Railway ERTMS/ETCS & railway signaling
Problem
ERTMS/ETCS Level 2 relies on GSM-R (obsolete 2030) and FRMCS (5G) with EuroRadio protocol based on 3DES MAC — vulnerable and non-post-quantum. Metro CBTC systems often use classical TLS 1.2. An attacker able to forge signaling messages or a Movement Authority could cause an accident. SIL-4 functional safety does not yet integrate PQC.
CryptOps Solution
An AllEyes Resilient in RBC (Radio Block Centre), trackside systems and onboard: the hardware crypto engine encrypts all EuroRadio / FRMCS comms with ML-KEM + ML-DSA-87, FPGA runs SIL-4 real-time EuroRadio/SUBSET-037 stack, CPU orchestrates Movement Authorities and interlockings, GPU handles AI traffic supervision and predictive track/rolling-stock maintenance.
Deployment architecture
Key metrics
ROI analysis
| Item | Before | With CryptOps | Impact |
|---|---|---|---|
| EuroRadio 3DES | Vulnerable 3DES MAC | Hybrid ML-DSA-87 | Future-proof |
| GSM-R to FRMCS transition | Multi-vendor migration | Single appliance | -30% CAPEX |
| Track maintenance | Periodic inspections | AI-based predictive | -40% incidents |
Applicable regulation
European control-command-signaling, PQC target in baseline 4+ (2028+).
Functional safety applicable to critical rail systems.
GSM-R successor based on 5G — security specs in progress (MCX, MCData, MCVideo).
Target clients
Data processing on the same appliance
Beyond post-quantum encryption, every AllEyes Resilient appliance hosts your data-processing workloads on its FPGA, CPU and GPU resources — all isolated from the certified crypto core.
Secure your infrastructure today
Our team will guide you through the deployment tailored to your use case.