Vendor: IP Cores, Inc. Category: MACsec

IEEE 802.1ae (MACsec) Security Processor

Implementation of the new LAN security standard IEEE 802.1ae (MACsec) requires the NIST standard AES cipher in the GCM mode for e…

Overview

Implementation of the new LAN security standard IEEE 802.1ae (MACsec) requires the NIST standard AES cipher in the GCM mode for encryption and message authentication, as well as header parsing and formatting operations on the transmitted and received packets. The MSP1-PON core is tuned for Passive Optics Networks (PON) IEEE 802.1ae applications at the data rates of 10-100 Gbps.

The design is fully synchronous and available in both source and netlist form.

Key features

  • Small size combined with high performance:
    • Starting at less than 180K ASIC gates
    • 16 Gbps performance at 250 MHz with 180K gates
  • Self-contained, uses two external memories for key storage and statistic counters
  • Very low latency
    • 12 clocks input-to-output
  • Back-to-back packet processing
    • 64 bytes shortest packet
  • Supports encryption and decryption
  • Provides MACsec header parsing and modification:
    • Insertion and removal of the SecTag including the packet number (PN) and an optional SCI
    • RX packet validation
    • Insertion, validation and removal of the ICV
    • Replay protection based on the PN windowing
  • Includes key storage, lookup, and expansion
    • Key lookup is based on LLID (other option of packet classifications are available)
    • Ability to lookup the key using built-in associative memory (parameterized size, default 16 entries) or using the LLID directly as an index
  • Support for Galois Counter Mode Encryption and authentication (GCM), Galois Message Authentication (GMAC)
  • Flow-through design
  • Test bench provided
  • Sample software for 802.1X-2010 (a.k.a. 802.1af, KEYsec, 802.1x-REV) key agreement (MKA) is provided
  • Deliverables include test benches and optional NIST algorithm validation

Block Diagram

MSP1-PON block diagram

Applications

  • WLAN 802.1ae MACsec
  • RFC 4869

What’s Included?

  • HDL Source Licenses
    • Synthesizable Verilog RTL source code
    • Self-checking Test environment
    • Test-bench
    • Test-vectors
    • Expected results
    • User Documentation
    • Optional GCMVS NIST validation
  • Netlist Licenses
    • Post-synthesis EDIF
    • Testbench (self-checking)
    • vectors for testbenches
    • Expected results

Specifications

Identity

Part Number
MSP1-PON
Vendor
IP Cores, Inc.
Type
Silicon IP

Files

Product Sheet Download

Note: some files may require an NDA depending on provider policy.

Provider

IP Cores, Inc.
HQ: USA

Learn more about MACsec IP core

Frequently asked questions about MACsec IP cores

What is IEEE 802.1ae (MACsec) Security Processor?

IEEE 802.1ae (MACsec) Security Processor is a MACsec IP core from IP Cores, Inc. listed on Semi IP Hub.

How should engineers evaluate this MACsec?

Engineers should review the overview, key features, supported foundries and nodes, maturity, deliverables, and provider information before shortlisting this MACsec IP.

Can this semiconductor IP be compared with similar products?

Yes. Buyers can compare this product with similar semiconductor IP cores or IP families based on category, provider, process options, and structured technical specifications.

×
Semiconductor IP