Posedge CRDMA Engine (Crypto DMA)

Overview

PE-CRDMA is a DMA (AHB/AXI) engine with crypto blocks to off-load crypto engine processing. The engine is used in conjunction with a protocol processor to realize CRDMA, MACSEC protocols. The IP is flexible to route data between the crypto and authentication blocks for efficient data throughput.

PE-CRDMA provides a DMA type of interface for programming pointers to the security association data, packet pointers. The DMA performs scatter/gather data fetching and security association data along with the keys. The state machine schedules the crypto engines based on the protocol selection and packet boundaries. The hardware engines perform the encryption and authentication in sequence or in parallel.

Features

The following are the salient features of the PE-CRDMA Processing Engine

• Suitable for ESP or AH protocol
• Encryption/Authentication runs in parallel or in succession.
• Encryption Engines
• AES
• 128, 192 and 256 bit modes
• CBC, ECB, CTR, CFB, OFB modes of operation
• TDES
• Optional DES operation
• CBC, ECB, CTR, CFB, OFB modes of operation
• RC4
• Kasumi
• SNOW 3G
• Authentication Engines
• SHA-1
• SHA-256
• SHA-512
• MD-5
• AES-GCM
• AES-CBC
• AES-xCBC
• Kasumi
• SNOW 3G
• HMAC operation for all the Authentication Engines
• Bus Interface (multiple options)
• AXI
• AHB
• Up to 200 MHz in 90nm
• Gate Count
• 60K gates to 200K gates (scalable with performance, crypto engines)

• Security throughput of Cryptographic Engines @ 166 MHz in 130 nm
• DES             - 2400 Mbps
• 3DES           - 1100   Mbps
• AES 128       - 1500 Mbps
• AES 192       - 1320 Mbps
• AES 256       - 1200 Mbps
• MD5             - 2600 Mbps
• SHA1           - 2200 Mbps
• SHA256        - 1560 Mbps
• SHA512        - 1000 Mbps
• Kasumi         - 1000 Mbps
• SNOW 3G    - 1500 Mbps
• AES Core engine runs up to 3.2 Gbps in 90 nm @ 300 MHz
• Optional RAM to counter BUS latencies.
• Works with PE-True Random Number, Psuedo Random Number and Public Key Cryptography Engine

Applications

The PE-CRDMA is suited to realize security a variety of security blocks like

• IPSEC/SSL VPN
• MACSEC Engine
• Crypto Sub-Systems

Benefits

• Independent block to perform Crypto Processing
• Can be easily integrated into an existing data path
• Packet interface and Key interface is programmable
• Multiple flavors of design for different performance requirements (different pipeline stages

Deliverables

• Fully Synthesizable RTL
• Testbenches and Testcases
• ASIC Synthesis Scripts
• FPGA Synthesis Scripts
• Documentation

 

Tech Specs

Part Number	Posedge-CRDMA
Short description	Posedge-CRDMA engine
Provider:	Posedge Inc
Portability	ASIC, FPGA, Structured ASIC
Type	Soft
Maturity	FPGA Implementation
Availability	Now
FPGA Technology:	Xilinx: Virtex-5 LX