Macsec IP

The MACsec IP provides Ethernet Layer 2 Security for port authentication, data confidentiality and data integrity as standardized in IEEE 802.1AE.
It protects components in Ethernet networks especially very high-speed Ethernet used in cloud, data center, and backhaul networks.
The MACsec IP is a fully compliant solution that provides line-rate encryption and supports VLAN-in-Clear.

The MACsec IP provides Ethernet Layer 2 Security for port authentication, data confidentiality and data integrity as standardized in IEEE 802.1AE.
It protects components in Ethernet networks especially very low-speed Ethernet used in automotive, industrial, and consumer applications.
The MACsec IP is a fully compliant solution that provides line-rate encryption and is optimized for the smallest area size.

The MSP7 implementation fully supports the IEEE 802.1ae (MACsec) algorithm for 128-bit bit keys, including AES support in Galois Counter Mode (GCM) per NIST publication SP800-38D.
The core is designed for flow-through operation. MSP7 supports encryption and decryption modes (encrypt-only and decrypt-only options are available.

The MACsec Intel® FPGA IP core implements the IEEE Media Access Control Security standard as defined in 802.1AE (2018) as fully configurable soft IP
MACsec provides data confidentiality and integrity for the Ethernet protocol and is commonly used to secure network traffic in 5G systems, between the cloud and data center, and between IoT devices.

Provides Ethernet fully compliant to 802.3-2018 supporting all media independent interfaces for (1/10/25/40/50/100/200/400/800 G)
Provides MacSec as per IEEE standard 802.1AE-2018 specification
- Supports controlled and uncontrolled ports
- Encodes and decodes MacSeC PDUs
- Protects and validates macSec Pdus using AES-GCM-128 Cipher suites
- Cryptographic protection
- Modification and Addition of MSDU
- Uses configurable secure association key for encryption and authentication
- Supports Vlan and jumbo frames
- Supports Replay protection and ICV Works in tandem with gPTP (IEEE 802.1AS)/ PTP (IEEE 1588)
Supports controlled and uncontrolled ports
Encodes and decodes MacSeC PDUs

MACsec solution for integration between MAC and PCS side supporting 1GbE to 50GbE rates with optional TSN support (including IEEE803.2br).
For MACsec function integrates the MACsec-IP-161 with all IEEE MACsec standards supported. Optional Cisco ClearTags.
Supplied with the Driver Development Kit to accelerate time to market. Rambus offers MACsec Toolkit for IEEE 802.1X key management

Standards compliant (IEEE 802.1AE)
Solution standalone or integrated with Ethernet interface controllers
Per frame security processing including encapsulation/decapsulation and frame validation
Scalable throughput to 100+ Gbps based on pipelined AES-GCM cryptography with optimized latency

Standards compliant (IEEE 802.1AE)
Solution standalone or integrated with Ethernet interface controllers
Per frame security processing including encapsulation/decapsulation and frame validation
Scalable throughput to 100+ Gbps based on pipelined AES-GCM cryptography with optimized latency

The MAC-SEC-1G IP core implements a compact and configurable custom-hardware protocol engine for the IEEE 802.1AE (MACsec) standard.
It supports all cipher suites provisioned by the MACsec standard and the VLAN-in-Clear improvement and is silicon- and performance-optimized for networks operating up to 1Gbps.