CXL 2.0 Integrity and Data Encryption Security Module

Overview

The Compute Express Link (CXL) interface protocol enables low-latency data communication between system-on-chip (SoC) and general-purpose accelerators, memory expanders, and smart I/O devices requiring high performance, heterogeneous computing for data-intensive workloads.

The CXL 2.0 Integrity and Data Encryption (IDE) Security IP Module provides confidentiality, integrity and replay protection for FLITs in the case of CXL.cache and CXL.mem protocols and for Transaction Layer Packets (TLP) in the case of CXL.io. The Security Module is compliant with the IDE specification as defined for CXL 2.0 which also references PCI Express IDE specification for the CXL.io protocol. The CXL 2.0 IDE Security Module integrates seamlessly with the CXL controllers to accelerate SoC integration.

The CXL 2.0 IDE Security Module supports full-duplex for .cache/.mem and .io Rx and Tx directions. It provides efficient encryption/decryption and authentication of FLITs and TLPs, based on optimized low latency AES-GCM cryptographic cores, that are specially developed to meet an optimal area vs. performance implementation.

Key Features

  • Compliant with the CXL 2.0 IDE specifications for CXL.cache/mem
  • Compliant with PCI Express IDE specification for CXL.io
  • High-performance AES-GCM based packet encryption, decryption, authentication
  • Seamless integration with the Controller IP
    • FLIT interfacing for CXL.cache/mem
    • TLP packet-based interfacing for CXL.io
    • Sync/fail/status messaging
  • Supports CXL 2.0 data rates
  • Customer configurable
    • Aligns with the CXL 2.0 Controller configuration options
    • Data bus width: 512
    • Lanes: x8, x16
    • Support for all protocols CXL.cache/mem/io or only CXL.cache/mem
  • CXL.cache/mem
    • Containment & skid modes
    • Early MAC termination
  • Support for TDISP
  • Optimized for area, performance & latency
  • Multi-stream support
  • PCRC calculation & validation
  • Efficient key control & refresh
  • Bypass mode

Block Diagram

CXL 2.0 Integrity and Data Encryption Security Module Block Diagram

Technical Specifications

×
Semiconductor IP