English
You are here:
IPsec Security Processor
Core implements the IPsec and SSL/TLS security standard at high data rates that require the cryptographic processing acceleration. The ISP1-128 core is tuned for applications with the data rates of 10-100 Gbps in advanced ASIC geometries.
The design is fully synchronous and available in both source and netlist form.
The design is fully synchronous and available in both source and netlist form.
Features
- Support for IPv4 and IPv6 packets
- Support for the IPsec ESP and AH protocols:
- Insertion / removal of headers and trailers; internal padding
- Transport and tunnel modes of operation
- Integrity Check Value (ICV) insertion and validation
- Transport and Tunnel Adjacency (AH+ESP combination) support
- Support for IPsec ESP encryption algorithms per RFC 4835:
- NULL
- AES-CBC (128- and 256-bit keys)
- TripleDES-CBC
- Support for IPsec ESP (and AH for –AH option) authentication algorithms per RFC 4835:
- HMAC-SHA1-96
- AES-XCBC-MAC-96
- Optional support for SSL 2.0, 3.0 and TLS 1.0. 1.1, and 1.2 (-SSL option). Capable of supporting simultaneous SSL/TLS and IPsec data flows. SSL/TLS cipher support includes:
- Block ciphers with hash-based authentication
- AEAD ciphers
- Support for SSL / TLS block ciphers:
- RC4
- TripleDES-CBC
- AES-CBC (128-, 192- and 256-bit keys)
- AES-GCM (128- and 256-bit) (-GCM option)
- Support for SSL / TLS hashes:
- MD5 SHA-1
- SHA-256
- SHA-384
- SHA-512
- Additional cryptographic algorithms available upon request
- Built-in cryptographically secure pseudorandom number generator
- Replay protection
- Scalable high performance. Scaling is achieved through adjustable number of encryption engines inside and configurable throughput of the connection parameters memory .
- FIFO-like interface with flexible bit width; simple integration into the datapath.
- Dedicated encryption and decryption configurations, duplex option with shared connection context memory available.
- Support for Galois Counter Mode Encryption and authentication (GCM), Galois Message Authentication (GMAC)
- Flow-through design
- Built-in connection parameters database and lookup engine
- OpenSSL integration (integration with other packages upon request)
- Optional statistics block
- No segmentation/reassembly support in the IPsec transport mode
View IPsec Security Processor full description to...
- see the entire IPsec Security Processor datasheet
- get in contact with IPsec Security Processor Supplier