The TLS handshake hardware accelerator is a secure connection engine that can be used to offload the compute intensive Public Key operations (Diffie-Helmann, Signature Generation and Verification).
It combines a load dispatcher and a configurable amount of instances of the Public Key Crypto Engine (SCZ_IP_BA414EP) benefiting from all features supported (i.e. RSA/DH/DHE and ECDSA/ECDH/ECDHE/X.25519/X.448 and more). The efficient dispatching to several dozens of SCZ_IP_BA414EP instances helps reaching maximum system performance.
This IP is made of a core and optional modules to connect the core to standard interfaces (PCIe, AXI_DMA…). In addition our drivers have an asynchronous API (or non-blocking API) which are integrated in OpenSSL Async.
Implementation aspects
The TLS handshake hardware accelerator IP core is easily portable to ASIC and FPGA. It supports a wide range of applications on various technologies. The unique architecture offers a high level of scalability, enabling a trade-off between throughput, area and latency. For more detailed information about our Public Key Crypto Engine (SCZ_IP_BA414EP), please see our dedicated product sheet.
Secure-IC's Securyzr(TM) TLS Handshake Hardware Accelerator
Overview
Key Features
- RSA, ECC and more
- RSA/DH/DHE
- ECDSA/ECDH/ECDHE
- X.25519/X.448
- mbedTLS integration
- SM2
- > 1 GHz in 16nm
- 400-500 MHz on mid-range/high-end FPGA
- Very high performance on off-the-shelf FPGA
Benefits
- Offload the compute intensive Public Key operations (Diffie-Helmann, Signature Generation and Verification)
Block Diagram
Applications
- Cloud computing
- Data center
- HSM
- Firewall
- IKE-TLS/SSL connection engine
- Blockchain transactions
Deliverables
- Netlist or RTL
- SW drivers (Linux)
- Scripts for synthesis & STA
- Self-checking RTL test-bench based on referenced vectors
- Documentation
Technical Specifications
Availability
Now
Related IPs
- Secure-IC's Securyzr(TM) Blockchain Hardware Accelerator
- Secure-IC's Securyzr™ Tunable Hash (SHA1-SHA2) Hardware accelerator
- Secure-IC's Securyzr™ Tunable Hash (SHA3) Hardware accelerator
- Secure-IC's Securyzr™ Tunable Hash (SM3) Hardware accelerator
- Secure-IC's Securyzr™ Tunable SM4 Hardware accelerator with SCA protections
- Secure-IC's Securyzr™ Hardware Security Module (HSM) for Automotive