SafeXcel IP MACsec Security Packet Engine

Silicon-proven Intellectual Property (IP) for accelerating MACsec

As alternative to the MACsec Inline Security Engine, which provides a full solution including hardware based Frame Classification, the SafeXcel IP product family also provides the MACsec Security Packet Engine. The MACsec Security Packet Engine is one of the major building block of the MACsec Inline Security Engine, but is also available as stand alone offering. The MACsec Security Engine does not include the Frame Classification functionality, but does incorporate all required MACsec frame transform functions.

Features

• Performing MACsec frame transforms including AES-GCM encryption and:
• SecTAG insertion and removal
• ICV checking/removal and calculation/insertion
• Sequence number checking
• Decoupled control and data plane operation
• IEEE 802.1ae compliant
• Low latency
• Supports 5-stage pipeline, allowing the core to accept frame data back-to-back
• Supports multiple ports, SecY's and Security Channels simultaneously
• Multiple speed grades available with core speed up to 24 Gbps at maximum clock speed
• No external SDRAM or CAM required
• Fully supported by the MACsec toolkit!

Cryptography support

• AES-GCM

Deliverables

• Synthesizable Verilog RTL source code
• RTL test bench
• Simulation script
• Synthesis script
• User documentation
• Driver software

Benefits

• Superior throughput across all frame sizes
• Integrated with MACsec software toolkit
• Easy to integrate
• Flexible, modular architecture
• High degree of integration
• World-class support