SafeXcel™ IP-62 MACsec/IPsec GCM Packet Engine by AuthenTec

Product Description

SafeXcel-IP-62
Ultra High Performance Inline AES-GCM Packet Engine Family

The SafeXcel-IP-62 extends the SafeXcel-IP-60 MACsec only engine with IPsec and FC-SP functionality. Using AES-GCM, this engine is capable at offloading MACsec, IPsec and FC-SP transformations including header and trailer processing at extreme data rates. At transformation rates at 500MHz of 80Gbps for all packet sizes, including 64Byte packets the SafeXcel-IP-62 is the fastest Packet Engine available for you multi CPU Soc designs. Like the SafeXcel-IP-60, and the SafeXcel-IP-96, the SafeXcel-IP -62 also relies on classification by the embedded host CPUs. Embedding both an SafeXcel-IP-62 and a SafeXcel-IP-96 in one design offers a combination of support of widely used algorithms and extremely fast processing for systems with multiple 10Gbps ports.

High-speed MACsec & IPSec Frame/Packet Engine
• Fast and easy to integrate into SoCs
• Flexible layered design, modular architecture
• World-class technical support
• Supported by QuickSec for MACsec
• Performance grades from 10Gbps to 40Gbps to 100Gbps
• Supports 40, 45, 65, 90, 130nm CMOS nodes

Features
• Allows direct connection to Ethernet MAC; no external host interaction required to determine key material, etc.
• Performing IEEE 802.1ae MACsec packet transforms including AES-GCM encryption and:
 - SecTAG insertion and removal
 - Sequence number checking
 - Programmable Confidentiality Offset
• Non MACsec bulk AES-CTR or AES-GCM capabilities
• Supports 128, 192 & 256 bit AES keys
• Decoupled control and data plane operation
• Low latency, cut through processing, processing of frame can start before complete frame is received
• The pipe-lined architecture allows the core to accept data back-to-back
• Supports multiple ports, SecY’s and Security Channels simultaneously
• Built-in MACsec metering
• Built-in functionality for deciding, and acting on, performing the forwarding, drop, encrypt or decrypt operation, at full line rates
• Classification capability required for MACsec
• Capable of servicing a full duplex 10 Gbps Ethernet connection at a clock speed of 250MHz, even for the smallest frame sizes
• Multiple speed grades available
• No external SDRAM or CAM required

SafeXcel™ IP-62 MACsec/IPsec GCM Packet Engine

Market Segment(s)

• General Purpose Products/Services

Target Platform(s)

• Linux
• Other OS

Companion Processor(s)

• Communication

ARM Processor(s)

• ARM1136J-S
• ARM1136JF-S
• ARM1156T2(F)-S
• ARM1176JZ(F)-S
• ARM11 MPCore
• Cortex-A15
• Cortex-A5
• Cortex-A8
• Cortex-A9
• ARMv6
• ARMv7

Physical IP

• SRAM Memory Compilers
• Standard Cell Libraries