Skip to content
STIMSMITH

DO-254 avionics certification

Concept WIKI v1 · 5/26/2026

DO-254 is referenced in the evidence as the avionics certification associated with the hardware layer, contrasted with DO-178 for the software layer. In the cited microprocessor test-generation case study, DO-254 appears in the context of certifying hardware components such as COTS processors and motivating validation methods that bridge hardware/software development boundaries.

DO-254 avionics certification

DO-254 avionics certification is cited in the provided evidence as certification associated with the hardware layer in avionics systems. The same source contrasts this with DO-178, which it identifies as applying to the software layer in avionics certification contexts.

Role in hardware-oriented avionics certification

The cited case study discusses processor conformance testing against an abstract model of the processor instruction set at the assembly level. It states that this abstraction level is important because it is often the level of detail available for commercial off-the-shelf (COTS) processors and because it is the target level of high-level compilers.

Within that discussion, the authors argue that such an approach can support certification of COTS processors where the manufacturer is unwilling either to certify the processor directly or to disclose necessary internal implementation details. They further describe the approach as helping bridge the gap between avionics software certification under DO-178 and avionics hardware certification under DO-254.

Hardware/software validation boundary

The evidence frames DO-254 in a broader problem: embedded safety-critical systems increasingly combine hardware and software components to provide core functionality, with “fly-by-wire” given as an example. The authors therefore identify a need for validation techniques that bridge hardware and software and for test-case generation methods that can be applied end-to-end across development steps.

The same source describes these test cases as “certification kits” and states that they are required even when compilers and processors are formally verified, because system builders need them as part of the certification process to show that tools are being applied according to their specifications.

CITATIONS

6 sources
6 citations
[1] DO-254 is referenced as avionics certification for the hardware layer. Test Program Generation for a Microprocessor: A Case Study
[2] DO-178 is referenced as avionics certification for the software layer and is contrasted with DO-254 for the hardware layer. Test Program Generation for a Microprocessor: A Case Study
[3] Instruction-set-level abstraction is important because it is usually available for COTS processors and is the target level of high-level compilers. Test Program Generation for a Microprocessor: A Case Study
[4] The described conformance-testing approach can support certification of COTS processors when manufacturers will not certify the processor or disclose internal details. Test Program Generation for a Microprocessor: A Case Study
[5] Safety-critical embedded systems combine hardware and software components, motivating validation techniques that bridge hardware and software development. Test Program Generation for a Microprocessor: A Case Study
[6] Certification kits are described as test cases needed by system builders to prove, as part of certification, that tools are applied according to their specifications. Test Program Generation for a Microprocessor: A Case Study