AES-GCM, Extreme-Speed IP Cores for AES256-GCM Authenticated Encryption

Overview

XIP1113E is a family of extreme-speed IP cores designed for AES256-GCM (Advanced Encryption Standard with a 256-bit key and Galois Counter Mode) authenticated encryption as defined in the NIST (National Institute of Standards and Technology) standards FIPS PUB 197 and Special Publication 800-38D.

AES-GCM is a widely used cryptographic algorithm for Authenticated Enryption with Associated Data (AEAD) purposes, as it provides both data confidentiality and authenticity.

XIP1113E has been designed for easy integration with FPGA- and ASIC-based designs in a vendor-agnostic design methodology, and the functionality of XIP1113E does not rely on any FPGA manufacturer-specific features.

XIP1113E has also been successfully validated in the CAVP (Cryptographic Algorithm Validation Program) by NIST (National Institute for Standards and Technology).

Key Features

High Security:
- XIP1113E implements AES256-GCM authenticated encryption as defined in the NIST standards FIPS PUB 197 and Special Publication 800-38D, and offers a security level of 256 bits.
Extremely High Throughput:
- XIP1113E offers extremely high throughput for a single stream of data as it processes one 32/64/128-byte block per clock cycle and has a high maximum clock frequency. The IP cores of XIP1113E achieve throughputs of hundreds of Gbps depending on the target FPGA.
Constant Latency:
- XIP1113E offers constant latency for every data block and has a deterministic latency that facilitates an easy integration to various systems.
Secure Design:
- XIP1113E executes encryption and decryption in constant time (that is, independent of the value of the key), and therefore provides full protection against timing side-channel attacks.

Benefits

Fully digital design
Portable to any ASIC or FPGA technology
Fully standard compliant
Easy to integrate
Several bus interfaces available
IP core designed in-house at Xiphera
Technical support by the original designers and cryptographic experts
CAVP validated

Block Diagram

Applications

Authenticated Encryption with Associate Data (AEAD) applications, including MACsec, IPsec, and TLS 1.3

Deliverables

XIP1113E can be shipped in a number of formats, including netlist, source code, or encrypted source code. Additionally, synthesis scripts, a comprehensive testbench, and a detailed datasheet including an integration guide are included.

Technical Specifications

Foundry, Node

Any

Maturity

Hardware Tested

Availability

Immediate

Request Info