10G-100G MACsec Security Module

Data security between Ethernet connected devices is expanding due to multiple factors: exponential growth of data containing sensitive and private information, new laws and regulations, and also technology advances in markets such as cloud computing, mobile/5G and automotive, to support faster, more scalable and ultimately more efficient networking architectures.

Media Access Control Security (MACsec) is the foundational Ethernet (Layer2) security protocol to protect network communication against DoS attacks, eavesdropping and man-in-the-middle attacks by enabling a bi-directional secure link.

The MACsec Security Modules provide confidentiality, integrity, origin authentication and replay protection based on scalable AES-GCM cryptography enabling end-to-end security for Ethernet traffic. The MACsec Security Modules are complete inline full-duplex solutions that seamlessly integrate with the Ethernet MAC & PCS IP, supporting scalable data rates with low latency.

By adding the MACsec Security Modules to the Ethernet IP Solutions, designers of networking SoCs can protect networking traffic, enabling end-to-end security of data in motion between Ethernet-connected devices.

• Standards compliant (IEEE 802.1AE)
• Solution standalone or integrated with Ethernet interface controllers
• Per frame security processing including encapsulation/decapsulation and frame validation
• Scalable throughput to 100+ Gbps based on pipelined AES-GCM cryptography with optimized latency
• Jumbo frames support
• SecTag insertion & removal
• Configurable number of Secure Channels and Associations
• Programmable confidentiality offset
• VLAN tag in the clear support