SafeXcel-5160 Enterprise Security Processor

Overview

The SafeXcel-5160 is a high-performance enterprise security processor specifically designed for OEMs building security appliances for the Small and Medium Enterprise market. The processor is primarily targeted at VPN gateway appliances with bandwidths of at least OC3/STM-1 rate.

The SafeXcel-5160 integrates an industry-standard 32-bit RISC processor with a unique inline security packet engine and flow processor. The SafeXcel-5160 achieves 310 Mbps IPsec throughput with 64-byte packets, and 600 Mbps IPsec throughput with average-size and larger packets. The SafeXcel-5160 is fully compatible with SafeNet’s SafeXcel-5140 and SafeXcel-5150 Enterprise Security Processors and provides OEMs an easy migration path in building higher-performance appliances.

State-of-the-art security and networking features

The SafeXcel-5160 is a unique product, designed to provide superior security functionality, performance, and cost advantage to the SME market. While the SafeXcel-5160 provides hardware implementations for 3DES, AES, SHA-1, MD5, random number generation, and public-key acceleration, the SafeXcel-5160 also features packet filtering and flow processing, NAT, NAT-T, NAPT, IPsec and Secure Realtime Transport Protocol (SRTP) processing, as well as SHA-256, AES Galois Counter Mode (GCM), AES-XCBC-MAC-96, and Extended Sequence Numbers.

Line-rate small packet throughput

As high bandwidths become more widely available to SMEs, the SafeXcel-5160 processor is precisely delivering the throughput levels this market requires, ranging from 310 Mbps for small packets to 600 Mbps for average-size and larger packets. While existing security-enabled processors can handle large IPsec packets at reasonable data rates, they often perform very poorly when it comes to processing small packets. In contrast, the SafeXcel-5160 chip excels at all packet sizes and maximizes headroom on the embedded processor.

Cost Effectiveness

SMEs are looking for powerful yet economical networking security appliances. With a sub-$80 price tag, the SafeXcel-5160 is the most cost-effective security processor in its performance class – dramatically improving material cost and margins for networking equipment OEMs.

Integration and Time to market

The SafeXcel-5160 chips are pre-integrated with SafeNet’s QuickSec Unified security platform to provide a complete, proven hardware/software security solution. This pre-integration significantly reduces design and integration cycles, resulting in accelerated time to market and reduced project cost for OEMs.

Features

The SafeXcel-5160 provides hardware implementations for 3DES, AES, SHA-1, MD5, random number generation, and public-key acceleration. The enterprise security processor also features packet filtering and flow processing, NAT, NAT-T, NAPT, IPSec and Secure Real-time Transport Protocol (SRTP) processing, as well as SHA-256, AES Galois Counter Mode (GCM), AES-XCBC-MAC-96, and Extended Sequence Numbers.

Power Reduction

Power consumption is a major concern among system designers as it affects total system cost, density, and performance. The SafeXcel-5160 reduces system power requirements in two significant ways: first by replacing a 2-chip solution with a single chip, and second by providing dedicated IPSec packet processing hardware, which is substantially more power-efficient than using a general purpose processor.

Complete Security Solution

The SafeXcel-5160 Enterprise Security Processor is a key component of SafeNet's fully integrated security solutions for OEMs in telecommunications, SME, SOHO, and Semiconductor markets. SafeNet OEM products include QuickSec security software, SafeXcel hardware security processors and silicon-proven semiconductor IP. This complete security platform enables vendors to build complete network security solutions while reducing total cost and time to market.