Vendor: CoMira Solutions Inc. Category: MACsec

Media Access Control Security (MACSec)

Media Access Control Security (MACSec) is an IEEE standards-based protocol for securing communication among the trusted component…

Overview

Media Access Control Security (MACSec) is an IEEE standards-based protocol for securing communication among the trusted components of an 802.1 LAN. MACSec provides protection against disruption of service, theft, and misuse of transmitted information (including network configuration information) by securing messages on the physical media.

The MACSec IP implements the 802.1AE-2006 MACSec standard, as well as the 802.1AEbn-2011, 802.1AEbw-2013 amendments with additional support for the 802.1AEcg draft amendment. Using an inline time-division multiplexed cut-through architecture with a backpressure scheme similar to the UMAC, the multichannel CoMira MACSec IP is able to operate at the same core clock as the UMAC IP that is independent of the link speed and data flow.
 

Key features

  • Up to four ports of concurrent traffic with an aggregate bandwidth of 100G are supported by one core (1x100G, 2x50G, 2x40G, 4x25G, 4x10G, 4x1G, 1x50G+2x25G)
  • Line rate operation
  • Flexible control/non-control port filtering
  • Configurable number of Secure Channels (SCs) and Security Associations (SAs) per physical port
  • Memory-based statistics counter implementation for area/gate savings
  • Support for custom MACSec Ethertypes
  • FIPS compliant GCM-AES-128, GCM-AES-256, GCM-AES-128-XPN, GCM-AES-256-XPN
  • FCS regeneration on processed frames
  • Configurable ability to select whether to strip SecTag, ICV, or both post-processing on Rx
  • Support for a configurable number of VLAN tags preceding the SecTag in the MAC header

Block Diagram

Specifications

Identity

Part Number
Media Access Control Security (MACSec)
Vendor
CoMira Solutions Inc.
Type
Silicon IP

Files

Note: some files may require an NDA depending on provider policy.

Provider

Learn more about MACsec IP core

Enhancing Ethernet Security with MACsec

Ethernet was originally designed for high-speed data transfer and interoperability between devices. However, traditional Ethernet does not provide built-in mechanisms for securing data traffic, such as encryption or authenticity protection. This is where MACsec comes into the picture.

O-RAN Fronthaul Security using MACsec

With 5G being deployed for time-sensitive applications, security is becoming an important consideration. At the same time, Open Radio Access Networks (RAN) are gaining more interest from mobile carriers and governments. Yet, Open RAN networks have serious security challenges, especially in the RAN fronthaul where there are strict timing requirements. This paper proposes MACsec as an efficient data link layer security solution that can assist in meeting these challenges.

Frequently asked questions about MACsec IP cores

What is Media Access Control Security (MACSec)?

Media Access Control Security (MACSec) is a MACsec IP core from CoMira Solutions Inc. listed on Semi IP Hub.

How should engineers evaluate this MACsec?

Engineers should review the overview, key features, supported foundries and nodes, maturity, deliverables, and provider information before shortlisting this MACsec IP.

Can this semiconductor IP be compared with similar products?

Yes. Buyers can compare this product with similar semiconductor IP cores or IP families based on category, provider, process options, and structured technical specifications.

×
Semiconductor IP