AES-GCM MACsec (IEEE 802.1AE) and FC-SP Cores

Overview

Implementation of the new LAN security standard 802.1ae (MACSec) requires the NIST standard AES cipher in the GCM mode for encryption and message authentication (AES-GCM). The GCM1 AES core is tuned for 802.1ae applications at the data rates of 1 Gbps and higher. The GCM2 family of cores is targeted towards high performance applications with high-end cores supporting data rates in excess of 100 Gbps and ability to parallelize to achieve even higher throughput. GCM3 is similar to GCM2, but supports AES key lengths up to 256 bits. For higher throughputs of 100 Gbps and above, use our GCM10 core family.

Cores contain the base AES core AES1 and are available for immediate licensing.

The design is fully synchronous and available in both source and netlist form.

Key Features

Small size: Starting at less than 13K ASIC gates, 1.5 Gbps performance at less than 20K gates
Scalability to throughputs of 128 bits per clock with the capability of parallel cores at throughputs of 100 Gbps and above
Supports Galois Counter Mode Encryption and authentication (GCM-AES a.k.a. AES-GCM)
Includes AES-GCM encryption, AES-GCM decryption, key expansion and data interface
Automatic generation of key context from key data and frame header
Flow-through design
Test bench provided
Optional NIST GCMVS algorithm validation
Deliverables include test benches

Block Diagram

Deliverables

HDL Source Licenses

Synthesizable Verilog RTL source code
Testbench (self-checking)
Vectors for testbenches
Expected results
Simulation script
Synthesis script
User Documentation

Netlist Licenses

Post-synthesis EDIF
Testbench (self-checking)
Vectors for testbenches
Expected results
Place & Route script
Simulation script

Technical Specifications

Availability

Now

Request Info