100G / 200G / 400G / 800G / 1.6T MACsec
Ethernet Layer 2 Security solution for High speed applications The MACsec IP provides Ethernet Layer 2 Security for port authenti…
Overview
Ethernet Layer 2 Security solution for High speed applications
The MACsec IP provides Ethernet Layer 2 Security for port authentication, data confidentiality and data integrity as standardized in IEEE 802.1AE. It protects components in Ethernet networks especially very high-speed Ethernet used in cloud, data center, and backhaul networks. The MACsec IP is a fully compliant solution that provides line-rate encryption and supports VLAN-in-Clear.
The core is configurable to have multiple Security Entities, SecYs, in a single IP to support multiple Connectivity Associations per port for traffic differentiation, and is prepared for easy interfacing with Comcores or third-party MAC, PCS and TSN Switch IPs. It implements a 128-bit MACsec data processing, where multiple 128-bit pipelines can be configured according to the target speed and input/output data interfaces. The IP can be configured for its placement above or below the MAC. It additionally includes a software tool for MACsec Key Agreement Protocol IEEE 802.1X integration.
Key features
Delivers Performance
- Compliance with IEEE Std 802.1AE-2018
- Line-rate traffic encryption and decryption
Highly Configurable
- Supports 100G / 200G / 400G / 800G / 1.6T data rates
- Multiple Connectivity Associations (SecYs) with Traffic Mapping Rules
- Multiple integration contexts for placement above or below the MAC
Feature Rich
- AES-GCM-128 and AES-GCM-256 Cipher Suites with eXtended Packet Number (XPN)
- VLAN-in-Clear
- Confidentiality Offset
- Software tool for MACsec Key Agreement Protocol IEEE 802.1X integration
Silicon Agnostic
- Designed in Verilog and targeting both ASICs and FPGAs
Block Diagram
What’s Included?
The IP Core can be delivered in Source code or Encrypted format. The following deliverables will be provided with the IP Core license:
- Solid documentation, including User Manual and Release Note
- Simulation Environment, including Simple Testbed, Test case and Test Script
- Programming Register Specification
- Timing Constraints in Synopsys SDC format
- Access to support system and direct support from Comcores Engineers
- Synopsys SGDC Files (optional)
- Synopsys Lint, CDC and Waivers (optional)
Files
Note: some files may require an NDA depending on provider policy.
Specifications
Identity
Provider
Learn more about MACsec IP core
Securing The Road Ahead: MACsec Compliant For Automotive Use
Unveiling Ultra-Compact MACsec IP Core with optimized Flexible Crypto Block for 5X Size Reduction and Unmatched Efficiency from Comcores
How the MACsec Protocol Keeps Ethernet Networks Secure
O-RAN Fronthaul Security using MACsec
MACsec for Deterministic Ethernet applications
Frequently asked questions about MACsec IP cores
What is 100G / 200G / 400G / 800G / 1.6T MACsec?
100G / 200G / 400G / 800G / 1.6T MACsec is a MACsec IP core from Comcores listed on Semi IP Hub.
How should engineers evaluate this MACsec?
Engineers should review the overview, key features, supported foundries and nodes, maturity, deliverables, and provider information before shortlisting this MACsec IP.
Can this semiconductor IP be compared with similar products?
Yes. Buyers can compare this product with similar semiconductor IP cores or IP families based on category, provider, process options, and structured technical specifications.