namespace ara::crypto::x509

User GuideAI-GENERATED

Provides interfaces and data structures for representing, configuring, and validating X.509 certificates.

AI-GENERATED unreviewed Model: gemini-3.8-flash-medium · Effort: medium · Temperature: not controllable · Prompt: c166465f6ba8 Provenance Open questions (2)

translated from the German guidegemini-3.8-flash-low · 2026-10-13 · German original

Provides interfaces and data structures for representing, configuring, and validating X.509 certificates.

The namespace ara::crypto::x509 provides interfaces and data types for managing, defining the usage of, and validating X.509 certificates as well as OCSP responses in AUTOSAR Adaptive. Certificate paths are checked via the validation context CertificateValidationCtx, parameterized using options such as CertificateValidationOptions [SWS_CRYPT_50107]. The result is reported back in a structured manner via status values like CertificateValidationStatus [SWS_CRYPT_40203], with online revocation checks being inactive by default and requiring explicit configuration.

Context

The namespace ara::crypto::x509 provides the central interfaces and data types for processing and validating X.509 certificate structures in the AUTOSAR Adaptive Platform. The interface model comprises the representation of digital certificates (Certificate), certificate signing requests (CertSignRequest), distinguished names (X509DN), and OCSP responses (OcspResponse). The instantiation and management of these cryptographic artifacts typically occurs via the provider interface X509Provider (Interpretation: The provider acts as a central factory instance for X.509 objects). Question Q-449a726a75b1e78d (open)

For certificates, the namespace defines standardized key usages via the type X509KeyUsage [SWS_CRYPT_40101]. The bit constants include the generation of digital signatures kConstrDigitalSignature [SWS_CRYPT_40151], non-repudiation kConstrNonRepudiation [SWS_CRYPT_40152], key encipherment kConstrKeyEncipherment [SWS_CRYPT_40153], data encipherment kConstrDataEncipherment [SWS_CRYPT_40154], key agreement kConstrKeyAgreement [SWS_CRYPT_40155], certificate signing kConstrKeyCertSign [SWS_CRYPT_40156], CRL signing kConstrCrlSign [SWS_CRYPT_40157], as well as encipher only kConstrEncipherOnly [SWS_CRYPT_40158] and decipher only kConstrDecipherOnly [SWS_CRYPT_40159]. Additionally, X509ExtendedKeyUsage [SWS_CRYPT_50097] describes extended key usages such as TLS server authentication kServerAuth [SWS_CRYPT_50098], TLS client authentication kClientAuth [SWS_CRYPT_50099], code signing kCodeSigning [SWS_CRYPT_50100], email protection kEmailProtection [SWS_CRYPT_50101], time stamping kTimeStamping [SWS_CRYPT_50102], and OCSP signing kOCSPSigning [SWS_CRYPT_50103].

Context diagram: Interaction of the core interfaces for certificate management and path validation. Sources: [SWS_CRYPT_40101], [SWS_CRYPT_50097]

Usage Path

The primary operational workflow in the namespace consists of checking certificate paths via CertificateValidationCtx. The validation behavior is parameterized using bitmasks of type CertificateValidationOptions [SWS_CRYPT_50107]. By default, path validation is performed without involving online certificate status requests via the option kOcspOff [SWS_CRYPT_50114]. If validity is to be verified online, checking either the entire chain via kOcspResponseCompleteChain [SWS_CRYPT_50112] or exclusively the target certificate via kOcspResponseTargetOnly [SWS_CRYPT_50113] can be activated.

For specific validation scenarios, further validation options allow overriding default checks: Temporal validity limits can thus be ignored via kIgnoreNotBefore [SWS_CRYPT_50108] and kIgnoreNotAfter [SWS_CRYPT_50109]. Likewise, the evaluation of previously imported certificate revocation lists (CRLs) can be disabled with kIgnoreCrl [SWS_CRYPT_50111], or error signaling for unknown critical extensions can be suppressed via kIgnoreUnknownCriticalExtensions [SWS_CRYPT_50110]. After performing the validation, the context returns a result object CertificateValidationResult (Interpretation: The validation call incorporates the target certificate, check options, and optional OCSP responses and encapsulates the outcome in the result class). Question (open)

Sequence diagram: Procedure of a certificate validation using a verification context and evaluation of the result. Sources: [SWS_CRYPT_50107], [SWS_CRYPT_40203]

Error Scenarios

The result of a certificate path check is broken down in detail via the enumeration CertificateValidationStatus [SWS_CRYPT_40203]. A successful validation is signaled by kValid (= 0). If the check fails, specific status values indicate the exact cause:

kInvalidSignature (= 1): A signature within the certificate path could not be successfully verified.
kNoPathToTrustedCertificate (= 3): No path to a root certificate classified as trusted could be established.
kExpired (= 4): The certificate has exceeded its validity period (field notAfter).
kFuture (= 5): The validity period of the certificate has not yet begun according to field notBefore.
kRevoked (= 6): The certificate was revoked; this status results from imported CRLs or an active OCSP check via kOcspResponseCompleteChain or kOcspResponseTargetOnly.
kUnknownOcspStatus (= 7): An incorporated OCSP response returns the status "unknown" for the certificate.
kUnknownCriticalExtension (= 8): A certificate contains an unknown critical extension that was neither ignored by kIgnoreUnknownCriticalExtensions nor by prior exception handling.

If online status requests are processed in the validation process, the enumeration OcspResponseStatus [SWS_CRYPT_40001] signals the result of the protocol retrieval. In addition to a successful response confirmation (kSuccessful = 0), protocol and server-side errors can occur: invalid requests (kMalformedRequest = 1), internal errors of the issuer (kInternalError = 2), temporary overload (kTryLater = 3), the requirement of a signature (kSigRequired = 5), or missing authorization (kUnauthorized = 6).

This guide is based on the AUTOSAR Adaptive specifications for Release R25-11 for the module crypto. It was generated and curated automatically.

Topic map

KI-gestützte Gruppierung auf Basis der Records und Spezifikationsauszüge; keine Gliederung aus der AUTOSAR-Spezifikation.

Class diagram

Abgerundete Rahmen = Namespace- bzw. Klassen-Scopes; hohle Dreieckspfeile = Vererbung (zeigt zur Basisklasse); graue Boxen = namespace-fremde bzw. externe Basisklassen. Klicken öffnet die jeweilige Klassen- bzw. cppreference-Seite.

Detail view

Select an entry in the outline.

No element data available for this release

Zertifikatsobjekte

Certificate class

X.509 Certificate interface.

inherits from ara::crypto::Serializable

CertSignRequest class

Certificate Signing Request (CSR) object interface.

inherits from ara::crypto::Serializable

X509DN class

Interface of X.509 Distinguished Name (DN).

inherits from ara::crypto::Serializable

X509Provider class

X.509 Provider interface.

Pfadvalidierung

CertificateValidationCtx class

Certificate Validation Context.

CertificateValidationResult class

X.509 Certificate Validation Result.

CertificateValidationStatus enumeration

Certificate Validation Status.

enum class CertificateValidationStatus : std::uint8_t {...};

CertificateValidationOptions type alias

Type for holding bit-flags of certificate validation options.

using CertificateValidationOptions = std::uint32_t;

kIgnoreCrl variable

ignore previously imported CRLs

constexpr CertificateValidationOptions kIgnoreCrl {0x0008};

kIgnoreNotAfter variable

ignore the NotAfter field

constexpr CertificateValidationOptions kIgnoreNotAfter {0x0002};

kIgnoreNotBefore variable

ignore the NotBefore field

constexpr CertificateValidationOptions kIgnoreNotBefore {0x0001};

kIgnoreUnknownCriticalExtensions variable

ignore all unknown critical extensions

constexpr CertificateValidationOptions kIgnoreUnknownCritical Extensions {0x0004};

kOcspOff variable

do not require OCSP response during certificate validation. This is the default behavior.

constexpr CertificateValidationOptions kOcspOff {0x0040};

kOcspResponseCompleteChain variable

require OCSP response for all certificates of chain

constexpr CertificateValidationOptions kOcspResponseCompleteChain {0x0010};

kOcspResponseTargetOnly variable

require OCSP response only for target certificate

constexpr CertificateValidationOptions kOcspResponseTargetOnly {0x0020};

Sperrstatus

OcspResponse class

Interface of OcspResponse.

OcspResponseStatus enumeration

On-line Certificate Status Protocol (OCSP) Response Status.

enum class OcspResponseStatus : std::uint8_t {...};

Key Usage

X509KeyUsage type alias

X.509 v3 Key Usage type definition.

using X509KeyUsage = std::uint32_t;

kConstrCrlSign variable

The key can be used for Certificates Revokation Lists (CRL) signing.

constexpr X509KeyUsage kConstrCrlSign {0x0200};

kConstrDataEncipherment variable

The key can be used for data encipherment.

constexpr X509KeyUsage kConstrDataEncipherment {0x1000};

kConstrDecipherOnly variable

The enciphermet key can be used for deciphering only.

constexpr X509KeyUsage kConstrDecipherOnly {0x0080};

kConstrDigitalSignature variable

The key can be used for digital signature production.

constexpr X509KeyUsage kConstrDigitalSignature {0x8000};

kConstrEncipherOnly variable

The enciphermet key can be used for enciphering only.

constexpr X509KeyUsage kConstrEncipherOnly {0x0100};

kConstrKeyAgreement variable

The key can be used for a key agreement protocol execution.

constexpr X509KeyUsage kConstrKeyAgreement {0x0800};

kConstrKeyCertSign variable

The key can be used for certificates signing.

constexpr X509KeyUsage kConstrKeyCertSign {0x0400};

kConstrKeyEncipherment variable

The key can be used for key encipherment.

constexpr X509KeyUsage kConstrKeyEncipherment {0x2000};

kConstrNonRepudiation variable

The key can be used in cases requiring the "non-repudiation" guarantee.

constexpr X509KeyUsage kConstrNonRepudiation {0x4000};

Extended Key Usage

X509ExtendedKeyUsage type alias

X.509 v3 Extended Key Usage type definition.

using X509ExtendedKeyUsage = std::uint32_t;

kClientAuth variable

TLS WWW client authentication.

constexpr X509ExtendedKeyUsage kClientAuth {0x4000};

kCodeSigning variable

Signing of downloadable executable code.

constexpr X509ExtendedKeyUsage kCodeSigning {0x2000};

kEmailProtection variable

Email protection.

constexpr X509ExtendedKeyUsage kEmailProtection {0x1000};

kOCSPSigning variable

Signing OCSP responses.

constexpr X509ExtendedKeyUsage kOCSPSigning {0x0400};

kServerAuth variable

TLS WWW server authentication.

constexpr X509ExtendedKeyUsage kServerAuth {0x8000};

kTimeStamping variable

Binding the hash of an object to a time.

constexpr X509ExtendedKeyUsage kTimeStamping {0x0800};

Click an entry to see its relations.

Enumerations

enumeration CertificateValidationStatus [SWS_CRYPT_40203] Upstream: RS_CRYPTO_02306

enum class CertificateValidationStatus :                     std::uint8_t {...};

Certificate Validation Status.

Header-Datei	#include "ara/crypto/x509/certificate_validation_result.h"
Forwarding-Header	#include "ara/crypto/crypto_fwd.h"
Scope	namespace ara::crypto::x509
Symbol	CertificateValidationStatus
Basistyp	std::uint8_t

Werte

Enumerator	Beschreibung
kValid	=0 The certificate path validation succeeded.
kInvalidSignature	=1 The certificate path validation failed because a signature of a certificate in the path could not be verified.
kNoPathToTrustedCertificate	=3 The certificate path validation failed because no path to a trusted certificate could be found.
kExpired	=4 The certificate path validation failed because a certificate is expired according to the notAfter field.
kFuture	=5 The certificate path validation failed because a certificate is not valid yet according to the notBefore field.
kRevoked	=6 The certificate path validation failed because a certificate has been revoked through a previously imported CRL or through an OCSP response (if OCSP is enabled through kOcspResponseComplete Chain or kOcspResponseTargetOnly)
kUnknownOcspStatus	=7 The certificate path validation failed because a certificate state is ’unknown’ according to an OCSP response (if OCSP is enabled through kOcspResponseCompleteChain or kOcspResponseTarget Only).
kUnknownCriticalExtension	=8 The certificate path validation failed because a certificate contains an unknown critical extension that has not been excluded from validation using the kIgnoreUnknownCriticalExtensions flag or the IgnoreCriticalExtension() function

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40203
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40203@rel:R25-11#611ba314
Content hash: 611ba314
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40203

Status: valid/unmigrated Version: rel:R25-11#a54ff3f8 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40203@rel:R25-11#a54ff3f8

Recorded Revisions (8):

R25-11rel:R25-11#611ba3142026-09-30
R19-11rel:R19-11#b601c3532026-10-14
R20-11rel:R20-11#777182d62026-10-14
R21-11rel:R21-11#777182d62026-10-14
R22-11rel:R22-11#605e3bf52026-10-14
R23-11rel:R23-11#24934c192026-10-14
R24-11rel:R24-11#102646ae2026-10-14
R25-11rel:R25-11#a54ff3f82026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

enumeration OcspResponseStatus [SWS_CRYPT_40001] Upstream: RS_CRYPTO_02306

enum class OcspResponseStatus :                std::uint8_t {...};

On-line Certificate Status Protocol (OCSP) Response Status.

Header-Datei	#include "ara/crypto/x509/ocsp_response.h"
Forwarding-Header	#include "ara/crypto/crypto_fwd.h"
Scope	namespace ara::crypto::x509
Symbol	OcspResponseStatus
Basistyp	std::uint8_t

Werte

Enumerator	Beschreibung
kSuccessful	=0 Response has valid confirmations.
kMalformedRequest	=1 Illegal confirmation request.
kInternalError	=2 Internal error in issuer.
kTryLater	=3 Try again later.
kSigRequired	=5 Must sign the request.
kUnauthorized	=6 Request unauthorized.

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40001
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40001@rel:R25-11#d7d124a4
Content hash: d7d124a4
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40001

Status: valid/unmigrated Version: rel:R25-11#31b985cf Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40001@rel:R25-11#31b985cf

Recorded Revisions (8):

R25-11rel:R25-11#d7d124a42026-09-30
R19-11rel:R19-11#689cf2402026-10-14
R20-11rel:R20-11#a08eb83f2026-10-14
R21-11rel:R21-11#a08eb83f2026-10-14
R22-11rel:R22-11#a08eb83f2026-10-14
R23-11rel:R23-11#02e152ee2026-10-14
R24-11rel:R24-11#55eaf5822026-10-14
R25-11rel:R25-11#31b985cf2026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

Type aliases

type alias CertificateValidationOptions [SWS_CRYPT_50107] Upstream: RS_CRYPTO_02306

using CertificateValidationOptions = std::uint32_t;

Type for holding bit-flags of certificate validation options.

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50107
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50107@rel:R25-11#4c04a0a2
Content hash: 4c04a0a2
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50107

Status: valid/unmigrated Version: rel:R25-11#4c04a0a2 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50107@rel:R25-11#4c04a0a2

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

type alias X509ExtendedKeyUsage [SWS_CRYPT_50097] Upstream: RS_CRYPTO_02306

using X509ExtendedKeyUsage = std::uint32_t;

X.509 v3 Extended Key Usage type definition.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50097
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50097@rel:R25-11#552dd616
Content hash: 552dd616
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50097

Status: valid/unmigrated Version: rel:R25-11#552dd616 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50097@rel:R25-11#552dd616

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

type alias X509KeyUsage [SWS_CRYPT_40101] Upstream: RS_CRYPTO_02306

using X509KeyUsage = std::uint32_t;

X.509 v3 Key Usage type definition.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40101
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40101@rel:R25-11#50f373ca
Content hash: 50f373ca
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40101

Status: valid/unmigrated Version: rel:R25-11#1a6097e5 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40101@rel:R25-11#1a6097e5

Recorded Revisions (8):

R25-11rel:R25-11#50f373ca2026-09-30
R19-11rel:R19-11#8797c80a2026-10-14
R20-11rel:R20-11#dc105b222026-10-14
R21-11rel:R21-11#d8c78c2b2026-10-14
R22-11rel:R22-11#7ca4c42d2026-10-14
R23-11rel:R23-11#2d17efd52026-10-14
R24-11rel:R24-11#2d17efd52026-10-14
R25-11rel:R25-11#1a6097e52026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

Constants / variables

variable kClientAuth [SWS_CRYPT_50099] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kClientAuth {0x4000};

TLS WWW client authentication.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kClientAuth
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50099
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50099@rel:R25-11#f691b0a0
Content hash: f691b0a0
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50099

Status: valid/unmigrated Version: rel:R25-11#f691b0a0 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50099@rel:R25-11#f691b0a0

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kCodeSigning [SWS_CRYPT_50100] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kCodeSigning {0x2000};

Signing of downloadable executable code.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kCodeSigning
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50100
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50100@rel:R25-11#d71b6667
Content hash: d71b6667
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50100

Status: valid/unmigrated Version: rel:R25-11#d71b6667 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50100@rel:R25-11#d71b6667

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrCrlSign [SWS_CRYPT_40157] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrCrlSign {0x0200};

The key can be used for Certificates Revokation Lists (CRL) signing.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrCrlSign
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40157
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40157@rel:R25-11#331452d5
Content hash: 331452d5
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40157

Status: valid/unmigrated Version: rel:R25-11#c09b634d Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40157@rel:R25-11#c09b634d

Recorded Revisions (8):

R25-11rel:R25-11#331452d52026-09-30
R19-11rel:R19-11#657eb1b12026-10-14
R20-11rel:R20-11#188d4d6a2026-10-14
R21-11rel:R21-11#83fdccb12026-10-14
R22-11rel:R22-11#ad74b2c02026-10-14
R23-11rel:R23-11#d8afcc0a2026-10-14
R24-11rel:R24-11#417fb67a2026-10-14
R25-11rel:R25-11#c09b634d2026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrDataEncipherment [SWS_CRYPT_40154] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrDataEncipherment {0x1000};

The key can be used for data encipherment.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrDataEncipherment
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40154
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40154@rel:R25-11#f2befcbe
Content hash: f2befcbe
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40154

Status: valid/unmigrated Version: rel:R25-11#20a605a1 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40154@rel:R25-11#20a605a1

Recorded Revisions (8):

R25-11rel:R25-11#f2befcbe2026-09-30
R19-11rel:R19-11#3db10a312026-10-14
R20-11rel:R20-11#7becce132026-10-14
R21-11rel:R21-11#031b22002026-10-14
R22-11rel:R22-11#9a9f4d562026-10-14
R23-11rel:R23-11#9f248d832026-10-14
R24-11rel:R24-11#1ab663722026-10-14
R25-11rel:R25-11#20a605a12026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrDecipherOnly [SWS_CRYPT_40159] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrDecipherOnly {0x0080};

The enciphermet key can be used for deciphering only.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrDecipherOnly
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40159
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40159@rel:R25-11#291b66ee
Content hash: 291b66ee
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40159

Status: valid/unmigrated Version: rel:R25-11#1c4e3c37 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40159@rel:R25-11#1c4e3c37

Recorded Revisions (8):

R25-11rel:R25-11#291b66ee2026-09-30
R19-11rel:R19-11#06cb53f32026-10-14
R20-11rel:R20-11#0bed77022026-10-14
R21-11rel:R21-11#37569e972026-10-14
R22-11rel:R22-11#bf4947722026-10-14
R23-11rel:R23-11#1deedeae2026-10-14
R24-11rel:R24-11#eff90f6e2026-10-14
R25-11rel:R25-11#1c4e3c372026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrDigitalSignature [SWS_CRYPT_40151] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrDigitalSignature {0x8000};

The key can be used for digital signature production.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrDigitalSignature
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40151
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40151@rel:R25-11#86f773fc
Content hash: 86f773fc
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40151

Status: valid/unmigrated Version: rel:R25-11#dde39f96 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40151@rel:R25-11#dde39f96

Recorded Revisions (8):

R25-11rel:R25-11#86f773fc2026-09-30
R19-11rel:R19-11#cdfd4e592026-10-14
R20-11rel:R20-11#41af87832026-10-14
R21-11rel:R21-11#bca1f1f82026-10-14
R22-11rel:R22-11#6bb2ab432026-10-14
R23-11rel:R23-11#ce5b4c672026-10-14
R24-11rel:R24-11#b89896fd2026-10-14
R25-11rel:R25-11#dde39f962026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrEncipherOnly [SWS_CRYPT_40158] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrEncipherOnly {0x0100};

The enciphermet key can be used for enciphering only.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrEncipherOnly
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40158
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40158@rel:R25-11#ec9053c2
Content hash: ec9053c2
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40158

Status: valid/unmigrated Version: rel:R25-11#ecce5c26 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40158@rel:R25-11#ecce5c26

Recorded Revisions (8):

R25-11rel:R25-11#ec9053c22026-09-30
R19-11rel:R19-11#be82e4c02026-10-14
R20-11rel:R20-11#a7fc80da2026-10-14
R21-11rel:R21-11#a3fe01f82026-10-14
R22-11rel:R22-11#9f1d00b92026-10-14
R23-11rel:R23-11#e09022302026-10-14
R24-11rel:R24-11#c6742f992026-10-14
R25-11rel:R25-11#ecce5c262026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrKeyAgreement [SWS_CRYPT_40155] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrKeyAgreement {0x0800};

The key can be used for a key agreement protocol execution.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrKeyAgreement
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40155
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40155@rel:R25-11#8c2edefd
Content hash: 8c2edefd
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40155

Status: valid/unmigrated Version: rel:R25-11#b8c04c53 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40155@rel:R25-11#b8c04c53

Recorded Revisions (8):

R25-11rel:R25-11#8c2edefd2026-09-30
R19-11rel:R19-11#4d63bced2026-10-14
R20-11rel:R20-11#2a69a97b2026-10-14
R21-11rel:R21-11#30bbb1e42026-10-14
R22-11rel:R22-11#144d2e692026-10-14
R23-11rel:R23-11#b318d31f2026-10-14
R24-11rel:R24-11#b14c3a9c2026-10-14
R25-11rel:R25-11#b8c04c532026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrKeyCertSign [SWS_CRYPT_40156] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrKeyCertSign {0x0400};

The key can be used for certificates signing.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrKeyCertSign
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40156
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40156@rel:R25-11#7b7a26fc
Content hash: 7b7a26fc
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40156

Status: valid/unmigrated Version: rel:R25-11#5670cc95 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40156@rel:R25-11#5670cc95

Recorded Revisions (8):

R25-11rel:R25-11#7b7a26fc2026-09-30
R19-11rel:R19-11#49933d862026-10-14
R20-11rel:R20-11#42f5ab862026-10-14
R21-11rel:R21-11#2488bf082026-10-14
R22-11rel:R22-11#d25faa4f2026-10-14
R23-11rel:R23-11#71474f1b2026-10-14
R24-11rel:R24-11#6b118f2d2026-10-14
R25-11rel:R25-11#5670cc952026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrKeyEncipherment [SWS_CRYPT_40153] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrKeyEncipherment {0x2000};

The key can be used for key encipherment.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrKeyEncipherment
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40153
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40153@rel:R25-11#cccd3083
Content hash: cccd3083
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40153

Status: valid/unmigrated Version: rel:R25-11#ed7fe9a1 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40153@rel:R25-11#ed7fe9a1

Recorded Revisions (8):

R25-11rel:R25-11#cccd30832026-09-30
R19-11rel:R19-11#a7d1bb0f2026-10-14
R20-11rel:R20-11#77dc27b02026-10-14
R21-11rel:R21-11#17b192dd2026-10-14
R22-11rel:R22-11#5eef2a602026-10-14
R23-11rel:R23-11#30a961b72026-10-14
R24-11rel:R24-11#103c574c2026-10-14
R25-11rel:R25-11#ed7fe9a12026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kConstrNonRepudiation [SWS_CRYPT_40152] Upstream: RS_CRYPTO_02306

constexpr X509KeyUsage kConstrNonRepudiation {0x4000};

The key can be used in cases requiring the "non-repudiation" guarantee.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kConstrNonRepudiation
Typ	X509KeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_40152
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_40152@rel:R25-11#f0ca21d4
Content hash: f0ca21d4
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_40152

Status: valid/unmigrated Version: rel:R25-11#4ef4a6b7 Versionshistorie & Revisions (1 transition, 8 revision)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_40152@rel:R25-11#4ef4a6b7

Recorded Revisions (8):

R25-11rel:R25-11#f0ca21d42026-09-30
R19-11rel:R19-11#efd8158c2026-10-14
R20-11rel:R20-11#64cd21d92026-10-14
R21-11rel:R21-11#a4a12afe2026-10-14
R22-11rel:R22-11#1888077f2026-10-14
R23-11rel:R23-11#89912c8a2026-10-14
R24-11rel:R24-11#8f6fc79c2026-10-14
R25-11rel:R25-11#4ef4a6b72026-10-14 active

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kEmailProtection [SWS_CRYPT_50101] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kEmailProtection {0x1000};

Email protection.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kEmailProtection
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50101
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50101@rel:R25-11#b1c9f903
Content hash: b1c9f903
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50101

Status: valid/unmigrated Version: rel:R25-11#b1c9f903 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50101@rel:R25-11#b1c9f903

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kIgnoreCrl [SWS_CRYPT_50111] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kIgnoreCrl {0x0008};

ignore previously imported CRLs

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kIgnoreCrl
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50111
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50111@rel:R25-11#e9f888ea
Content hash: e9f888ea
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50111

Status: valid/unmigrated Version: rel:R25-11#e9f888ea Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50111@rel:R25-11#e9f888ea

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kIgnoreNotAfter [SWS_CRYPT_50109] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kIgnoreNotAfter {0x0002};

ignore the NotAfter field

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kIgnoreNotAfter
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50109
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50109@rel:R25-11#14c68b6d
Content hash: 14c68b6d
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50109

Status: valid/unmigrated Version: rel:R25-11#14c68b6d Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50109@rel:R25-11#14c68b6d

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kIgnoreNotBefore [SWS_CRYPT_50108] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kIgnoreNotBefore {0x0001};

ignore the NotBefore field

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kIgnoreNotBefore
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50108
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50108@rel:R25-11#ade280f3
Content hash: ade280f3
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50108

Status: valid/unmigrated Version: rel:R25-11#ade280f3 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50108@rel:R25-11#ade280f3

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kIgnoreUnknownCriticalExtensions [SWS_CRYPT_50110] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kIgnoreUnknownCritical Extensions {0x0004};

ignore all unknown critical extensions

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kIgnoreUnknownCriticalExtensions
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50110
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50110@rel:R25-11#c4421df7
Content hash: c4421df7
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50110

Status: valid/unmigrated Version: rel:R25-11#c4421df7 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50110@rel:R25-11#c4421df7

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kOCSPSigning [SWS_CRYPT_50103] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kOCSPSigning {0x0400};

Signing OCSP responses.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kOCSPSigning
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50103
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50103@rel:R25-11#2a849fd6
Content hash: 2a849fd6
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50103

Status: valid/unmigrated Version: rel:R25-11#2a849fd6 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50103@rel:R25-11#2a849fd6

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kOcspOff [SWS_CRYPT_50114] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kOcspOff {0x0040};

do not require OCSP response during certificate validation. This is the default behavior.

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kOcspOff
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50114
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50114@rel:R25-11#5c099b00
Content hash: 5c099b00
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50114

Status: valid/unmigrated Version: rel:R25-11#5c099b00 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50114@rel:R25-11#5c099b00

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kOcspResponseCompleteChain [SWS_CRYPT_50112] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kOcspResponseCompleteChain {0x0010};

require OCSP response for all certificates of chain

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kOcspResponseCompleteChain
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50112
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50112@rel:R25-11#8adc93f1
Content hash: 8adc93f1
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50112

Status: valid/unmigrated Version: rel:R25-11#8adc93f1 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50112@rel:R25-11#8adc93f1

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kOcspResponseTargetOnly [SWS_CRYPT_50113] Upstream: RS_CRYPTO_02306

constexpr CertificateValidationOptions kOcspResponseTargetOnly {0x0020};

require OCSP response only for target certificate

Header-Datei	#include "ara/crypto/x509/certificate_validation_ctx.h"
Scope	namespace ara::crypto::x509
Symbol	kOcspResponseTargetOnly
Typ	CertificateValidationOptions

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50113
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50113@rel:R25-11#5b6cd1d9
Content hash: 5b6cd1d9
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50113

Status: valid/unmigrated Version: rel:R25-11#5b6cd1d9 Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50113@rel:R25-11#5b6cd1d9

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kServerAuth [SWS_CRYPT_50098] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kServerAuth {0x8000};

TLS WWW server authentication.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kServerAuth
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50098
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50098@rel:R25-11#41c8876b
Content hash: 41c8876b
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50098

Status: valid/unmigrated Version: rel:R25-11#41c8876b Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50098@rel:R25-11#41c8876b

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

variable kTimeStamping [SWS_CRYPT_50102] Upstream: RS_CRYPTO_02306

constexpr X509ExtendedKeyUsage kTimeStamping {0x0800};

Binding the hash of an object to a time.

Header-Datei	#include "ara/crypto/x509/certificate.h"
Scope	namespace ara::crypto::x509
Symbol	kTimeStamping
Typ	X509ExtendedKeyUsage

Request a governed re-review of this record. The record is not changed immediately.

Record: AUTOSAR/AP/record/SWS_CRYPT_50102
Status: valid/unmigrated
Version: AUTOSAR/AP/record/SWS_CRYPT_50102@rel:R25-11#3c301e8b
Content hash: 3c301e8b
Source: https://www.autosar.org/fileadmin/standards/R25-11/AP/AUTOSAR_AP_SWS_Cryptography.pdf#nameddest=SWS_CRYPT_50102

Status: valid/unmigrated Version: rel:R25-11#3c301e8b Versionshistorie & Revisions (1 transition)

Current State: valid/unmigrated
Reason: mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record
Campaign: 2026-08-13-status-backfill
Active Version: AUTOSAR/AP/record/SWS_CRYPT_50102@rel:R25-11#3c301e8b

Date	Actor	Transition	Reason / Rationale	Campaign
2026-08-13	tool	`none` → `valid/unmigrated`	mechanically backfilled by migriere_status_backfill.py -- no per-field curation history exists yet for this record	2026-08-13-status-backfill

namespace ara::crypto::x509

User GuideAI-GENERATED

Context

Usage Path

Error Scenarios

Topic map

Zertifikatsobjekte

Pfadvalidierung

Sperrstatus

Key Usage

Extended Key Usage

Class diagram

Detail view

Zertifikatsobjekte

Pfadvalidierung

Sperrstatus

Key Usage

Extended Key Usage

Enumerations

enumeration CertificateValidationStatus [SWS_CRYPT_40203] Upstream: RS_CRYPTO_02306

Werte

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

enumeration OcspResponseStatus [SWS_CRYPT_40001] Upstream: RS_CRYPTO_02306

Werte

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

Type aliases

type alias CertificateValidationOptions [SWS_CRYPT_50107] Upstream: RS_CRYPTO_02306

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

type alias X509ExtendedKeyUsage [SWS_CRYPT_50097] Upstream: RS_CRYPTO_02306

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

type alias X509KeyUsage [SWS_CRYPT_40101] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

Constants / variables

variable kClientAuth [SWS_CRYPT_50099] Upstream: RS_CRYPTO_02306

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kCodeSigning [SWS_CRYPT_50100] Upstream: RS_CRYPTO_02306

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrCrlSign [SWS_CRYPT_40157] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrDataEncipherment [SWS_CRYPT_40154] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrDecipherOnly [SWS_CRYPT_40159] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrDigitalSignature [SWS_CRYPT_40151] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrEncipherOnly [SWS_CRYPT_40158] Upstream: RS_CRYPTO_02306

Recorded Revisions (8):

Requirement Text as-of this release:

Curation Decisions:

Reachable Artifacts & Dependents:

variable kConstrKeyAgreement [SWS_CRYPT_40155] Upstream: RS_CRYPTO_02306