Software Updates | TSMaster July-August new features are here! Have you upgraded yet?

To continue empowering automotive electronics R&D, TSMaster is being upgraded again for the summer of 2025.The July-August version of the TSMaster software relaunches theSecurity management enhancements, IO API optimization, and official release of the RPC/IP and Ethernet PDU RBS help manualsThe upgrade aims to provide users with a more powerful and flexible development toolchain. The upgrade is designed to provide users with a more powerful and flexible development toolchain to face the complex challenges of today's automotive network development through finer-grained security control, more efficient hardware interactions, and clearer Ethernet protocol development support.

TSMaster 2025.07-08

You can get a full overview of the new features in this update by watching the feature detail video below.

https://www.bilibili.com/video/BV1yiHezGEuB/?share_source=copy_web

security management

[___ user event ]

→ [Tools] - [Security Management]

Update function:

TSMaster's new Security Management Module goes liveIt integrates AUTOSAR SecOC PDU-level authentication and IEEE MACsec link encryption to realize integrity verification and real-time encryption of CAN/CAN FD and Ethernet messages, effectively blocking replay, eavesdropping and tampering, and providing an end-to-end security testing and verification environment for in-vehicle networks.

[___ SecOC ]

SecOC is a PDU-specific scheme for generating message authentication codes, which generally uses AES-CMAC more often.

1. SecOC Computational Security PDUs

Calculation: original PDU + truncated fresh value + truncated authentication message.

Depending on the algorithm, the length of the authentication message varies and truncation of the result is required to ensure that the PDU (especially for CAN) can hold all the information. Additionally E2E and SecOC can co-exist.

2. SecOC fresh value

AutoSAR offers three forms of fresh values.

In the first one, a segment of the original message is intercepted as a fresh value.

The second, like E2E, uses a more complex counter. there are cases where synchronizing PDUs or resetting PDUs modifies the counter value.

Freshness Value Management - Complete Data Structure for Freshness Values

The third, using timestamps as fresh values. Specialized timestamp PDUs synchronize time. The checker usually uses the high bits of its own synchronized timestamp and the low bits of the truncated fresh value in the message combined together as a condition for the calculation. This effectively avoids the problem of time synchronization with errors.

In actual practice, many host factories will add some extra contents to AutoSAR standard, for example, encrypting the transmitted timestamps one extra time, etc.. For such cases, TSMaster will provide customization in the form of a plug-in.

[MACSec]

MACSec is an encryption function for the Ethernet link layer. Refer to IEEE 802.1 AE and IEEE 802.1 X. Currently TSMaster implements the MACSec function at the software level to support:

MACSec Configuration:
- MACsec Mode: Define the operation mode of MACsec.
- Cipher Suites: Specifies that the list of supported cipher suites controls whether or not unprotected frames are allowed to be transmitted
- Unprotected Frames Allowed: Controls whether or not unprotected frames are allowed to be transmitted
Replay Configuration:
- Replay Protection: Enable or disable data replay protection
- Replay Window: Set the size of the replay protection window
Dynamic key distribution via MKA:
- Key Server Policy: Manage Key Server Role Policy
- MKA Key Server Priority: defines the priority of MKA key server election, the smaller the number, the higher the priority to become the server.
- MKA Hello Time [ms]: set the time interval of MKA protocol greeting packet
- MKA Bounded Hello Time [ms]: specifies the MKA bounded hello time
- Send MKA announcements: Manages whether to send MKA announcements or not.
Port Configuration:
- Transmit on peer learnt: Controls whether data is transmitted as soon as a match is detected.
- SCI Port Number: Port number to which the Secure Channel Identifier (SCI) is assigned

MACSec Features in a Nutshell

MACsec provides frame-level security for data links and supports two modes:

Pure authentication mode (verifying data integrity)
Encryption + authentication model (providing confidentiality and integrity)

Work mode:
Hop-by-Hop Protection (Hop-by-Hop): establishes a secure channel between directly connected devices to protect the physical link.

Secure encapsulation:
Based on SAK, SecTAG (Security Tag) is inserted in the header of the original Ethernet frame and ICV (Integrity Check Value) is appended to the end of the frame, generated by the AES-GCM algorithm (128/256 bit key).

Data frame flow:

[___ C small program ]

→ [IO Module API Function Interface Updates]

tsdi_get_vlevel_input_sync
Function description: Get the digital input voltage level.

tsdi_get_pwm_input_sync
Function description: Get the PWM value of the digital input.

tsdi_config_sync
Function Description: Notifies the hardware device to end the I/O configuration. After calling this API, the configuration parameters take effect.

tsdo_set_vlevel_output_async
Function Description: Sets the digital I/O output voltage level.

tsdo_set_pwm_output_async
Function Description: Sets the digital input and output PWM output.

tsdo_config_sync
Function Description: Configure the parameters of the specified digital output channel.

tsio_start_configuration
Function Description: Notifies the hardware device to be ready for I/O configuration.

tsio_end_configuration
Function Description: Notifies the hardware device to end the I/O configuration. After calling this API, the configuration parameters take effect.

Other:
get_ai_channel_count(), get_ao_channel_count(), get_di_channel_count(), get_do_channel_count(), set_ai_channel_count(), set_ao_channel_ count(), set_di_channel_count(), set_do_channel_count()

→ [CAN IL API function interface update].

can_il_register_autosar_pdu_event
Function Description: Registers for the completion event of AutoSAR PDU transmission and reception.

can_il_unregister_autosar_pdu_event
Function Description: deregisters the completion event for AutoSAR PDU transmission and reception.

can_il_register_autosar_pdu_pretx_event
Function Description: Registers for the AutoSAR PDU pre-transmission event.

can_il_unregister_autosar_pdu_pretx_event
Function Description: deregisters the AutoSAR PDU for pre-transmission events.

→ [CAN Fault Injection API Function Interface Updated]

can_rbs_fault_inject_disturb_sequencecounter
Function Description: Injects a sequence counter fault into the specified PDU.

can_rbs_fault_inject_disturb_checksum
Function description: Injects checksum errors into the specified PDU.

can_rbs_fault_inject_disturb_updatebit
Function Description: used to inject an update bit fault into the specified PDU.

→ [Instruments/Oscilloscopes API Function Interface Update

hand

API Documentation

→ [Help] - [API Documentation]

Update function:
New RPC/IP and Ethernet PDU RBS support documentation in HTML format.

Welcome to download and experience the latest version of TSMaster 2025!

TSMaster Technical Exchange Group

If you have questions about the use of TSMaster software need technical support, welcome to scan the code to add TOSUN technical customer service enterprise micro direct contact and consultation:

Tip:
1. Software download:
Click on the software download link below to download and install directly, beta version is recommended:

2. Software upgrades:
You can check for upgrades to the latest version within the software, provided that your computer has an Internet connection.

Note: TOSUN Technical Support Email:support@tosunai.cnWe welcome inquiries! (Company and contact information must be indicated)