namespace ara::crypto::x509

User GuideKI-GENERIERT

Bietet Schnittstellen und Datenstrukturen zur Repräsentation, Konfiguration und Validierung von X.509-Zertifikaten.

KI-GENERIERT ungeprüft Modell: gemini-3.8-flash-medium · Aufwand: medium · Temperatur: nicht steuerbar · Prompt: c166465f6ba8 Herkunft Offene Fragen (2)

KI-generiertgemini-3.8-flash-medium · 2026-10-13

Bietet Schnittstellen und Datenstrukturen zur Repräsentation, Konfiguration und Validierung von X.509-Zertifikaten.

Der Namespace ara::crypto::x509 stellt Schnittstellen und Datentypen zur Verwaltung, Nutzungsdefinition und Validierung von X.509-Zertifikaten sowie OCSP-Antworten in AUTOSAR Adaptive bereit. Über den Validierungskontext CertificateValidationCtx werden Zertifikatspfade parametrisiert anhand von Optionen wie CertificateValidationOptions [SWS_CRYPT_50107] geprüft. Das Ergebnis wird strukturiert über Statuswerte wie CertificateValidationStatus [SWS_CRYPT_40203] zurückgemeldet, wobei Online-Widerrufsprüfungen per Voreinstellung inaktiv sind und explizit konfiguriert werden müssen.

Kontext

Der Namespace ara::crypto::x509 stellt die zentralen Schnittstellen und Datentypen zur Verarbeitung und Validierung von X.509-Zertifikatsstrukturen in der AUTOSAR Adaptive Platform bereit. Das Schnittstellenmodell umfasst die Repräsentation digitaler Zertifikate (Certificate), Zertifikatssignierungsanfragen (CertSignRequest), Distinguished Names (X509DN) sowie OCSP-Antworten (OcspResponse). Die Instanziierung und Verwaltung dieser kryptografischen Artefakte erfolgt typischerweise über das Provider-Interface X509Provider (Interpretation: Der Provider fungiert als zentrale Fabrikinstanz für X.509-Objekte). Frage Q-449a726a75b1e78d (offen)

Für Zertifikate definiert der Namespace standardisierte Schlüsselverwendungszwecke über den Typ X509KeyUsage [SWS_CRYPT_40101]. Zu den Bit-Konstanten zählen die Erzeugung digitaler Signaturen kConstrDigitalSignature [SWS_CRYPT_40151], Nicht-Abstreitbarkeit kConstrNonRepudiation [SWS_CRYPT_40152], Schlüsselverschlüsselung kConstrKeyEncipherment [SWS_CRYPT_40153], Datenverschlüsselung kConstrDataEncipherment [SWS_CRYPT_40154], Schlüsselvereinbarung kConstrKeyAgreement [SWS_CRYPT_40155], Zertifikatsignierung kConstrKeyCertSign [SWS_CRYPT_40156], CRL-Signierung kConstrCrlSign [SWS_CRYPT_40157] sowie reine Verschlüsselung kConstrEncipherOnly [SWS_CRYPT_40158] und Entschlüsselung kConstrDecipherOnly [SWS_CRYPT_40159]. Ergänzend beschreibt X509ExtendedKeyUsage [SWS_CRYPT_50097] erweiterte Einsatzzwecke wie TLS-Server-Authentifizierung kServerAuth [SWS_CRYPT_50098], TLS-Client-Authentifizierung kClientAuth [SWS_CRYPT_50099], Codesignierung kCodeSigning [SWS_CRYPT_50100], E-Mail-Schutz kEmailProtection [SWS_CRYPT_50101], Zeitstempeldienste kTimeStamping [SWS_CRYPT_50102] und OCSP-Signierung kOCSPSigning [SWS_CRYPT_50103].

Kontextdiagramm: Zusammenspiel der Kernschnittstellen zur Zertifikatsverwaltung und Pfadvalidierung. Quellen: [SWS_CRYPT_40101], [SWS_CRYPT_50097]

Nutzungspfad

Der primäre operative Ablauf im Namespace besteht in der Prüfung von Zertifikatspfaden über CertificateValidationCtx. Das Validierungsverhalten wird über Bitmasken vom Typ CertificateValidationOptions [SWS_CRYPT_50107] parametrisiert. Standardmäßig erfolgt die Pfadprüfung ohne Einbindung von Online-Zertifikatsstatusabfragen über die Option kOcspOff [SWS_CRYPT_50114]. Soll die Gültigkeit online verifiziert werden, kann entweder die Prüfung der gesamten Kette über kOcspResponseCompleteChain [SWS_CRYPT_50112] oder ausschließlich für das Zielzertifikat mittels kOcspResponseTargetOnly [SWS_CRYPT_50113] aktiviert werden.

Für spezifische Prüfszenarien erlauben weitere Validierungsoptionen das Übersteuern von Standardprüfungen: So können zeitliche Gültigkeitsgrenzen über kIgnoreNotBefore [SWS_CRYPT_50108] und kIgnoreNotAfter [SWS_CRYPT_50109] ignoriert werden. Ebenso lässt sich die Auswertung zuvor importierter Zertifikatswiderrufslisten (CRL) mit kIgnoreCrl [SWS_CRYPT_50111] abschalten oder die Fehlersignalisierung bei unbekannten kritischen Erweiterungen via kIgnoreUnknownCriticalExtensions [SWS_CRYPT_50110] unterdrücken. Nach Durchführung der Validierung liefert der Kontext ein Ergebnisobjekt CertificateValidationResult zurück (Interpretation: Der Validierungsaufruf bindet Zielzertifikat, Prüfoptionen und optionale OCSP-Antworten ein und kapselt das Resultat in der Ergebnisklasse). Frage (offen)

Sequenzdiagramm: Ablauf einer Zertifikatsvalidierung mittels Prüfkontext und Auswertung des Resultats. Quellen: [SWS_CRYPT_50107], [SWS_CRYPT_40203]

Fehlerszenarien

Das Ergebnis einer Zertifikatspfadprüfung wird über die Enumeration CertificateValidationStatus [SWS_CRYPT_40203] detailliert aufgeschlüsselt. Eine erfolgreiche Validierung wird durch kValid (= 0) signalisiert. Schlägt die Prüfung fehl, kennzeichnen spezifische Statuswerte die genaue Ursache:

kInvalidSignature (= 1): Eine Signatur innerhalb des Zertifikatspfads konnte nicht erfolgreich verifiziert werden.
kNoPathToTrustedCertificate (= 3): Es konnte kein Pfad zu einem als vertrauenswürdig eingestuften Wurzelzertifikat aufgebaut werden.
kExpired (= 4): Das Zertifikat hat die Gültigkeitsdauer überschritten (Feld notAfter).
kFuture (= 5): Die Gültigkeitsdauer des Zertifikats hat gemäß dem Feld notBefore noch nicht begonnen.
kRevoked (= 6): Das Zertifikat wurde widerrufen; dieser Status resultiert aus importierten CRLs oder einer aktiven OCSP-Prüfung via kOcspResponseCompleteChain oder kOcspResponseTargetOnly.
kUnknownOcspStatus (= 7): Eine eingebundene OCSP-Antwort liefert für das Zertifikat den Zustand „unknown“.
kUnknownCriticalExtension (= 8): Ein Zertifikat enthält eine unbekannte kritische Erweiterung, die weder durch kIgnoreUnknownCriticalExtensions noch durch Vorab-Ausnahmebehandlung ignoriert wurde.

Sofern im Validierungsprozess Online-Statusabfragen verarbeitet werden, signalisiert die Enumeration OcspResponseStatus [SWS_CRYPT_40001] das Resultat des Protokollabrufs. Neben einer erfolgreichen Antwortbestätigung (kSuccessful = 0) können protokollarische und serverseitige Fehler auftreten: ungültige Anfragen (kMalformedRequest = 1), interne Fehler des Ausstellers (kInternalError = 2), temporäre Überlastung (kTryLater = 3), die Notwendigkeit einer Signatur (kSigRequired = 5) oder fehlende Autorisierung (kUnauthorized = 6).

Dieser Leitfaden basiert auf den AUTOSAR-Adaptive-Spezifikationen zum Release R25-11 für das Modul crypto. Er wurde automatisiert erstellt und kuratiert.

Themenkarte

KI-gestützte Gruppierung auf Basis der Records und Spezifikationsauszüge; keine Gliederung aus der AUTOSAR-Spezifikation.

Klassendiagramm

Abgerundete Rahmen = Namespace- bzw. Klassen-Scopes; hohle Dreieckspfeile = Vererbung (zeigt zur Basisklasse); graue Boxen = namespace-fremde bzw. externe Basisklassen. Klicken öffnet die jeweilige Klassen- bzw. cppreference-Seite.

Detailansicht

Wähle in der Gliederung einen Eintrag aus.

Für dieses Release liegen keine Elementdaten vor

Zertifikatsobjekte

Certificate class

X.509 Certificate interface.

erbt von ara::crypto::Serializable

CertSignRequest class

Certificate Signing Request (CSR) object interface.

erbt von ara::crypto::Serializable

X509DN class

Interface of X.509 Distinguished Name (DN).

erbt von ara::crypto::Serializable

X509Provider class

X.509 Provider interface.

Pfadvalidierung

CertificateValidationCtx class

Certificate Validation Context.

CertificateValidationResult class

X.509 Certificate Validation Result.

CertificateValidationStatus enumeration

Certificate Validation Status.

enum class CertificateValidationStatus : std::uint8_t {...};

CertificateValidationOptions type alias

Type for holding bit-flags of certificate validation options.

using CertificateValidationOptions = std::uint32_t;

kIgnoreCrl variable

ignore previously imported CRLs

constexpr CertificateValidationOptions kIgnoreCrl {0x0008};

kIgnoreNotAfter variable

ignore the NotAfter field

constexpr CertificateValidationOptions kIgnoreNotAfter {0x0002};

kIgnoreNotBefore variable

ignore the NotBefore field

constexpr CertificateValidationOptions kIgnoreNotBefore {0x0001};

kIgnoreUnknownCriticalExtensions variable

ignore all unknown critical extensions

constexpr CertificateValidationOptions kIgnoreUnknownCritical Extensions {0x0004};

kOcspOff variable

do not require OCSP response during certificate validation. This is the default behavior.

constexpr CertificateValidationOptions kOcspOff {0x0040};

kOcspResponseCompleteChain variable

require OCSP response for all certificates of chain

constexpr CertificateValidationOptions kOcspResponseCompleteChain {0x0010};

kOcspResponseTargetOnly variable

require OCSP response only for target certificate

constexpr CertificateValidationOptions kOcspResponseTargetOnly {0x0020};

Sperrstatus

OcspResponse class

Interface of OcspResponse.

OcspResponseStatus enumeration

On-line Certificate Status Protocol (OCSP) Response Status.

enum class OcspResponseStatus : std::uint8_t {...};

Key Usage

X509KeyUsage type alias

X.509 v3 Key Usage type definition.

using X509KeyUsage = std::uint32_t;

kConstrCrlSign variable

The key can be used for Certificates Revokation Lists (CRL) signing.

constexpr X509KeyUsage kConstrCrlSign {0x0200};

kConstrDataEncipherment variable

The key can be used for data encipherment.

constexpr X509KeyUsage kConstrDataEncipherment {0x1000};

kConstrDecipherOnly variable

The enciphermet key can be used for deciphering only.

constexpr X509KeyUsage kConstrDecipherOnly {0x0080};

kConstrDigitalSignature variable

The key can be used for digital signature production.

constexpr X509KeyUsage kConstrDigitalSignature {0x8000};

kConstrEncipherOnly variable

The enciphermet key can be used for enciphering only.

constexpr X509KeyUsage kConstrEncipherOnly {0x0100};

kConstrKeyAgreement variable

The key can be used for a key agreement protocol execution.

constexpr X509KeyUsage kConstrKeyAgreement {0x0800};

kConstrKeyCertSign variable

The key can be used for certificates signing.

constexpr X509KeyUsage kConstrKeyCertSign {0x0400};

kConstrKeyEncipherment variable

The key can be used for key encipherment.

constexpr X509KeyUsage kConstrKeyEncipherment {0x2000};

kConstrNonRepudiation variable

The key can be used in cases requiring the "non-repudiation" guarantee.

constexpr X509KeyUsage kConstrNonRepudiation {0x4000};

Extended Key Usage

X509ExtendedKeyUsage type alias

X.509 v3 Extended Key Usage type definition.

using X509ExtendedKeyUsage = std::uint32_t;

kClientAuth variable

TLS WWW client authentication.

constexpr X509ExtendedKeyUsage kClientAuth {0x4000};

kCodeSigning variable

Signing of downloadable executable code.

constexpr X509ExtendedKeyUsage kCodeSigning {0x2000};

kEmailProtection variable

Email protection.

constexpr X509ExtendedKeyUsage kEmailProtection {0x1000};

kOCSPSigning variable

Signing OCSP responses.

constexpr X509ExtendedKeyUsage kOCSPSigning {0x0400};

kServerAuth variable

TLS WWW server authentication.

constexpr X509ExtendedKeyUsage kServerAuth {0x8000};

kTimeStamping variable

Binding the hash of an object to a time.

constexpr X509ExtendedKeyUsage kTimeStamping {0x0800};

Klicke auf einen Eintrag, um seine Bezüge zu sehen.

Enumerationen

enumeration CertificateValidationStatus [SWS_CRYPT_40203] Upstream: RS_CRYPTO_02306

enum class CertificateValidationStatus :                     std::uint8_t {...};

Certificate Validation Status.

Header-Datei	#include "ara/crypto/x509/certificate_validation_result.h"
Forwarding-Header	#include "ara/crypto/crypto_fwd.h"
Scope	namespace ara::crypto::x509
Symbol	CertificateValidationStatus
Basistyp	std::uint8_t

Werte

Enumerator	Beschreibung
kValid	=0 The certificate path validation succeeded.
kInvalidSignature	=1 The certificate path validation failed because a signature of a certificate in the path could not be verified.
kNoPathToTrustedCertificate	=3 The certificate path validation failed because no path to a trusted certificate could be found.
kExpired	=4 The certificate path validation failed because a certificate is expired according to the notAfter field.
kFuture	=5 The certificate path validation failed because a certificate is not valid yet according to the notBefore field.
kRevoked	=6 The certificate path validation failed because a certificate has been revoked through a previously imported CRL or through an OCSP response (if OCSP is enabled through kOcspResponseComplete Chain or kOcspResponseTargetOnly)
kUnknownOcspStatus	=7 The certificate path validation failed because a certificate state is ’unknown’ according to an OCSP response (if OCSP is enabled through kOcspResponseCompleteChain or kOcspResponseTarget Only).
kUnknownCriticalExtension	=8 The certificate path validation failed because a certificate contains an unknown critical extension that has not been excluded from validation using the kIgnoreUnknownCriticalExtensions flag or the IgnoreCriticalExtension() function

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40203
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40203@rel:R25-11#611ba314
Content hash: 611ba314
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40203

Status: valid/unmigrated Version: rel:R25-11#a54ff3f8 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40203@rel:R25-11#a54ff3f8

Recorded Revisions (8):

R25-11rel:R25-11#611ba3142026-09-30
R19-11rel:R19-11#b601c3532026-10-14
R20-11rel:R20-11#777182d62026-10-14
R21-11rel:R21-11#777182d62026-10-14
R22-11rel:R22-11#605e3bf52026-10-14
R23-11rel:R23-11#24934c192026-10-14
R24-11rel:R24-11#102646ae2026-10-14
R25-11rel:R25-11#a54ff3f82026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

enumeration OcspResponseStatus [SWS_CRYPT_40001] Upstream: RS_CRYPTO_02306

enum class OcspResponseStatus :                std::uint8_t {...};

On-line Certificate Status Protocol (OCSP) Response Status.

Header-Datei	#include "ara/crypto/x509/ocsp_response.h"
Forwarding-Header	#include "ara/crypto/crypto_fwd.h"
Scope	namespace ara::crypto::x509
Symbol	OcspResponseStatus
Basistyp	std::uint8_t

Werte

Enumerator	Beschreibung
kSuccessful	=0 Response has valid confirmations.
kMalformedRequest	=1 Illegal confirmation request.
kInternalError	=2 Internal error in issuer.
kTryLater	=3 Try again later.
kSigRequired	=5 Must sign the request.
kUnauthorized	=6 Request unauthorized.

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40001
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40001@rel:R25-11#d7d124a4
Content hash: d7d124a4
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40001

Status: valid/unmigrated Version: rel:R25-11#31b985cf Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40001@rel:R25-11#31b985cf

Recorded Revisions (8):

R25-11rel:R25-11#d7d124a42026-09-30
R19-11rel:R19-11#689cf2402026-10-14
R20-11rel:R20-11#a08eb83f2026-10-14
R21-11rel:R21-11#a08eb83f2026-10-14
R22-11rel:R22-11#a08eb83f2026-10-14
R23-11rel:R23-11#02e152ee2026-10-14
R24-11rel:R24-11#55eaf5822026-10-14
R25-11rel:R25-11#31b985cf2026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

Typaliase

type alias CertificateValidationOptions [SWS_CRYPT_50107] Upstream: RS_CRYPTO_02306

using CertificateValidationOptions = std::uint32_t;

Type for holding bit-flags of certificate validation options.

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50107
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50107@rel:R25-11#4c04a0a2
Content hash: 4c04a0a2
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50107

Status: valid/unmigrated Version: rel:R25-11#4c04a0a2 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50107@rel:R25-11#4c04a0a2

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

type alias X509ExtendedKeyUsage [SWS_CRYPT_50097] Upstream: RS_CRYPTO_02306

using X509ExtendedKeyUsage = std::uint32_t;

X.509 v3 Extended Key Usage type definition.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50097
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50097@rel:R25-11#552dd616
Content hash: 552dd616
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50097

Status: valid/unmigrated Version: rel:R25-11#552dd616 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50097@rel:R25-11#552dd616

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

type alias X509KeyUsage [SWS_CRYPT_40101] Upstream: RS_CRYPTO_02306

using X509KeyUsage = std::uint32_t;

X.509 v3 Key Usage type definition.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40101
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40101@rel:R25-11#50f373ca
Content hash: 50f373ca
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40101

Status: valid/unmigrated Version: rel:R25-11#1a6097e5 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40101@rel:R25-11#1a6097e5

Recorded Revisions (8):

R25-11rel:R25-11#50f373ca2026-09-30
R19-11rel:R19-11#8797c80a2026-10-14
R20-11rel:R20-11#dc105b222026-10-14
R21-11rel:R21-11#d8c78c2b2026-10-14
R22-11rel:R22-11#7ca4c42d2026-10-14
R23-11rel:R23-11#2d17efd52026-10-14
R24-11rel:R24-11#2d17efd52026-10-14
R25-11rel:R25-11#1a6097e52026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

Konstanten / Variablen

variable kClientAuth [SWS_CRYPT_50099] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kClientAuth {0x4000};

TLS WWW client authentication.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kClientAuth
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50099
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50099@rel:R25-11#f691b0a0
Content hash: f691b0a0
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50099

Status: valid/unmigrated Version: rel:R25-11#f691b0a0 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50099@rel:R25-11#f691b0a0

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kCodeSigning [SWS_CRYPT_50100] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kCodeSigning {0x2000};

Signing of downloadable executable code.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kCodeSigning
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50100
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50100@rel:R25-11#d71b6667
Content hash: d71b6667
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50100

Status: valid/unmigrated Version: rel:R25-11#d71b6667 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50100@rel:R25-11#d71b6667

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrCrlSign [SWS_CRYPT_40157] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrCrlSign {0x0200};

The key can be used for Certificates Revokation Lists (CRL) signing.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrCrlSign
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40157
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40157@rel:R25-11#331452d5
Content hash: 331452d5
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40157

Status: valid/unmigrated Version: rel:R25-11#c09b634d Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40157@rel:R25-11#c09b634d

Recorded Revisions (8):

R25-11rel:R25-11#331452d52026-09-30
R19-11rel:R19-11#657eb1b12026-10-14
R20-11rel:R20-11#188d4d6a2026-10-14
R21-11rel:R21-11#83fdccb12026-10-14
R22-11rel:R22-11#ad74b2c02026-10-14
R23-11rel:R23-11#d8afcc0a2026-10-14
R24-11rel:R24-11#417fb67a2026-10-14
R25-11rel:R25-11#c09b634d2026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrDataEncipherment [SWS_CRYPT_40154] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrDataEncipherment {0x1000};

The key can be used for data encipherment.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrDataEncipherment
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40154
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40154@rel:R25-11#f2befcbe
Content hash: f2befcbe
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40154

Status: valid/unmigrated Version: rel:R25-11#20a605a1 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40154@rel:R25-11#20a605a1

Recorded Revisions (8):

R25-11rel:R25-11#f2befcbe2026-09-30
R19-11rel:R19-11#3db10a312026-10-14
R20-11rel:R20-11#7becce132026-10-14
R21-11rel:R21-11#031b22002026-10-14
R22-11rel:R22-11#9a9f4d562026-10-14
R23-11rel:R23-11#9f248d832026-10-14
R24-11rel:R24-11#1ab663722026-10-14
R25-11rel:R25-11#20a605a12026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrDecipherOnly [SWS_CRYPT_40159] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrDecipherOnly {0x0080};

The enciphermet key can be used for deciphering only.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrDecipherOnly
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40159
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40159@rel:R25-11#291b66ee
Content hash: 291b66ee
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40159

Status: valid/unmigrated Version: rel:R25-11#1c4e3c37 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40159@rel:R25-11#1c4e3c37

Recorded Revisions (8):

R25-11rel:R25-11#291b66ee2026-09-30
R19-11rel:R19-11#06cb53f32026-10-14
R20-11rel:R20-11#0bed77022026-10-14
R21-11rel:R21-11#37569e972026-10-14
R22-11rel:R22-11#bf4947722026-10-14
R23-11rel:R23-11#1deedeae2026-10-14
R24-11rel:R24-11#eff90f6e2026-10-14
R25-11rel:R25-11#1c4e3c372026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrDigitalSignature [SWS_CRYPT_40151] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrDigitalSignature {0x8000};

The key can be used for digital signature production.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrDigitalSignature
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40151
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40151@rel:R25-11#86f773fc
Content hash: 86f773fc
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40151

Status: valid/unmigrated Version: rel:R25-11#dde39f96 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40151@rel:R25-11#dde39f96

Recorded Revisions (8):

R25-11rel:R25-11#86f773fc2026-09-30
R19-11rel:R19-11#cdfd4e592026-10-14
R20-11rel:R20-11#41af87832026-10-14
R21-11rel:R21-11#bca1f1f82026-10-14
R22-11rel:R22-11#6bb2ab432026-10-14
R23-11rel:R23-11#ce5b4c672026-10-14
R24-11rel:R24-11#b89896fd2026-10-14
R25-11rel:R25-11#dde39f962026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrEncipherOnly [SWS_CRYPT_40158] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrEncipherOnly {0x0100};

The enciphermet key can be used for enciphering only.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrEncipherOnly
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40158
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40158@rel:R25-11#ec9053c2
Content hash: ec9053c2
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40158

Status: valid/unmigrated Version: rel:R25-11#ecce5c26 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40158@rel:R25-11#ecce5c26

Recorded Revisions (8):

R25-11rel:R25-11#ec9053c22026-09-30
R19-11rel:R19-11#be82e4c02026-10-14
R20-11rel:R20-11#a7fc80da2026-10-14
R21-11rel:R21-11#a3fe01f82026-10-14
R22-11rel:R22-11#9f1d00b92026-10-14
R23-11rel:R23-11#e09022302026-10-14
R24-11rel:R24-11#c6742f992026-10-14
R25-11rel:R25-11#ecce5c262026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrKeyAgreement [SWS_CRYPT_40155] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrKeyAgreement {0x0800};

The key can be used for a key agreement protocol execution.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrKeyAgreement
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40155
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40155@rel:R25-11#8c2edefd
Content hash: 8c2edefd
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40155

Status: valid/unmigrated Version: rel:R25-11#b8c04c53 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40155@rel:R25-11#b8c04c53

Recorded Revisions (8):

R25-11rel:R25-11#8c2edefd2026-09-30
R19-11rel:R19-11#4d63bced2026-10-14
R20-11rel:R20-11#2a69a97b2026-10-14
R21-11rel:R21-11#30bbb1e42026-10-14
R22-11rel:R22-11#144d2e692026-10-14
R23-11rel:R23-11#b318d31f2026-10-14
R24-11rel:R24-11#b14c3a9c2026-10-14
R25-11rel:R25-11#b8c04c532026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrKeyCertSign [SWS_CRYPT_40156] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrKeyCertSign {0x0400};

The key can be used for certificates signing.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrKeyCertSign
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40156
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40156@rel:R25-11#7b7a26fc
Content hash: 7b7a26fc
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40156

Status: valid/unmigrated Version: rel:R25-11#5670cc95 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40156@rel:R25-11#5670cc95

Recorded Revisions (8):

R25-11rel:R25-11#7b7a26fc2026-09-30
R19-11rel:R19-11#49933d862026-10-14
R20-11rel:R20-11#42f5ab862026-10-14
R21-11rel:R21-11#2488bf082026-10-14
R22-11rel:R22-11#d25faa4f2026-10-14
R23-11rel:R23-11#71474f1b2026-10-14
R24-11rel:R24-11#6b118f2d2026-10-14
R25-11rel:R25-11#5670cc952026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrKeyEncipherment [SWS_CRYPT_40153] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrKeyEncipherment {0x2000};

The key can be used for key encipherment.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrKeyEncipherment
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40153
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40153@rel:R25-11#cccd3083
Content hash: cccd3083
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40153

Status: valid/unmigrated Version: rel:R25-11#ed7fe9a1 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40153@rel:R25-11#ed7fe9a1

Recorded Revisions (8):

R25-11rel:R25-11#cccd30832026-09-30
R19-11rel:R19-11#a7d1bb0f2026-10-14
R20-11rel:R20-11#77dc27b02026-10-14
R21-11rel:R21-11#17b192dd2026-10-14
R22-11rel:R22-11#5eef2a602026-10-14
R23-11rel:R23-11#30a961b72026-10-14
R24-11rel:R24-11#103c574c2026-10-14
R25-11rel:R25-11#ed7fe9a12026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrNonRepudiation [SWS_CRYPT_40152] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrNonRepudiation {0x4000};

The key can be used in cases requiring the "non-repudiation" guarantee.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrNonRepudiation
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40152
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40152@rel:R25-11#f0ca21d4
Content hash: f0ca21d4
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40152

Status: valid/unmigrated Version: rel:R25-11#4ef4a6b7 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40152@rel:R25-11#4ef4a6b7

Recorded Revisions (8):

R25-11rel:R25-11#f0ca21d42026-09-30
R19-11rel:R19-11#efd8158c2026-10-14
R20-11rel:R20-11#64cd21d92026-10-14
R21-11rel:R21-11#a4a12afe2026-10-14
R22-11rel:R22-11#1888077f2026-10-14
R23-11rel:R23-11#89912c8a2026-10-14
R24-11rel:R24-11#8f6fc79c2026-10-14
R25-11rel:R25-11#4ef4a6b72026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kEmailProtection [SWS_CRYPT_50101] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kEmailProtection {0x1000};

Email protection.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kEmailProtection
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50101
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50101@rel:R25-11#b1c9f903
Content hash: b1c9f903
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50101

Status: valid/unmigrated Version: rel:R25-11#b1c9f903 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50101@rel:R25-11#b1c9f903

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kIgnoreCrl [SWS_CRYPT_50111] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kIgnoreCrl {0x0008};

ignore previously imported CRLs

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kIgnoreCrl
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50111
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50111@rel:R25-11#e9f888ea
Content hash: e9f888ea
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50111

Status: valid/unmigrated Version: rel:R25-11#e9f888ea Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50111@rel:R25-11#e9f888ea

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kIgnoreNotAfter [SWS_CRYPT_50109] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kIgnoreNotAfter {0x0002};

ignore the NotAfter field

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kIgnoreNotAfter
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50109
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50109@rel:R25-11#14c68b6d
Content hash: 14c68b6d
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50109

Status: valid/unmigrated Version: rel:R25-11#14c68b6d Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50109@rel:R25-11#14c68b6d

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kIgnoreNotBefore [SWS_CRYPT_50108] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kIgnoreNotBefore {0x0001};

ignore the NotBefore field

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kIgnoreNotBefore
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50108
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50108@rel:R25-11#ade280f3
Content hash: ade280f3
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50108

Status: valid/unmigrated Version: rel:R25-11#ade280f3 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50108@rel:R25-11#ade280f3

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kIgnoreUnknownCriticalExtensions [SWS_CRYPT_50110] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kIgnoreUnknownCritical Extensions {0x0004};

ignore all unknown critical extensions

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kIgnoreUnknownCriticalExtensions
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50110
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50110@rel:R25-11#c4421df7
Content hash: c4421df7
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50110

Status: valid/unmigrated Version: rel:R25-11#c4421df7 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50110@rel:R25-11#c4421df7

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kOCSPSigning [SWS_CRYPT_50103] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kOCSPSigning {0x0400};

Signing OCSP responses.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kOCSPSigning
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50103
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50103@rel:R25-11#2a849fd6
Content hash: 2a849fd6
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50103

Status: valid/unmigrated Version: rel:R25-11#2a849fd6 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50103@rel:R25-11#2a849fd6

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kOcspOff [SWS_CRYPT_50114] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kOcspOff {0x0040};

do not require OCSP response during certificate validation. This is the default behavior.

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kOcspOff
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50114
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50114@rel:R25-11#5c099b00
Content hash: 5c099b00
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50114

Status: valid/unmigrated Version: rel:R25-11#5c099b00 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50114@rel:R25-11#5c099b00

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kOcspResponseCompleteChain [SWS_CRYPT_50112] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kOcspResponseCompleteChain {0x0010};

require OCSP response for all certificates of chain

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kOcspResponseCompleteChain
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50112
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50112@rel:R25-11#8adc93f1
Content hash: 8adc93f1
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50112

Status: valid/unmigrated Version: rel:R25-11#8adc93f1 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50112@rel:R25-11#8adc93f1

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kOcspResponseTargetOnly [SWS_CRYPT_50113] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kOcspResponseTargetOnly {0x0020};

require OCSP response only for target certificate

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kOcspResponseTargetOnly
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50113
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50113@rel:R25-11#5b6cd1d9
Content hash: 5b6cd1d9
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50113

Status: valid/unmigrated Version: rel:R25-11#5b6cd1d9 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50113@rel:R25-11#5b6cd1d9

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kServerAuth [SWS_CRYPT_50098] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kServerAuth {0x8000};

TLS WWW server authentication.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kServerAuth
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50098
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50098@rel:R25-11#41c8876b
Content hash: 41c8876b
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50098

Status: valid/unmigrated Version: rel:R25-11#41c8876b Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50098@rel:R25-11#41c8876b

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kTimeStamping [SWS_CRYPT_50102] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kTimeStamping {0x0800};

Binding the hash of an object to a time.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kTimeStamping
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50102
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50102@rel:R25-11#3c301e8b
Content hash: 3c301e8b
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50102

Status: valid/unmigrated Version: rel:R25-11#3c301e8b Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50102@rel:R25-11#3c301e8b

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

namespace ara::crypto::x509

User GuideKI-GENERIERT

Kontext

Nutzungspfad

Fehlerszenarien

Themenkarte

Zertifikatsobjekte

Pfadvalidierung

Sperrstatus

Key Usage

Extended Key Usage

Klassendiagramm

Detailansicht

Zertifikatsobjekte

Pfadvalidierung

Sperrstatus

Key Usage

Extended Key Usage

Enumerationen

enumeration CertificateValidationStatus [SWS_CRYPT_40203] Upstream: RS_CRYPTO_02306

Werte

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

enumeration OcspResponseStatus [SWS_CRYPT_40001] Upstream: RS_CRYPTO_02306

Werte

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

Typaliase

type alias CertificateValidationOptions [SWS_CRYPT_50107] Upstream: RS_CRYPTO_02306

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

type alias X509ExtendedKeyUsage [SWS_CRYPT_50097] Upstream: RS_CRYPTO_02306

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

type alias X509KeyUsage [SWS_CRYPT_40101] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

Konstanten / Variablen

variable kClientAuth [SWS_CRYPT_50099] Upstream: RS_CRYPTO_02306

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kCodeSigning [SWS_CRYPT_50100] Upstream: RS_CRYPTO_02306

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrCrlSign [SWS_CRYPT_40157] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrDataEncipherment [SWS_CRYPT_40154] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrDecipherOnly [SWS_CRYPT_40159] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrDigitalSignature [SWS_CRYPT_40151] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrEncipherOnly [SWS_CRYPT_40158] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrKeyAgreement [SWS_CRYPT_40155] Upstream: RS_CRYPTO_02306