A system for a vehicle includes a controller configured to receive encrypted software updates including a first signature, decrypt the received software updates using a decryption key received with update instructions indicative of available software updates, and install the decrypted updates in response to detecting that the first signature matches a second signature generated by the controller using a signature verification key.