MACsec 10G/25G

Overview

Comcores MACsec IP provides Ethernet Layer 2 Security for port authentication, data confidentiality and data integrity as standardized in IEEE 802.1AE. It protects components in Ethernet networks especially high-speed Ethernet used in cloud, data center, 5G, industrial and automotive. The MACsec IP is a fully compliant solution that provides line-rate encryption and supports VLAN-in-Clear.

The core is configurable to have multiple Security Entities, SecYs, in a single IP to support multiple Connectivity Associations per port for traffic differentiation, and is prepared for easy interfacing with Comcores or third-party MAC, PCS and TSN Switch IPs.

The MACsec Engine implements 64-bit AXI-S input and output data interfaces. It offers flexibility on integration with IEEE 1588 PTP Timestamping Unit (TSU). It additionally includes a software tool for MACsec Key Agreement Protocol IEEE 802.1X integration.

Key Features

  • Delivers Performance
    • Compliance with IEEE Std 802.1AE-2018
    • Line-rate traffic encryption and decryption
  • Highly Configurable
    • Supports 10G/25G data rates
    • Multiple Connectivity Associations (SecYs) with Traffic Mapping Rules
    • Optional PTP-TSU for IEEE 1588 PTP packets protection
  • Feature Rich
    • AES-GCM-128 and AES-GCM-256 Cipher Suites
    • VLAN-in-Clear
    • Confidentiality Offset
    • SW tool for MACsec Key Agreement Protocol IEEE 802.1X integration
    • Controlled/Uncontrolled Port
  • Silicon Agnostic
    • Designed in Verilog and targeting both ASICs and FPGAs

Block Diagram

MACsec 10G/25G Block Diagram

Deliverables

  • The IP Core can be delivered in Source code or Encrypted format. The following deliverables will be provided with the IP Core license:
    • Solid documentation, including User Manual and Release Note
    • Simulation Environment, including Simple Testbed, Test case, Test Script
    • Programming Register Specification
    • Timing Constraints in Synopsys SDC format
    • SW integration tool for IEEE 802.1X MACsec Key Agreement Protocol
    • Access to support system and direct support from Comcores Engineers
    • Synopsys SGDC Files
    • Synopsys Lint, CDC and Waivers

Technical Specifications

Availability
Available
TSMC
Silicon Proven: 7nm , 16nm , 28nm , 40nm G
×
Semiconductor IP