Avatar

Friedrich Wiemer

PhD
Security Expert In-Vehicle Communication
CEO and Co-Founder

Bosch

cryptosolutions

Biography

Friedrich did his PhD at Gregor Leander’s Workgroup of Symmetric Cryptography at the Horst Görtz Institute for IT-Security, Ruhr University Bochum. His research interests include the design and analysis of cryptographic schemes, in particular symmetric primitives such as block ciphers. Together with Gregor, Friedrich founded cryptosolutions, providing excellent cryptographic consulting services.

At Bosch, Friedrich is responsible for predevelopment activities in the context of security for in-vehicle networks, focusing especially on Automotive Ethernet as well as CAN. Friedrich represents Bosch in the Open Alliance TC17 (Automotive Profile for MACsec), is the main editor of CAN in Automation 613-2 (CANsec) and contributes to IEEE 802.1AE.

When he needs a change from the mathematics, he devotes his time to photography, or to tinker with technical projects. Friedrich occasionally contributes to the SageMath computer algebra system and is a founding member of the FluxFingers e.V. CTF team.

Interests

  • Cryptographic Protocols
  • Symmetric Cryptanalysis
  • Symmetric Cryptography
  • Hardware Development
  • Photography

Education

  • PhD in Symmetric Cryptography, 2019

    Ruhr University Bochum

  • MSc in IT-Security, 2016

    Ruhr University Bochum

  • BSc in IT-Security, 2013

    Ruhr University Bochum

Experience

 
 
 
 
 

Security Expert In-Vehicle Communication

Bosch

Apr 2020 – Present Stuttgart
 
 
 
 
 

CEO and Co-Founder

cryptosolutions

Apr 2019 – Present Essen

Responsibilities include

  • Cryptanalysis
  • Cryptographic Design

of cryptographic schemes and the organisation and realisation of trainings.

 
 
 
 
 

Research Assistant and PhD Student

Ruhr University Bochum

May 2016 – Mar 2020 Bochum
Besides the research for my PhD thesis, I gave classes for students and participated in the faculties self-administration.
 
 
 
 
 

Student Research Assistant and Qualifying Fellow

Ruhr University Bochum

Dec 2011 – Apr 2016 Bochum

During my studies I worked as a student research assistant on several projects, in particular the following two:

  1. “High-Speed Implementation of bcrypt Password Search using Special-purpose Hardware”, where I developed a VHDL bcrypt core and evaluated its password hashing rate on a FPGA.
  2. “Parallel Implementation of BDD Enumeration for LWE”, where I developed a highly parallel C++ implementation of a CVP algorithm and evaluated its speedup for applications in the cryptanalysis of lattice-based cryptographic schemes.

Recent Publications

Lightweight Zero Trust via Automotive SDN

Zonal in-vehicle networks ship Ethernet, MACsec, and TSN, but treat the network itself as trusted: once configured at the factory, …
Preprint PDF

MKA Meets Multidrop: Optimizing Time-to-Key-Agreement on 10BASE-T1S Ethernet

The MACsec Key Agreement protocol, defined in IEEE 802.1X, manages and distributes ephemeral Secure Association Keys for Ethernet links …
Preprint PDF

Beyond Ethernet: Reusing MACsec for CANsec

In the past, Secure Onboard Communication (SecOC) has been defined to serve as the foundational mechanism for securing in-vehicle …

Preprint PDF

Enabling Secure Communication for Automotive Endpoint-ECUs through Lightweight-Cryptography

Enabling secure communication to and from endpoint-ECUs in automotive E/E architectures is crucial, as e.g. shown by recent attacks …
PDF DOI

Towards Post-Quantum Security for Cyber-Physical Systems: Integrating PQC into Industrial M2M Communication

The threat of a cryptographically relevant quantum computer contributes to an increasing interest in the field of post-quantum …
PDF DOI
See all publications

Recent & Upcoming Talks

Zero Trust for Automotive Ethernet – From MACsec to SDN-Managed Security

MACsec stops message injection at the link level, but turns the problem into key management. We show how standardized YANG models, …
Oct 15, 2026 Gothenburg, Sweden
Slides Video

Beyond Ethernet: Foundational Security for the Vehicle – MACsec, CANsec, and the FD Adaptation Layer

One Layer-2 security stack for Ethernet, CAN XL and CAN FD: reusing MACsec for CANsec and bringing it to CAN FD via the FD Adaptation …
Sep 17, 2026 12:15 – 13:00 Online

Foundational Security from Ethernet to CAN: Prototyping CANsec and FDAL with Scapy

Reusing MACsec for CANsec on CAN XL and extending it to CAN FD via the CAN FD Adaptation Layer (FDAL), prototyped end-to-end with …
Sep 16, 2026 12:15 – 12:55 Regensburg, Germany
Slides Video

Foundational Security From Car to Factory

One security layer for every wire: from MACsec on automotive Ethernet to CANsec on CAN XL and CAN FD, combined with SDN-based …
Apr 23, 2026 Offenburg, Germany
Slides

Beyond Ethernet: MACsec as the Foundation for In-Vehicle Network Security

The story of reusing MACsec for CANsec on CAN XL, and an outlook on backporting it to CAN FD for a unified security solution across …
Mar 25, 2026 14:30 – 15:00 Munich, Germany
See all talks

Recent Posts

Ubuntu 20.04 → 24.04 Dist-Upgrade: LUKS2, GRUB, Secure Boot and systemd-boot

This page documents debugging a failed Ubuntu release upgrade that left the system unbootable. The root causes were an interplay …

Feb 21, 2026 6 min read

LFSR StreamCipher Challenge

Write-Up for my hack.lu 2018 challenge ‘LFSR StreamCipher’
Last updated on Jan 15, 2020 6 min read

Popular Topics

Annihilator Boolean Functions CTF Write-Up Debugging Grub LFSR Linux Luks Secure-Boot Systemd-Boot Ubuntu

Contact