used inside the Canis Labs IDPS100 module.
It is being evaluated by the United States Army Combat Capabilities Development Command (DEVCOM) Ground Vehicle Systems Center (GVSC) in a cooperative research and development agreement.