AES-GMAC IP core

The KiviHash-AES-GMAC IP core generates and verifies authentication tags using Galois Message Authentication Code (GMAC), as specified in NIST SP 800-38D. GMAC is derived from AES-GCM and provides data integrity and authenticity without encrypting the data. It is suited to systems that need to authenticate messages or data streams while keeping their contents in plaintext.

The core supports AES keys of 128, 192 and 256 bits, a 96-bit IV, and tag lengths from 32 to 128 bits. It accepts either a pre-expanded key or performs key expansion internally by default. Its fully synchronous architecture is designed for integration into FPGA and ASIC systems.

Test and verification

• NIST ACVP test vectors for AES-GCM block cipher mode
• Extended verification through simulation
• FPGA integration and implementation tests
• Unity tests for driver and whole IP Core

• NIST SP 800-38D compliant
• Key size: 128, 192, 256 bits
• IV length: 96 bits
• Tag lengths: 128, 120, 112, 104, 96, 64, 32 bits
• GMAC generate and verify
• Works with pre-expanded key or internal key expansion (default)
• Fast design
• AXI Stream data I/O
• Optional with DMA engine
• Optional AMBA® AXI4-Lite
• Fully synchronous design
• Area and speed optimized for LUT4 FPGAs
• No internal block RAM needed
• Optional HAL and software driver (C-code, platform independent)
• Support for Linux, RTOS and bare-metal software
• For any FPGA and ASIC

Cost-efficient licensing model

Low license fees based on one-time fee and free evaluation licenses make IP cores accessible even for projects with limited budgets.

Fast availability and direct support

Evaluation packages and documentation are available via download, with rapid responsive web support to keep your project moving.

Easy integration

AXI4-Lite interface, platform-agnostic C source code HAL, API and software driver and clear documentation enable fast integration into hardware–software co-design flows.

European technology

Developed in Germany, with predictable availability giving design teams transparency, control, and long-term planning security.

Experienced IP core providers

KiviCore’s employees bring more than 20 years of experience in IP core design and licensing of IP cores.

KiviHash-AES-GMAC can authenticate data where encryption is unnecessary or handled separately:

• Communication protocols: Authenticate packets or messages sent over a data link.
• Firmware and configuration data: Verify integrity and authenticity before processing.
• FPGA and SoC data paths: Detect unauthorized changes to data transferred between system components.

• SystemVerilog RTL source code or targeted FPGA netlis
• Testbenches
• Integration examples
• Simulation and synthesis scripts
• Optional Software HAL & driver source code
• Optional Software example for Linux and bare-metal
• Documentation