Vendor: Secure-IC Category: MACsec

1.6 Tbps MACsec Engine

The Securyzr™ MACsec Engine, also known as Media Access Control Security, implements the latest IEEE 802.1AE specification, provi…

Contact Provider Request Datasheet

Overview

The Securyzr™ MACsec Engine, also known as Media Access Control Security, implements the latest IEEE 802.1AE specification, providing connectionless data integrity, data origin authenticity and confidentiality on OSI layer 2.

The scalable architecture provides low-latency, line rate acceleration of frame encapsulation, encryption and replay protection. The multi-channel structure makes the engine extremely suitable for use in switches, enabling per-port security with a single IP instantiation. Integration options with either performance or area-optimized AES-GCM IP cores enables a high level of scalability enabling unrivalled trade-off possibilities between throughput, area and latency.

At its very core, the MACsec Engine is completely technology-agnostic and can be integrated in a wide range of FPGA and ASIC technologies. On FPGA, the engine can use vendor-specific optimizations to reach very high throughput goals.

Key features

  • Multi-channel support for link aggregation or FlexE                  Generic interface to TCAM
  • Scalable datapath width VLAN-in-the-clear mode
  • Compliant with IEEE 802.1AE-2018
    • Supports AES-GCM-128/256
    • Extended Packet Numbering (optional)
    • Confidentiality Offset (optional) Bypass mode
  • Classification based on MAC, SCI, VLAN ID Data interface: AMBA 4 AXI-Stream
  • Control interface: AMBA 4 APB
  • High throughput:
    • ASIC: 1.6Tbps
    • FPGA: 100 Gbps

Block Diagram

Securyzr™ MACsec Engine block diagram

Benefits

  • Low Latency: Optional cut-through design helps reaching timing targets for latency-critical applications
  • No software intervention: Can be implemented fully in hardware without any software intervention
  • Replay protection: Offloading replay protection and packet number management reduces the strain on the CPU even more
  • Line rate acceleration: Highly efficient cryptographic cores enable reaching line rate processing, even for 64 byte packets

Applications

  • The MACsec engine will bring the most efficient and flexible solution to your data processing needs, whatever technology and architecture you choose.
  • Environments in which the MACsec will prove an essential boost are:
    • Cloud Computing
    • Data Centers
    • Secure IP/MPLS
    • Secure IoT devices on LAN
    • In-vehicle communication with Automotive Ethernet

What’s Included?

  • Netlist or RTL
  • Scripts for synthesis
  • Self-checking TestBench based on FIPS vectors
  • Documentation

Specifications

Identity

Part Number
Securyzr™ MACsec Engine
Vendor
Secure-IC
Type
Silicon IP

Files

Product Sheet Download

Note: some files may require an NDA depending on provider policy.

Provider

Secure-IC
HQ: France
Contact Secure-IC

Learn more about MACsec IP core

Enhancing Ethernet Security with MACsec

Ethernet was originally designed for high-speed data transfer and interoperability between devices. However, traditional Ethernet does not provide built-in mechanisms for securing data traffic, such as encryption or authenticity protection. This is where MACsec comes into the picture.

O-RAN Fronthaul Security using MACsec

With 5G being deployed for time-sensitive applications, security is becoming an important consideration. At the same time, Open Radio Access Networks (RAN) are gaining more interest from mobile carriers and governments. Yet, Open RAN networks have serious security challenges, especially in the RAN fronthaul where there are strict timing requirements. This paper proposes MACsec as an efficient data link layer security solution that can assist in meeting these challenges.

Frequently asked questions about MACsec IP cores

What is 1.6 Tbps MACsec Engine?

1.6 Tbps MACsec Engine is a MACsec IP core from Secure-IC listed on Semi IP Hub.

How should engineers evaluate this MACsec?

Engineers should review the overview, key features, supported foundries and nodes, maturity, deliverables, and provider information before shortlisting this MACsec IP.

Can this semiconductor IP be compared with similar products?

Yes. Buyers can compare this product with similar semiconductor IP cores or IP families based on category, provider, process options, and structured technical specifications.

×
Semiconductor IP