QuickSec/MACsec Toolkit

Embeddable 802.1AE and 802.1X-REV (formerly 802.1af) Implementations for any Environment

Driven by building solutions to solve compliance requirements, the QuickSec/MACsec Toolkit enables developers to embed MACsec capabilities in to new and existing products.  QuickSec/MACsec is suitable for Ethernet bridges, routers, and hosts. QuickSec/MACsec is the first security toolkit in the market to support this new Ethernet security standard.  This toolkit is highly portable, well documented and commented ANSI C source code suitable for a wide range of platforms.

Complete MAC Security Solution

MACsec specifies how all or part of a LAN network can be transparently secured. MAC Security provides connectionless user data confidentiality, frame data integrity, and data origin authenticity. The MACsec security architecture composes two main components, an authenticated key agreement protocol defined in 802.1X-REV, and a data plane protocol which protects frames transmitted on the LAN know as MACsec.

Conform to the Latest Standards

Fully compliant with the latest IEEE standards, QuickSec/MACsec provides a source code toolkit that implements the security functionality defined in IEEE standards 802.1X, 802.1AE and 802.1X-REV (formerly 802.1af). 

The enduring SafeNet commitment to the data security market and its standardization efforts assure that the QuickSec/MACsec implementation will stay current with these complex and evolving standards that are the foundation for building Layer 2 security solutions.

SafeNet’s extensive experience and participation in the field of security protocol standardization (in the IETF, IEEE and other organizations) guarantees that our customers always have a head-start in the new developments of security standards.

Hardware and Software Support

The QuickSec/MACsec toolkit includes an optimized software implementation of AES-GCM and 802.1AE transforms.  The toolkit provides a well defined API for interfacing between the hardware and software components, allowing for simple integration with third party hardware. QuickSec/MACsec is pre-integrated with SafeNet’s SafeXcel IP cores including the EIP-38 AES-GCM IP core, the EIP-60 look-aside MACsec packet engine and the EIP160 in-line MACsec packet engine.  The solution supports speeds scaling beyond 40Gbps.

As the SafeNet MACsec solution offers an entire and functional software implementation of the protocol core and key management functionality our customers are able to test, simulate, and prototype their solutions early (even before the actual hardware is taped off) and reach their markets quickly, with less development cost, while significantly reducing risk.

Layer 2 & Layer 3 Security

QuickSec/MACsec is part of the industry leading QuikcSec family of products.  QuickSec/IPsec is the world’s foremost IPsec toolkit.  Combining the MACSec and IPsec toolkits in a single product provides total wired security at layer 2 and 3, and provides the possibility of leveraging the common XML policy management interface, as well as the EAP, TLS, and cryptographic libraries of the QuickSec product family.

Benefits

• Complete MACsec, Authentication, and Key Management Implementations
• Build a wide range of products
  • Bridges
  • Routers
  • Hosts
• Scalability, Reliability and Interoperability
• IEEE Standards Based Solution
• Hardware IP and Toolkit Available from a Single Vendor
• Small Footprint and Deterministic Memory Allocation
• Future proof – The MACsec/QuickSec Toolkit Keeps Up With the Evolving Standards
• Reduced Development Cost
• Bring Product to Market Fast
• World-wide OEM Customer Support

Key Features & Technical Specifications

Complete Software Implementation

• 802.1X-REV. The implementation follows the version 2.0 of the draft.
• 802.1X-REV.  The toolkit will continue to support draft updates through to the final version.
• 802.1AE with AES-GCM cipher
• Pre-shared keys or EAP for key management
• EAP-TLS, other methods available on request
• API's for interfacing to hardware 802.1AE implementations.
• API's for policy configuration and management
• XML based policy configuration
• RADIUS
• AES-GCM

Standards Compliance

• IEEE 802.1AE
• IEEE 802.1X-REV
• IETF RFC 3748 – EAP
• IETF RFC 2716 – EAP-TLS
• IETF RFC 2865 – RADIUS
• IETF RFC 2459 – X.509
• IETF RFC 3280 – CRL Profile
• IETF RFC 4346 – TLS 1.1

Pre-integrated with SafeNet IP

• EIP-38 – AES-GCM
• EIP-60 – Look-aside Packet Engine
• EIP-160 – In-Line Packet Engine