SafeXcel™ IP-97 Look-Aside Security Packet Engine by AuthenTec

Product Description

AuthenTec SafeXcel-IP-97 Look-Aside Packet Engine Family

The SafeXcel-IP-97 is AuthenTec’s next gen Packet Engine offering efficient Look Aside interface functionality. The scalable EIP-97 Packet Engine family offers performance grades from 1Gbps to 40Gbps by embedding one or more (up to eight) EIP-96 Packet Transform Engines and extending it with an very efficient bus interface. Extended with the QuickSec IPsec or Matrix SSL stack makes this the most ideal look aside IPsec and SSL solution.

The SafeXcel-IP-97 is a Look-aside Cryptographic Accelerator designed to partially or fully offload the very CPU intensive IPsec, MACsec, SRTP, SSL, TLS and DTLS protocol operations. The SafeXcelIP-97’s unique instruction set based control interface makes the engine suited for communications- and other application processors that require maximum data plane offload to dedicated security hardware. In addition, the SafeXcel-IP-97 can be used in SoC architectures to accelerate various cryptographic operations and offload them from the CPU.

Packet Processing

The SafeXcel-IP-97 implements data manipulation instructions, including data insertion, removal, replacement, and retrieval, along with crypto, hash, and checksum operations. It performs such operations on incoming data, as instructed by an external Packet Classifier or Flow Processor. The SafeXcel-IP-97 supports widely used mature algorithms 3DES, AES, ARC4, SHA-1, SHA-2, MD5 and new high-speed combined algorithms AES-CCM, GCM & GMAC. A set of instructions (token), is used by the SafeXcel-IP-97 to transform each individual packet. To perform a full packet transform for security protocols, an extensive set of token templates is available for all protocols supported by the SafeXcel-IP-97. The flexibility of the tokens allow in system or in field upgradability of your Security Solutions or SoC.

A multi-stage pipeline that allows pre-fetching of token, context and source packet data and post-writing of context update and result packet data allows the engine to achieve superior performance across all packet sizes.

Integrated Software Support for Security-enabled SoCs

Integrated software support is increasingly becoming a critical success factor for complex SoCs. SoC vendors and their partners need to be able to provide complete systems to the OEMs, consisting of integrated hardware and software. The SafeXcel IP In-line Security Engine has been designed to work seamlessly with AuthenTec's leading QuickSec IPsec Toolkit. The QuickSec IPsec Toolkit's advanced architecture allows data plane processing to be offloaded to an SoC's In-line Security Engine, thereby maximizing application performance. The toolkit also enforces policies upon the Packet Classifier / Flow Processor as part of its control plane functionality. This integration of QuickSec Unified on your SoC will create an excellent value proposition to your customers.

SafeXcel™ IP-97 Look-Aside Security Packet Engine

Market Segment(s)

• Embedded
• Enterprise

Target Platform(s)

• Android
• Linux
• Other OS

Companion Processor(s)

• Biometrics
• Communication
• Multimedia

ARM Processor(s)

• ARM920T
• ARM922T
• ARM926EJ-S
• ARM940T
• ARM946E-S
• ARM966E-S
• ARM968E-S
• ARM1020E
• ARM1022E
• ARM1026EJ-S
• ARM1136J-S
• ARM1136JF-S
• ARM1156T2(F)-S
• ARM1176JZ(F)-S
• ARM11 MPCore
• Cortex-A15
• Cortex-A5
• Cortex-A8
• Cortex-A9
• ARMv5
• ARMv6
• ARMv7
• StrongARM
• XScale

System IP

• Interconnect Fabric