Vendor: KiviCore Category: Symmetric Crypto

AES-GCM - Authenticated Encryption and Decryption

Overview

The KiviCrypt-AES-GCM IP core implements the Advanced Encryption Standard (AES) in Galois Counter Mode (GCM) as specified in the NIST SP800-38D. AES-GCM is a widely used cryptographic algorithm for Authenticated Encryption with Associated Data (AEAD) purposes, providing both data confidentiality and authenticity. The AES-GCM IP supports key sizes of 128, 192, and 256 bits, with a standard IV length of 96 bits. It can operate either with a pre-expanded key or with an internal key expansion mechanism, which is used by default. Its architecture is optimized for high-speed operation while maintaining a fully synchronous design, making it suitable for both FPGA and ASIC implementations.

Test and Verification

  • NIST test vectors for AES-GCM block cipher mode
  • Extended verification through simulation
  • FPGA integration and implementation tests
  • Unity tests for driver and whole IP Core

Key features

  • NIST SP 800-38D compliant
  • Key size: 128, 192, 256 bits
  • IV length: 96 bits
  • Works with pre-expanded key or internal key expansion (default)
  • Optional with DMA engine
  • Optional AMBA® AXI4-Lite
  • Fully synchronous design
  • Optional HAL and software driver (C-code, platform independent)
  • For any FPGA and ASIC

Applications

The AES-GCM IP core offers a versatile solution for authenticated encryption and decryption:

  • Secure communication: IPsec, TLS, MACsec
  • High-speed data paths: Protecting data streams between FPGA, CPU, and peripherals
  • Firmware updates: Ensuring confidentiality and integrity of update packages
  • Secure storage: Encrypting and authenticating data in flash or external memory
  • Internal bus protection: Securing data transfers within SoCs and FPGA designs

What’s Included?

  • SystemVerilog RTL source code or targeted FPGA netlist
  • Testbenches
  • Integration examples
  • Simulation and synthesis scripts
  • Optional Software HAL & driver source code
  • Optional Software example
  • Documentation

Files

Note: some files may require an NDA depending on provider policy.

Specifications

Identity

Part Number
KiviCrypt-AES-GCM
Vendor
KiviCore
Type
Silicon IP

Security

Crypto Algorithm
AES

Variants in this family

Part Number Short Description
KiviCrypt-AES-GCM-Fast AES-GCM Authenticated Encryption and Decryption
KiviCrypt-AES-GCM-HighSpeed AES-GCM - Authenticated Encryption and Decryption

Provider

KiviCore
HQ: Germany
KiviCore is an IP core and solution provider. Based on industry standards, KiviCore offers cyber secure and quantum safe IP cores and hardware/software solutions. Additionally, those can be tailored to specific needs of our customers. We place great emphasis on intensive customer support and guarantee customization to ensure that our solutions perfectly match your requirements. Target applications span a wide range, including Message Authentication Codes (MAC), IPsec and TLS/SSL protocol engines, secure boot engines, encrypted data storage, e-commerce platforms, financial transaction systems, blockchain, or pseudo random bit generation.

Learn more about Symmetric Crypto IP core

How to design secure SoCs, Part III: Secure Boot

As embedded systems become more powerful and interconnected, security at every stage of system operation becomes critical. In previous articles, we discussed secure SoC architectures and key management. This part of the series focuses on secure boot: a foundational mechanism to ensure that only trusted code is executed when the system powers on.

How to design secure SoCs, Part V: Data Protection and Encryption

In today’s connected world, where data is a crucial asset in SoCs, Part V of our series explores how to protect and encrypt data, whether at rest, in transit, or in use building on our earlier blog posts of the series: Essential security features for digital designers, key management, secure boot, and runtime integrity.

How to Design Secure SoCs: Essential Security Features for Digital Designers

In this comprehensive guide, we will explore the essential components of secure SoC design and explain how a robust security subsystem can protect sensitive assets throughout the chip’s lifecycle. Additionally, we will dive into how KiviCore’s specialized consultancy services can help ASIC and SoC design companies navigate the complex security landscape, ensuring the creation of secure and reliable chips that meet the rigorous demands of industries like IoT, data processing, consumer, telecommunication and beyond.

Frequently asked questions about Symmetric Cryptography IP cores

What is AES-GCM - Authenticated Encryption and Decryption?

AES-GCM - Authenticated Encryption and Decryption is a Symmetric Crypto IP core from KiviCore listed on Semi IP Hub.

How should engineers evaluate this Symmetric Crypto?

Engineers should review the overview, key features, supported foundries and nodes, maturity, deliverables, and provider information before shortlisting this Symmetric Crypto IP.

Can this semiconductor IP be compared with similar products?

Yes. Buyers can compare this product with similar semiconductor IP cores or IP families based on category, provider, process options, and structured technical specifications.

×
Semiconductor IP