Vendor: IP Cores, Inc. Category: MACsec

IEEE 802.1ae (MACsec) Security Processor

Implementation of the new LAN security standard IEEE 802.1ae (MACsec) requires the NIST standard AES cipher in the GCM mode for e…

Contact Provider Request Datasheet

Overview

Implementation of the new LAN security standard IEEE 802.1ae (MACsec) requires the NIST standard AES cipher in the GCM mode for encryption and message authentication, as well as header parsing and formatting operations on the transmitted and received packets. The MSP1-PON core is tuned for Passive Optics Networks (PON) IEEE 802.1ae applications at the data rates of 10-100 Gbps.

The design is fully synchronous and available in both source and netlist form.

Key features

  • Small size combined with high performance:
    • Starting at less than 180K ASIC gates
    • 16 Gbps performance at 250 MHz with 180K gates
  • Self-contained, uses two external memories for key storage and statistic counters
  • Very low latency
    • 12 clocks input-to-output
  • Back-to-back packet processing
    • 64 bytes shortest packet
  • Supports encryption and decryption
  • Provides MACsec header parsing and modification:
    • Insertion and removal of the SecTag including the packet number (PN) and an optional SCI
    • RX packet validation
    • Insertion, validation and removal of the ICV
    • Replay protection based on the PN windowing
  • Includes key storage, lookup, and expansion
    • Key lookup is based on LLID (other option of packet classifications are available)
    • Ability to lookup the key using built-in associative memory (parameterized size, default 16 entries) or using the LLID directly as an index
  • Support for Galois Counter Mode Encryption and authentication (GCM), Galois Message Authentication (GMAC)
  • Flow-through design
  • Test bench provided
  • Sample software for 802.1X-2010 (a.k.a. 802.1af, KEYsec, 802.1x-REV) key agreement (MKA) is provided
  • Deliverables include test benches and optional NIST algorithm validation

Block Diagram

MSP1-PON block diagram

Applications

  • WLAN 802.1ae MACsec
  • RFC 4869

What’s Included?

  • HDL Source Licenses
    • Synthesizable Verilog RTL source code
    • Self-checking Test environment
    • Test-bench
    • Test-vectors
    • Expected results
    • User Documentation
    • Optional GCMVS NIST validation
  • Netlist Licenses
    • Post-synthesis EDIF
    • Testbench (self-checking)
    • vectors for testbenches
    • Expected results

Specifications

Identity

Part Number
MSP1-PON
Vendor
IP Cores, Inc.
Type
Silicon IP

Files

Product Sheet Download

Note: some files may require an NDA depending on provider policy.

Provider

IP Cores, Inc.
HQ: USA
IP Cores, Inc specializes on IP cores for semiconductors, primarily in the security and cryptography area with a sprinkle of DSP. Whether your needs are in 802.16e, P1619, 802.1AE, content protection, or FFT, our cryptographic and DSP cores usually are the smallest, fastest, and lowest-cost choices on the market.
Contact IP Cores, Inc.

Learn more about MACsec IP core

O-RAN Fronthaul Security using MACsec

With 5G being deployed for time-sensitive applications, security is becoming an important consideration. At the same time, Open Radio Access Networks (RAN) are gaining more interest from mobile carriers and governments. Yet, Open RAN networks have serious security challenges, especially in the RAN fronthaul where there are strict timing requirements. This paper proposes MACsec as an efficient data link layer security solution that can assist in meeting these challenges.

Frequently asked questions about MACsec IP cores

What is IEEE 802.1ae (MACsec) Security Processor?

IEEE 802.1ae (MACsec) Security Processor is a MACsec IP core from IP Cores, Inc. listed on Semi IP Hub.

How should engineers evaluate this MACsec?

Engineers should review the overview, key features, supported foundries and nodes, maturity, deliverables, and provider information before shortlisting this MACsec IP.

Can this semiconductor IP be compared with similar products?

Yes. Buyers can compare this product with similar semiconductor IP cores or IP families based on category, provider, process options, and structured technical specifications.

×
Semiconductor IP