AES-GCM - Authenticated Encryption and Decryption
Overview
The KiviCrypt-AES-GCM IP core implements the Advanced Encryption Standard (AES) in Galois Counter Mode (GCM) as specified in the NIST SP800-38D. AES-GCM is a widely used cryptographic algorithm for Authenticated Encryption with Associated Data (AEAD) purposes, providing both data confidentiality and authenticity. The AES-GCM IP supports key sizes of 128, 192, and 256 bits, with a standard IV length of 96 bits. It can operate either with a pre-expanded key or with an internal key expansion mechanism, which is used by default. Its architecture is optimized for high-speed operation while maintaining a fully synchronous design, making it suitable for both FPGA and ASIC implementations.
Test and Verification
- NIST test vectors for AES-GCM block cipher mode
- Extended verification through simulation
- FPGA integration and implementation tests
- Unity tests for driver and whole IP Core
Key features
- NIST SP 800-38D compliant
- Key size: 128, 192, 256 bits
- IV length: 96 bits
- Works with pre-expanded key or internal key expansion (default)
- Optional with DMA engine
- Optional AMBA® AXI4-Lite
- Fully synchronous design
- Optional HAL and software driver (C-code, platform independent)
- For any FPGA and ASIC
Applications
The AES-GCM IP core offers a versatile solution for authenticated encryption and decryption:
- Secure communication: IPsec, TLS, MACsec
- High-speed data paths: Protecting data streams between FPGA, CPU, and peripherals
- Firmware updates: Ensuring confidentiality and integrity of update packages
- Secure storage: Encrypting and authenticating data in flash or external memory
- Internal bus protection: Securing data transfers within SoCs and FPGA designs
What’s Included?
- SystemVerilog RTL source code or targeted FPGA netlist
- Testbenches
- Integration examples
- Simulation and synthesis scripts
- Optional Software HAL & driver source code
- Optional Software example
- Documentation
Files
Note: some files may require an NDA depending on provider policy.
Specifications
Identity
Security
Variants in this family
| Part Number | Short Description |
|---|---|
| KiviCrypt-AES-GCM-Fast | AES-GCM Authenticated Encryption and Decryption |
| KiviCrypt-AES-GCM-HighSpeed | AES-GCM - Authenticated Encryption and Decryption |
Provider
Learn more about Symmetric Crypto IP core
Embedded Security explained: Post-Quantum Cryptography (PQC) for embedded Systems
How to design secure SoCs, Part V: Data Protection and Encryption
ML-KEM explained: Quantum-safe Key Exchange for secure embedded Hardware
How to Design Secure SoCs: Essential Security Features for Digital Designers
Rambus CryptoManager Root of Trust Solutions Tailor Security Capabilities to Specific Customer Needs with New Three-Tier Architecture
Frequently asked questions about Symmetric Cryptography IP cores
What is AES-GCM - Authenticated Encryption and Decryption?
AES-GCM - Authenticated Encryption and Decryption is a Symmetric Crypto IP core from KiviCore listed on Semi IP Hub.
How should engineers evaluate this Symmetric Crypto?
Engineers should review the overview, key features, supported foundries and nodes, maturity, deliverables, and provider information before shortlisting this Symmetric Crypto IP.
Can this semiconductor IP be compared with similar products?
Yes. Buyers can compare this product with similar semiconductor IP cores or IP families based on category, provider, process options, and structured technical specifications.