Technical overview

How Amazla controls Tesla from your watch

Amazla connects to your Tesla over Bluetooth (BLE), establishes a secure VCSEC session, and sends authenticated, encrypted commands directly from your watch.

4 steps

What happens from the moment you tap on the watch to the action in your car.

B

1. Connect via BLE

The watch scans for your Tesla over BLE, lets you select a vehicle, and can remember the MAC for faster reconnects.

V

2. Establish VCSEC session

A secure session is negotiated using ECDH (key exchange) and SHA-1 derived session keys, with epoch/counters tracked for replay protection.

S

3. Send authenticated & encrypted commands

Commands like lock/unlock, frunk/trunk, charge port, and HVAC are packaged as VCSEC actions, authenticated (HMAC) and encrypted (AES-GCM) on the watch.

U

4. Update the watch UI

After sending actions, the watch reads the updated vehicle status (battery, temperatures, doors, etc.) and refreshes what you see instantly.

What’s important (technically)

To keep the watch fast, crypto logic is localized and uses pre-generated/session-key pools for future sessions. If the pool is running low, it may request replenishment via the companion/phone app in the background.

Key point: daily commands run on the watch (BLE + VCSEC) — no server control in the middle.

Ready to control your Tesla?

Install Amazla and pair your Tesla once. After that, most actions are available from your watch while you’re within BLE range.

Note: available actions depend on the Tesla model and on Bluetooth connection state.