SafeXcel™ IP-197 Inline Security Packet Engine by AuthenTec

Product Description

AuthenTec SafeXcel-IP-197 In Line Packet Engine Family with Classifiers
The SafeXcel-IP-197 is AuthenTec’s next generation Packet Engine combining In-line with Look Aside interface functionality. The scalable EIP-197 Packet Engine family offers performance grades from 1Gbps to 40Gbps by embedding one or more (up to eight) EIP-97 Packet Engines and extending it with packet classification engines. Together with the QuickSec IPsec stack, this solution is the most ideal in-line IPsec fast path and look aside SSL implementation.
The EIP-197 provides full data plane processing up to the IP/IPsec layer. This capability is enabled by the engines unique Packet Classifiers and Flow Processors and is not offered by other security vendors. While traditional offerings need to rely on external classification, the SafeXcel-IP-197 includes micro-programmed hardware assist for this time-consuming task. The SafeXcel-IP-197 autonomously inspects packets, determines required processing and instructs the Engine which transformation to execute.
The SafeXcel-IP-197 Packet Engine with classifiers is available with 0, 1 or 2 in line interfaces, offering a choice of pure Look-Aside (Connected as a security coprocessor to a SoC bus), a Bump-in-the-Stack (connected in between a SoC bus and an Ethernet MAC) or a Bump-in-the-Wire (connected in between two Ethernet MACs) system.
 

In-line Packet Processing
The In-line Packet Engine implements various data manipulation functions, including data insertion, data removal, data replacement, data retrieval, and crypto, hash, and checksum operations. The In-line Packet Engine performs such operations on incoming data, as instructed by the Packet Classifier / Flow Processor.
The In-line Packet Engine supports well known algorithms DES, 3DES, AES, SHA-1, SHA-2, CCM, GCM and protocols IPsec, SRTP, MACsec, and SSL/TLS/DTLS. In order to achieve Gigabit+ rate throughputs, the In-line Packet Engine uses a three-stage processing pipeline.
 

Integrated Software Support for Security-enabled SoCs
Integrated software support is increasingly becoming a critical success factor for complex SoCs. SoC vendors and their partners need to be able to provide complete systems to the OEMs, consisting of integrated hardware and software. The SafeXcel IP In-line Security Engine has been designed to work seamlessly with AuthenTec's leading QuickSec IPsec Toolkit. The QuickSec IPsec Toolkit's advanced architecture allows data plane processing to be offloaded to an SoC's In-line Security Engine, thereby maximizing application performance. The toolkit also enforces policies upon the Packet Classifier / Flow Processor as part of its control plane functionality. This integration of QuickSec Unified on your SoC will create an excellent value proposition to your customers.

SafeXcel™ IP-197 Inline Security Packet Engine

Market Segment(s)

• Embedded
• Enterprise
• Mobile
• Mobile Computing

Target Platform(s)

• Linux
• Other OS

Companion Processor(s)

• Biometrics
• Communication
• Multimedia

ARM Processor(s)

• ARM1136J-S
• ARM1136JF-S
• ARM1156T2(F)-S
• ARM11 MPCore
• Cortex-A15
• Cortex-A5
• Cortex-A8
• Cortex-A9
• ARMv6
• ARMv7

System IP

• Interconnect Fabric