AES-GCM: Scalable Authenticated Encrypt/Decrypt Engine
GENERAL DESCRIPTION
LancsNet AES-GCM fully supports NIST SP 800-38D and FIP-197 standards. This is a scalable AES-GCM design that could be configured for desired bandwidth from 2-16Gbps by the trade-off in area. The core is encapsulated with friendy interfaces and is ready for employed in applications such as Secure Real-time Transport Protocol (SRTP – IETF RFC 7714) and Transport Layer Security (TLS – IETF RFC 5228).
KEY FEATURES
Features
-
-
-
-
- Specification recommended by NIST SP 800-38D
- Data interface AMBA AXI-Stream 4
- Scalable throughput up to 16 Gbps**
- NIST FIP-197 compliant, support 128/192/256 key length
- 96-bit GCM Initialization Vector
- AMBA 4 AXI4-Stream compatible
-
-
-
** fully-pipelined AES-GCM on Virtex7 XC7VX550T
Configurability
-
-
-
- Tunable pipeline stages and throughput
- Selectable key length
- Adjustable session data length
-
-
Technology Agnostic
-
-
-
- VHDL source code available, designed and tested for FPGA* and ASIC
-
-
* In production with customers
Example Implementation – LancsNet AES-GCM (area-optimized version)
| Family | Part |
Fmax (MHz) |
LUT | LUTRAM | FF | BRAM | DSP | IP Config |
| Artix7 | XC7A100T | 220.07 | 3211 | 0 | 2884 | 0 | 0 | AES-GCM 128 |
| Kintex7 | XC7K325T | 312.79 | 3225 | 0 | 2884 | 0 | 0 | AES-GCM 128 |
| Virtex7 | XC7VX550T | 332.00 | 3225 | 0 | 2884 | 0 | 0 | AES-GCM 128 |
| Artix7 | XC7A100T | 198.45 | 3316 | 0 | 3105 | 0 | 0 | AES-GCM 192 |
| Kintex7 | XC7K325T | 258.13 | 3316 | 0 | 3105 | 0 | 0 | AES-GCM 192 |
| Virtex7 | XC7VX550T | 271.08 | 3316 | 0 | 3105 | 0 | 0 | AES-GCM 192 |
| Artix7 | XC7A100T | 220.07 | 3304 | 0 | 3268 | 0 | 0 | AES-GCM 256 |
| Kintex7 | XC7K325T | 342.94 | 3304 | 0 | 3268 | 0 | 0 | AES-GCM 256 |
| Virtex7 | XC7VX550T | 360.00 | 3304 | 0 | 3268 | 0 | 0 | AES-GCM 256 |
Example Implementation – LancsNet AES-GCM (performance-optimized version)
| Family | Part |
Fmax (MHz) |
LUT | LUTRAM | FF | BRAM | DSP | IP Config |
| Artix7 | XC7A100T | 198.10 | 15K | 1 | 4751 | 0 | 0 | AES-GCM 128, Fully-pipelined |
| Kintex7 | XC7K325T | 256.67 | 15K | 1 | 4751 | 0 | 0 | AES-GCM 128, Fully-pipelined |
| Virtex7 | XC7VX550T | 286.29 | 15K | 1 | 4751 | 0 | 0 | AES-GCM 128, Fully-pipelined |
| Artix7 | XC7A100T | 198.10 | 17K | 1 | 5496 | 0 | 0 | AES-GCM 192, Fully-pipelined |
| Kintex7 | XC7K325T | 256.47 | 17K | 1 | 5496 | 0 | 0 | AES-GCM 192, Fully-pipelined |
| Virtex7 | XC7VX550T | 282.81 | 17K | 1 | 5496 | 0 | 0 | AES-GCM 192, Fully-pipelined |
| Artix7 | XC7A100T | 184.06 | 18K | 2 | 6203 | 0 | 0 | AES-GCM 256, Fully-pipelined |
| Kintex7 | XC7K325T | 243.31 | 18K | 2 | 6203 | 0 | 0 | AES-GCM 256, Fully-pipelined |
| Virtex7 | XC7VX550T | 255.89 | 18K | 2 | 6203 | 0 | 0 | AES-GCM 256, Fully-pipelined |
APPLICATIONS
IPSec hardware accelerators, security gateway, cloud computing, data center, edge router, edge networking for IoT data aggregation, specialized authenticated encrypt/decrypt devices, Secure Real-time Transport Protocol (SRTP – IETF RFC 7714) and Transport Layer Security (TLS – IETF RFC 5228).
An example application of the AES-GCM IP core in VPN engine
DELIVERABLES
The IP core and the simulation testbench are provided with extensive documentation and technical support from our technical teams. By default, the encrypted format IP core is provided, full source code is available for interested partners/developers under a specific agreement
FOR DEMO ON HARDWARE AND SIMULATION
Contact us sales@lancsnet.com
PRICING AND FURTHER INFORMATION
Request for quote & datasheet at sales@lancsnet.com
Very interesting core