AES-GCM: Scalable Authenticated Encrypt/Decrypt Engine

GENERAL DESCRIPTION

LancsNet AES-GCM fully supports NIST SP 800-38D and FIP-197 standards. This is a scalable AES-GCM design that could be configured for desired bandwidth from 2-16Gbps by the trade-off in area. The core is encapsulated with friendy interfaces and is ready for employed in applications such as Secure Real-time Transport Protocol (SRTP – IETF RFC 7714) and Transport Layer Security (TLS – IETF RFC 5228).

AES GCM
KEY FEATURES

Features

          • Specification recommended by NIST SP 800-38D
          • Data interface AMBA AXI-Stream 4
          • Scalable throughput up to 32 Gbps**
          • NIST FIP-197 compliant, support 128/192/256 key length
          • 96-bit GCM Initialization Vector
          • AMBA 4 AXI4-Stream compatible

** fully-pipelined AES-GCM on Virtex7 XC7VX550T

Configurability

        • Tunable pipeline stages and throughput
        • Selectable key length
        • Adjustable session data length

Technology Agnostic

        • VHDL source code available, designed and tested for FPGA* and ASIC

* In production with customers

Example Implementation – LancsNet AES-GCM (area-optimized version)

Family Part

Fmax

(MHz)

LUT LUTRAM FF BRAM DSP IP Config
Artix7 XC7A100T 220.07 3211 0 2884 0 0 AES-GCM 128
Kintex7 XC7K325T 312.79 3225 0 2884 0 0 AES-GCM 128
Virtex7 XC7VX550T 332.00 3225 0 2884 0 0 AES-GCM 128
Artix7 XC7A100T 198.45 3316 0 3105 0 0 AES-GCM 192
Kintex7 XC7K325T 258.13 3316 0 3105 0 0 AES-GCM 192
Virtex7 XC7VX550T 271.08 3316 0 3105 0 0 AES-GCM 192
Artix7 XC7A100T 220.07 3304 0 3268 0 0 AES-GCM 256
Kintex7 XC7K325T 342.94 3304 0 3268 0 0 AES-GCM 256
Virtex7 XC7VX550T 360.00 3304 0 3268 0 0 AES-GCM 256

Example Implementation – LancsNet AES-GCM (performance-optimized version)

Family Part

Fmax

(MHz)

LUT LUTRAM FF BRAM DSP IP Config
Artix7 XC7A100T 198.10 15K 1 4751 0 0 AES-GCM 128, Fully-pipelined
Kintex7 XC7K325T 256.67 15K 1 4751 0 0 AES-GCM 128, Fully-pipelined
Virtex7 XC7VX550T 286.29 15K 1 4751 0 0 AES-GCM 128, Fully-pipelined
Artix7 XC7A100T 198.10 17K 1 5496 0 0 AES-GCM 192, Fully-pipelined
Kintex7 XC7K325T 256.47 17K 1 5496 0 0 AES-GCM 192, Fully-pipelined
Virtex7 XC7VX550T 282.81 17K 1 5496 0 0 AES-GCM 192, Fully-pipelined
Artix7 XC7A100T 184.06 18K 2 6203 0 0 AES-GCM 256, Fully-pipelined
Kintex7 XC7K325T 243.31 18K 2 6203 0 0 AES-GCM 256, Fully-pipelined
Virtex7 XC7VX550T 255.89 18K 2 6203 0 0 AES-GCM 256, Fully-pipelined

    APPLICATIONS

    IPSec hardware accelerators, security gateway, cloud computing, data center, edge router, edge networking for IoT data aggregation, specialized authenticated encrypt/decrypt devices, Secure Real-time Transport Protocol (SRTP – IETF RFC 7714) and Transport Layer Security (TLS – IETF RFC 5228).

     An example application of the AES-GCM IP core in VPN engine

    aes gcm app
    DELIVERABLES

    The IP core and the simulation testbench are provided with extensive documentation and technical support from our technical teams. By default, the encrypted format IP core is provided, full source code is available for interested partners/developers under a specific agreement

    FOR DEMO ON HARDWARE AND SIMULATION
    PRICING AND FURTHER INFORMATION

    Request for quote & datasheet at sales@lancsnet.com